Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d474ee6-c6e0-316c-8f65-638ea8f3dede.roa
File:                     7d474ee6-c6e0-316c-8f65-638ea8f3dede.roa (raw, json)
Hash identifier:          WT5m1og7qRC38KPIaQwej7QjAkuDSwcIuLmOa2yTd/s=
Subject key identifier:   91:BF:F3:C0:75:D3:0B:54:E7:BC:D8:B1:E5:67:D2:98:70:79:79:46
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858407BD787C69D513C0E67E82D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d474ee6-c6e0-316c-8f65-638ea8f3dede.roa
Signing time:             Thu 05 Jan 2023 12:00:00 +0000
ROA not before:           Thu 05 Jan 2023 12:00:00 +0000
ROA not after:            Thu 06 Jul 2023 04:00:00 +0000
asID:                     1001
IP address blocks:        2001:470:5b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7b:d7:87:c6:9d:51:3c:0e:67:e8:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan  5 12:00:00 2023 GMT
            Not After : Jul  6 04:00:00 2023 GMT
        Subject: CN=fe200c93-c7d8-487e-b682-d45a7dbc6345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:54:bd:1d:55:07:a7:96:37:fd:d3:0d:1e:8a:
                    c2:32:9e:64:5a:79:bb:20:98:26:9c:af:c9:f7:4d:
                    2a:20:30:dc:7e:05:d5:e2:fb:91:09:ba:62:fb:e1:
                    d0:56:c8:e8:8e:28:49:75:5c:53:e7:98:3d:3e:cc:
                    8d:b0:aa:de:86:7c:76:c4:79:fe:8a:2d:9f:4a:08:
                    fa:9b:5e:34:85:71:3a:e9:43:03:18:6b:4b:2b:c6:
                    b4:2c:90:83:43:cf:60:37:42:8b:1c:4a:b8:12:76:
                    98:7b:ed:b5:6c:f8:ff:10:a4:21:df:98:2d:49:21:
                    90:9a:88:6a:8d:e8:e4:87:e5:dc:73:e8:51:53:57:
                    e6:bb:3f:94:bd:93:d0:69:fb:bb:88:84:84:24:00:
                    22:f3:f0:01:67:0c:07:ce:7b:e1:02:ff:c6:a6:0d:
                    a2:84:71:55:71:83:9c:60:ce:a3:24:1d:63:30:3a:
                    7a:96:6a:fd:49:86:3d:63:f5:e9:0f:13:e9:1f:ce:
                    b1:a4:f1:ea:6f:26:01:dd:e8:b0:5b:47:0c:0e:45:
                    e7:67:9d:63:6a:88:d4:60:9e:22:5a:70:33:ac:cf:
                    d1:c4:69:e6:3c:35:e8:52:b6:4e:d1:83:c8:9f:cb:
                    33:4d:4e:98:98:7c:79:21:b4:07:b8:3c:89:b6:79:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BF:F3:C0:75:D3:0B:54:E7:BC:D8:B1:E5:67:D2:98:70:79:79:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d474ee6-c6e0-316c-8f65-638ea8f3dede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:df:27:74:25:26:22:b8:2e:b7:b4:42:c6:1b:06:3b:1f:78:
         95:7c:0e:9e:07:c2:19:cf:62:ba:08:ff:f5:6b:64:0f:cf:6e:
         ca:aa:b0:19:4a:09:79:59:7f:3d:c7:8f:20:d3:1b:ac:0e:e5:
         51:93:9d:71:71:63:54:38:60:74:8f:5c:8f:00:ea:ea:f9:42:
         26:95:0b:d4:5e:e2:cf:1e:db:da:c3:96:aa:55:60:eb:76:5d:
         a6:c4:29:0b:5a:e7:88:91:1e:13:e3:b0:91:cd:d2:26:1e:55:
         5f:87:69:c6:4b:36:53:3e:48:81:52:30:6a:c0:86:7c:cc:0d:
         cc:4d:d9:bb:a4:05:16:78:ed:7d:3b:cb:63:25:a2:7c:03:d6:
         69:7b:99:a0:c5:0b:bc:33:d8:21:e4:e1:73:7e:ca:e4:20:06:
         54:b4:d0:9b:53:85:91:35:e6:3a:08:55:a4:d9:a0:da:af:f9:
         50:23:5f:c6:3b:3d:d7:f8:46:7e:cb:91:9d:66:72:ac:84:3f:
         05:00:75:47:e0:aa:27:1f:38:24:72:d2:b5:6b:1b:52:26:9c:
         ed:77:b5:a5:08:28:15:dd:c8:6d:17:69:5f:6d:af:0c:78:ca:
         31:09:a6:c9:52:db:dc:48:aa:08:5d:95:20:a7:22:34:08:3f:
         b9:67:44:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----