Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/634cc418-827c-3ca5-8e66-99065fd8198b.roa
File:                     634cc418-827c-3ca5-8e66-99065fd8198b.roa (raw, json)
Hash identifier:          zJCqKyqiAc5aiJx5smg5qgDxchdSCw56mP8+ZOe9C5M=
Subject key identifier:   32:F3:E4:2F:6F:A1:73:71:BC:B0:01:54:95:2D:58:DB:9A:03:E6:FE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844E51992E2DF18C7C5E754DF40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/634cc418-827c-3ca5-8e66-99065fd8198b.roa
Signing time:             Thu 15 Feb 2024 02:30:47 +0000
ROA not before:           Thu 15 Feb 2024 02:30:47 +0000
ROA not after:            Wed 15 May 2024 01:30:47 +0000
asID:                     41695
IP address blocks:        2001:470:1eb::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e5:19:92:e2:df:18:c7:c5:e7:54:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 15 02:30:47 2024 GMT
            Not After : May 15 01:30:47 2024 GMT
        Subject: CN=3ad99ae9-2c05-4ce2-b544-ca066f8f5ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:95:65:70:5b:f5:0f:cd:5b:52:e1:d1:d2:ea:
                    a2:06:55:d3:be:b2:d8:49:e1:38:77:95:92:78:ff:
                    70:af:c7:05:45:04:0b:b0:79:3c:37:e3:e8:3b:eb:
                    12:8d:6e:8e:b4:3a:46:f7:ce:77:b0:e2:90:21:e1:
                    b2:91:c2:a1:af:13:a4:ed:1e:65:89:61:20:29:a7:
                    9e:f0:f5:49:4b:73:96:b3:32:53:fe:07:5a:4f:12:
                    df:1a:32:96:a2:df:39:b3:b4:ae:5b:07:0c:5d:e1:
                    90:6b:61:96:25:a3:e9:d1:81:03:52:f4:41:c4:f7:
                    18:33:5c:0b:a3:d1:6b:c6:08:cf:7e:dd:ee:c8:bc:
                    4e:86:80:c9:84:0e:7f:12:c3:8e:4b:79:6e:f6:05:
                    39:c4:df:5d:82:ae:ba:b8:46:17:dd:64:e4:02:31:
                    d6:c0:a1:b7:12:47:c1:97:43:e8:8b:82:ea:7d:ee:
                    6c:12:d4:40:89:b0:ba:14:a7:9e:e1:f5:d8:e0:66:
                    45:9a:46:e9:de:0b:3e:21:32:57:d6:92:59:98:2b:
                    78:c6:ff:e3:f5:35:6d:d0:ad:99:4c:a9:b1:6d:ba:
                    c2:7c:45:43:bf:7d:a4:9b:2a:81:97:c7:15:a7:74:
                    62:87:43:36:88:07:2e:95:5c:b7:89:39:b9:87:67:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F3:E4:2F:6F:A1:73:71:BC:B0:01:54:95:2D:58:DB:9A:03:E6:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/634cc418-827c-3ca5-8e66-99065fd8198b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:de:fb:ce:5d:27:e6:45:6d:e8:5a:fb:68:0b:60:0e:e1:
         28:24:37:24:36:a7:e1:d2:b2:ff:2b:eb:b1:c4:c0:05:93:c4:
         44:bf:72:c6:bd:8f:07:a3:41:ed:be:ce:7d:e2:a6:c2:9d:71:
         8d:bc:d1:16:2d:f8:98:fb:13:31:2c:c9:7d:05:fc:f0:5d:64:
         7c:eb:8d:40:f8:17:6f:3e:e9:e2:a0:24:f8:6b:f9:67:35:a7:
         57:af:54:55:4d:ac:f6:d4:55:a7:c1:68:21:9c:6b:df:9f:f8:
         5c:76:74:73:dc:4d:04:f0:da:13:f8:e6:a0:30:62:a2:d6:49:
         d6:4c:09:a5:6b:92:3e:e2:1f:17:6a:2d:9c:a3:3c:f6:54:ca:
         78:37:ac:34:27:b2:8f:ea:71:d3:22:ca:74:bf:80:64:1e:59:
         1d:e4:3e:8c:dd:78:d0:63:1b:46:db:49:23:8e:50:1e:c3:85:
         07:42:0b:4f:10:28:7e:e5:09:e3:79:45:b7:be:d2:78:c7:3f:
         a1:a2:38:e0:a9:71:a7:28:4f:fa:f7:a5:a7:27:7a:ed:af:85:
         61:79:05:7b:e7:13:7e:e1:3d:4b:ac:fc:d9:58:55:cf:6a:bb:
         48:35:fb:08:0d:51:3d:3f:39:c9:19:27:c1:00:39:3a:3f:40:
         ee:2e:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----