Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/547d002c-f254-36fb-af61-8c18a8f82fb5.roa
File:                     547d002c-f254-36fb-af61-8c18a8f82fb5.roa (raw, json)
Hash identifier:          3oF046eC44s62Tomg1PuXT7Z4/8/qrkx6GwMUlzqr30=
Subject key identifier:   F4:F1:07:EA:32:1E:DC:29:EA:26:8B:B5:E9:25:5A:C4:EE:E9:DF:53
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA63DE7EDF18C5BE03D6840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/547d002c-f254-36fb-af61-8c18a8f82fb5.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     41678
IP address blocks:        2001:470:38::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:3d:e7:ed:f1:8c:5b:e0:3d:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=541ad9ba-2a42-4286-88d0-9d0cbf23b282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f4:07:a5:2f:ab:6c:17:6f:6e:a1:8b:d0:50:
                    22:e3:c3:b2:c3:24:7d:71:51:f4:17:ad:bb:5b:d5:
                    80:41:c4:f8:29:00:cf:94:6c:09:29:e6:a6:70:32:
                    27:30:bb:ec:f5:67:49:42:96:4a:67:9b:e6:0c:f7:
                    f5:4c:4a:26:cf:68:9b:11:c0:3f:46:55:04:d1:4f:
                    72:39:e0:8d:5e:6f:b3:cc:37:dd:e3:00:b9:e2:d9:
                    93:77:5e:94:b5:36:b1:6d:cd:0d:df:14:c3:2d:17:
                    b8:25:fc:c0:f9:9c:29:81:e2:8b:7b:d9:9f:b3:ec:
                    e9:d7:50:83:82:5e:1b:1a:b5:37:bd:3e:10:5f:04:
                    2d:5a:19:c1:d6:c2:09:84:4f:87:80:b9:a4:6c:79:
                    76:77:59:fa:a2:32:63:a1:ec:59:f9:b4:58:14:33:
                    06:6c:02:05:a1:89:3f:06:21:ee:c7:8f:50:38:8d:
                    00:b8:76:c8:cc:81:8f:b9:85:b1:0a:80:eb:1f:50:
                    e9:dc:9f:b2:36:71:64:38:9f:f0:8a:d2:7e:47:2e:
                    1c:c7:f2:42:96:b0:40:76:96:8b:39:d9:75:71:6f:
                    9b:93:48:91:58:44:d8:22:73:4a:07:55:c0:3e:e0:
                    5d:42:65:d6:8a:2d:b7:39:0d:9f:30:cf:a8:a7:c9:
                    42:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:07:EA:32:1E:DC:29:EA:26:8B:B5:E9:25:5A:C4:EE:E9:DF:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/547d002c-f254-36fb-af61-8c18a8f82fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:38::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3f:80:7c:a3:a5:9f:7e:bd:ae:bd:7f:86:de:94:b1:c9:20:
         d9:72:4e:6a:7b:df:dc:d5:db:6a:79:1c:e6:3c:4f:03:da:f2:
         3e:f3:4b:24:4a:c4:96:c4:c4:7d:c1:a7:ba:c1:56:99:fd:ee:
         63:96:30:a7:ef:6d:44:e6:f2:d5:d3:79:5c:6b:52:5b:70:49:
         c5:e5:47:af:8b:cb:fd:df:e2:b5:6e:64:6e:73:97:18:1d:78:
         aa:b6:6f:64:66:af:6d:3c:d9:86:8c:e6:7a:ac:96:c9:f2:9d:
         66:57:62:49:63:4b:25:48:1d:21:04:ea:4b:b9:a7:0a:b4:5c:
         91:b5:81:68:a4:ae:be:f5:c3:32:3d:60:a7:38:8f:e4:16:42:
         08:2f:de:f0:aa:45:30:b3:6f:01:0d:c7:c5:3a:1f:ca:b6:b5:
         75:71:a4:67:94:b9:9d:64:cb:7f:ac:2d:88:16:f0:9f:05:44:
         36:95:ce:cc:ce:eb:5b:aa:25:e9:c8:07:5a:5f:18:b7:81:f6:
         d6:4a:52:ce:4a:2f:df:9d:60:b7:dc:d4:d7:e2:2e:a6:55:b0:
         e0:a1:ba:95:e8:bd:bb:5c:1e:87:de:6a:f5:9f:fd:67:a3:15:
         a8:43:16:96:7e:84:79:db:9a:f0:40:65:be:fb:ff:9a:de:ae:
         e0:c6:c3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----