Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c6cecd6-1bfe-325a-b648-63a4182f5778.roa
File:                     6c6cecd6-1bfe-325a-b648-63a4182f5778.roa (raw, json)
Hash identifier:          1CWy2ate51/8GFoCs7URTjH/aT8DYAsmTgczndzOM4U=
Subject key identifier:   9D:30:0D:00:75:A4:A8:07:42:08:D3:C6:B8:84:22:5E:CC:89:50:1E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648EA542897AC2CB69D1AB40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c6cecd6-1bfe-325a-b648-63a4182f5778.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     54620
IP address blocks:        2001:470:e1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:a5:42:89:7a:c2:cb:69:d1:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=d14d871f-961a-4d08-a09a-82188d754895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:69:d2:20:56:34:6d:a5:dc:36:e1:e8:0f:
                    1a:3d:c8:4d:84:5f:32:58:a1:ac:a2:9f:c8:24:79:
                    bb:54:ab:ed:e9:ac:2f:5c:e2:e7:49:ee:f5:8b:89:
                    6e:65:3b:e4:2d:94:05:90:c1:19:f7:59:c5:57:b1:
                    71:ae:d4:9e:8c:a9:50:bd:d9:79:fb:29:71:a5:c3:
                    5a:c5:66:ad:45:63:03:09:84:31:3a:7b:86:16:85:
                    21:80:1f:74:0f:10:f9:20:eb:d7:f5:8f:26:c1:a5:
                    ac:df:aa:a6:44:e9:61:80:b5:4c:17:e0:29:bc:99:
                    5e:b6:bf:fe:c2:89:8c:f5:b3:ac:38:6c:38:05:ab:
                    fa:8e:4d:43:57:79:79:87:71:25:82:67:1a:8c:a3:
                    75:3d:37:72:67:c6:cb:43:05:f9:12:cd:4f:8c:2b:
                    9e:61:48:98:24:b4:99:b2:fa:7a:6e:eb:6a:67:6b:
                    99:da:6a:11:94:ca:e2:ce:7f:e8:f1:3f:11:de:83:
                    40:92:a4:25:db:aa:80:68:89:9c:1f:a4:24:5c:09:
                    25:af:40:a6:53:16:1e:b8:71:6c:f2:23:f4:90:1e:
                    48:13:d2:04:00:fd:67:8b:4b:0c:16:72:de:54:7c:
                    0d:72:41:cb:68:31:7e:c5:5d:ce:d2:97:e1:80:3f:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:30:0D:00:75:A4:A8:07:42:08:D3:C6:B8:84:22:5E:CC:89:50:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c6cecd6-1bfe-325a-b648-63a4182f5778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:e1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:04:c9:dc:f3:75:8d:11:af:07:2d:7f:0e:67:7b:0b:28:
         7e:60:69:1e:55:f4:c1:17:4d:1d:ae:22:b0:88:c4:9a:96:7a:
         cb:7f:1c:61:66:36:2c:06:f3:00:dc:12:60:d0:aa:e8:be:d4:
         65:db:1d:aa:51:85:79:1e:e7:5a:97:87:bb:96:2c:ca:2b:6f:
         24:a7:8d:11:16:9a:ed:d9:dc:8f:2d:38:bd:79:17:01:f1:90:
         22:e2:f7:d9:df:20:e9:e6:3b:5c:eb:69:94:0c:a5:13:31:82:
         41:77:8a:6b:34:18:e3:ae:bb:9c:37:8d:90:68:ed:3b:09:16:
         54:ff:0f:a5:01:7b:c8:1f:46:16:51:2d:02:23:36:af:d4:fe:
         54:8b:f6:5d:4c:d8:9a:fb:51:9c:04:a6:c8:c6:a5:e0:e2:d8:
         85:a8:7b:33:38:8c:fd:f2:9c:a1:e1:5e:92:a1:98:77:23:a9:
         67:ec:0f:b0:1c:ee:5e:d3:e3:b6:3f:bb:70:42:5b:c9:ef:9b:
         66:a2:34:1d:67:76:7d:17:80:f2:0c:9e:b5:64:c2:91:2e:ca:
         ea:f5:af:19:76:93:c3:01:28:35:a1:38:0b:6d:c0:ef:6a:7f:
         c9:f6:45:33:52:84:47:4b:ba:db:38:60:a0:79:f4:42:3a:43:
         31:7e:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----