Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7967c941-0b98-337c-8868-cc4a1719a2f2.roa
File:                     7967c941-0b98-337c-8868-cc4a1719a2f2.roa (raw, json)
Hash identifier:          yojfrAn1NN4SPL0bOeWS/x4EB9d8NDwKZ4aFTFMWpHo=
Subject key identifier:   B9:80:53:6E:F5:47:F5:F6:7D:2A:D9:9D:22:12:DE:19:C9:39:68:2F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858401CEC547BD9611A9C529DC990
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7967c941-0b98-337c-8868-cc4a1719a2f2.roa
Signing time:             Fri 02 Dec 2022 12:00:00 +0000
ROA not before:           Fri 02 Dec 2022 12:00:00 +0000
ROA not after:            Sat 03 Jun 2023 04:00:00 +0000
asID:                     398266
IP address blocks:        2001:470:3b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:1c:ec:54:7b:d9:61:1a:9c:52:9d:c9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  2 12:00:00 2022 GMT
            Not After : Jun  3 04:00:00 2023 GMT
        Subject: CN=afe81ed5-213d-41d6-855a-283be1a3ef49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e7:3e:66:e4:b6:26:ca:91:64:fb:48:b7:93:
                    a9:73:46:98:04:b4:a9:65:e2:f3:ae:8a:14:d4:60:
                    d0:cd:9e:bc:de:53:ca:85:4e:b1:c5:67:d5:e1:04:
                    14:c2:d0:7a:c2:51:f7:7c:00:f2:82:7f:4a:67:c3:
                    e1:d1:77:af:64:20:1a:48:29:ed:d7:fd:d2:ef:5b:
                    d9:06:11:d0:a8:a2:62:e9:ee:ab:af:73:c1:ca:7c:
                    4a:6f:2f:bd:38:4e:fe:4a:7c:4c:09:b5:79:4d:6b:
                    b5:60:b1:be:e2:68:10:43:6f:79:31:56:de:29:81:
                    18:07:59:8e:c3:d1:23:67:58:76:78:e9:95:55:4a:
                    3c:5e:8a:e4:86:29:be:95:a6:ee:4e:6d:6f:e5:a3:
                    1c:d1:6c:d9:09:4d:5d:3b:e7:3e:15:2e:9a:0b:29:
                    57:0e:7d:19:8e:aa:ec:57:ca:f2:86:75:97:d4:95:
                    22:30:06:0a:2e:43:7f:0f:cb:3e:cc:0c:4c:bc:d3:
                    de:f8:9b:c4:ee:c1:2a:01:8e:eb:8a:fc:4d:62:ed:
                    e1:2f:2d:29:cd:f9:83:5a:fc:92:7b:56:54:a2:27:
                    7b:58:ce:0e:d6:57:47:de:cf:a8:5c:c1:a4:46:16:
                    a0:07:90:b7:19:ca:f7:39:80:fe:be:ea:74:bc:f3:
                    ec:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:80:53:6E:F5:47:F5:F6:7D:2A:D9:9D:22:12:DE:19:C9:39:68:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7967c941-0b98-337c-8868-cc4a1719a2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a6:b7:c4:ea:32:50:d1:fd:ed:66:e0:94:e2:06:3e:57:84:
         02:7a:54:d9:2a:c9:59:d1:0e:33:f7:b7:3b:18:65:ad:89:20:
         45:cd:2b:cc:f5:33:81:b1:31:16:48:a5:9d:63:3b:31:e8:3c:
         38:fc:03:b2:04:8f:3b:0c:08:62:da:dd:d1:69:65:20:98:d2:
         4b:5a:ee:ca:81:f8:8d:1a:64:29:2b:89:e4:6d:5f:e6:b9:e6:
         11:fe:a5:89:05:2b:79:ee:57:e3:c1:28:c1:67:c4:da:58:10:
         65:81:90:1d:62:51:2f:6f:f1:dc:f9:72:49:28:92:7d:09:bd:
         6d:b6:dc:11:55:0d:d1:a4:d1:23:9f:80:0b:7c:26:1b:c3:0e:
         3a:e9:79:18:4a:1c:5b:19:67:93:40:96:eb:fd:9b:0e:7a:f0:
         82:1f:6d:9a:14:17:b3:d0:3b:13:a2:7d:32:f5:0a:6a:50:9a:
         98:d8:2f:7a:68:c5:88:c6:ee:00:8c:f3:e8:d8:74:19:50:f4:
         2d:33:4b:7c:17:d3:c0:dc:99:c6:52:02:03:a5:03:c9:5f:21:
         af:21:80:25:48:ac:07:2e:85:93:ac:fd:3a:cb:68:c7:d7:6d:
         d0:27:57:b1:7c:d4:dd:88:05:ed:2c:a5:cc:1f:0f:13:5a:dc:
         10:eb:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----