Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64ead97c-8d96-365d-b08e-b897c38130f6.roa
File:                     64ead97c-8d96-365d-b08e-b897c38130f6.roa (raw, json)
Hash identifier:          jXgKlkOEWT8HvH2pJAt2HZ2SFZgVOPtVOjC/Ob2CbPA=
Subject key identifier:   5B:60:FD:A0:73:EC:CF:BD:DF:D7:EC:59:75:5B:7F:D2:17:52:43:37
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D793550173F26A5DF82723400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64ead97c-8d96-365d-b08e-b897c38130f6.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     9312
IP address blocks:        2001:470:134::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:50:17:3f:26:a5:df:82:72:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=1beaee1a-99f6-4430-8769-3823cc32e538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:31:c4:9a:fa:37:77:36:f4:b3:bb:6c:b9:ee:
                    a3:a0:61:40:8a:e3:1b:64:7d:2e:2c:57:ad:5a:36:
                    2c:c6:a1:49:d0:1d:3c:37:1a:e8:d6:e6:94:3f:ce:
                    54:a3:86:5b:80:2c:5a:dd:87:b1:f4:b6:bd:7d:b2:
                    dc:dc:02:1c:19:3a:18:c0:bf:73:75:5b:18:8b:05:
                    14:b4:b0:10:0e:22:d2:a9:2e:ec:b0:32:86:d3:a5:
                    b9:9b:b6:91:c0:5c:be:fd:80:65:24:e3:b4:53:3d:
                    9c:d0:e0:5b:76:5b:48:d6:25:cb:de:0f:d6:aa:4d:
                    07:d9:c5:b9:56:dc:7f:99:75:d4:db:dd:45:8c:f3:
                    a8:41:1b:b6:36:63:20:32:49:a2:a9:8d:a9:f5:26:
                    d7:3f:54:44:39:1c:aa:78:66:5d:4e:2b:63:7c:29:
                    e3:f6:7b:28:55:b7:29:a9:a7:5f:a5:a4:53:2f:fa:
                    0e:9e:b4:df:d5:01:67:34:fe:e5:c9:9b:f8:51:17:
                    21:79:05:76:93:77:42:5f:57:c0:7b:77:5a:97:6c:
                    6c:7d:e5:dc:41:89:cc:50:72:e1:28:8c:77:cd:ec:
                    26:c3:b2:2c:47:84:5b:39:27:92:9a:08:cd:dc:17:
                    50:7a:4f:70:aa:12:09:7a:12:11:18:55:c2:f7:93:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:60:FD:A0:73:EC:CF:BD:DF:D7:EC:59:75:5B:7F:D2:17:52:43:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/64ead97c-8d96-365d-b08e-b897c38130f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:9d:f7:b0:c5:6c:38:ec:db:ee:23:78:f9:3c:1a:eb:eb:2a:
         4d:04:4e:cf:b0:8f:a7:44:45:d2:13:11:ea:e5:09:e5:ce:4b:
         c0:ae:05:19:ae:1b:78:37:39:52:b0:8d:31:7c:0f:50:20:78:
         43:48:d9:bf:ba:b6:42:7e:f0:ba:37:14:3a:1a:56:c6:a6:77:
         e8:26:cf:9e:91:a4:d7:1f:fa:24:47:d2:5f:fa:a9:a1:0b:99:
         6c:9b:31:cf:a4:cc:70:31:3f:a8:c9:53:61:5f:4e:13:10:fc:
         dc:9b:a5:de:0b:3f:bc:28:19:1e:72:38:c0:05:24:c8:4a:b2:
         7d:1a:5c:e1:45:0a:68:19:28:9d:58:2f:0d:cb:8a:f3:cd:57:
         41:11:25:a9:b2:12:f2:b8:ec:8b:29:5e:b7:e8:e5:55:07:47:
         9e:fd:0a:b0:ab:44:76:b9:3b:de:9b:0c:d4:ac:f5:27:94:55:
         de:cf:e4:02:31:c7:52:66:51:94:5c:75:01:ef:ec:00:e9:59:
         b5:4c:b4:2a:48:38:c4:c1:76:e4:27:0a:33:e3:28:60:57:74:
         ef:fb:26:1f:c5:a6:fc:8e:4b:a5:df:4e:91:22:e3:01:4a:08:
         6b:3d:d9:14:61:1b:5f:18:ab:64:f3:66:49:26:93:55:b3:a1:
         f7:9b:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----