Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/74d6fb88-ce57-30cd-9a73-2207313306f4.roa
File:                     74d6fb88-ce57-30cd-9a73-2207313306f4.roa (raw, json)
Hash identifier:          i6JpdtCEforQ/ww6wpS0gcmRCoN3xg6OMtkZSXLOSsk=
Subject key identifier:   86:50:EE:F8:84:1A:FC:F3:C0:15:9A:5E:96:67:EE:EC:7C:48:A7:37
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D79367B211FD1E01B1FB1C040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/74d6fb88-ce57-30cd-9a73-2207313306f4.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     6379
IP address blocks:        2001:470:4a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:36:7b:21:1f:d1:e0:1b:1f:b1:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=c13d2658-286d-4aa6-8fe2-e60f8826db4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:93:33:fd:39:4d:60:fe:26:f3:2b:a9:2b:31:
                    f0:5d:1f:62:44:df:1c:7b:bc:aa:d2:a3:66:29:70:
                    86:72:d7:42:7a:71:b5:66:81:e1:b9:5c:f9:1b:fd:
                    f1:8a:b2:fc:51:8f:ef:3d:48:cb:40:18:ff:eb:51:
                    65:a4:d3:ef:f0:e9:18:24:e9:8c:8e:4b:65:91:d5:
                    db:3f:d7:5f:ec:f8:b9:87:07:c6:8a:79:6a:8c:1c:
                    11:75:dc:c7:56:6e:0a:cb:7d:08:29:41:b8:7f:46:
                    ac:0f:71:1d:b2:44:5f:dc:d7:a6:a9:7d:07:f1:d3:
                    93:be:d0:59:1c:e2:9e:cf:5f:67:4d:ea:6e:91:b5:
                    dc:6b:b3:05:d8:47:f1:b1:3e:4f:d9:bc:b5:62:c2:
                    40:d4:03:eb:cd:2a:95:07:a8:d3:ed:0d:51:d6:3f:
                    45:6e:37:94:b5:ea:5d:e8:da:80:44:db:51:c7:a7:
                    73:56:37:8f:e3:34:58:2d:39:88:7c:c9:3f:9d:87:
                    20:47:a2:1e:64:dc:a7:68:fd:76:cb:d3:36:15:f3:
                    11:9e:0a:9e:18:ab:ce:cb:4f:b3:67:2e:81:17:14:
                    e5:7c:3f:75:e0:29:e8:cb:d4:f6:09:05:61:7d:04:
                    d6:e8:be:6b:ed:f4:73:84:91:e2:4d:6e:88:d3:e7:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:50:EE:F8:84:1A:FC:F3:C0:15:9A:5E:96:67:EE:EC:7C:48:A7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/74d6fb88-ce57-30cd-9a73-2207313306f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:4a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:de:77:5b:8d:dc:92:1b:20:09:75:95:f6:d3:cc:57:26:53:
         39:8d:c5:6b:c6:dc:79:57:e0:2f:1e:db:0f:81:93:78:dc:e4:
         d2:3b:c9:b4:8e:3a:df:ee:a6:c8:fc:e6:70:94:fd:1b:5b:ca:
         93:a1:53:dd:b3:64:f0:1c:66:fe:bd:ea:e8:e0:dd:37:34:7f:
         54:cb:6f:9c:e9:23:d0:c6:0a:94:bd:52:73:bf:83:e9:f9:94:
         5c:54:ba:23:cd:5d:6b:5e:69:66:63:5f:90:ab:61:70:47:14:
         ad:49:a4:64:19:28:b1:ce:1b:03:31:d3:cc:5e:f3:ae:67:55:
         39:6a:bf:4f:da:de:f0:5d:13:b2:5a:46:e7:06:4f:0e:91:b5:
         7b:7b:e4:8a:14:a7:ec:f5:e7:92:ee:30:1e:dd:76:6e:bf:36:
         04:32:90:6b:ec:fa:28:05:7c:31:10:d8:75:29:df:f2:51:44:
         fc:69:b3:36:85:84:40:02:ce:06:a3:61:40:e8:ef:80:f4:92:
         90:61:48:1f:a3:ef:be:33:1f:64:21:70:c8:1d:15:eb:81:9c:
         61:91:a8:a7:e6:30:01:62:b7:ef:b3:a5:f8:0a:61:02:9a:71:
         45:05:40:58:d4:9c:06:97:38:de:e3:70:e7:44:67:c0:8f:f7:
         a0:17:f8:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----