Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a093540-bd55-3e8c-8233-f859dc78e745.roa
File:                     9a093540-bd55-3e8c-8233-f859dc78e745.roa (raw, json)
Hash identifier:          /X5/+Gzdaz1Ah0GqA3hAma00XbukSjJ23EJKTDpN5iw=
Subject key identifier:   D8:10:8E:47:EB:67:6E:4E:95:FF:24:D2:CE:36:90:17:70:CE:F3:59
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648DF2B14D7CCBE7D3DE9300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a093540-bd55-3e8c-8233-f859dc78e745.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     41678
IP address blocks:        2001:470:38::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:f2:b1:4d:7c:cb:e7:d3:de:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=f3eefde6-48f9-4ab1-9f8b-042ea774ded0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:78:07:2f:d7:9a:ea:58:04:37:72:20:ef:dd:
                    5d:60:99:02:89:c2:62:ff:c7:aa:61:4b:0b:2c:7a:
                    cf:80:b4:4c:04:4b:8b:f6:63:fe:e0:37:84:14:5f:
                    19:ba:ce:0a:11:1d:1d:69:c3:72:22:f0:d3:88:85:
                    d4:e5:84:38:0f:69:38:db:0f:81:c1:ea:cf:cd:8b:
                    d5:c7:f6:5d:6e:ce:96:6e:4d:35:21:29:4a:6c:0c:
                    72:8a:9a:4b:2e:48:94:7f:10:4d:4f:33:7e:9b:9b:
                    10:f3:65:0b:ae:8b:d7:7e:3c:66:56:12:d1:04:63:
                    6b:40:47:1e:a4:c3:36:69:b1:67:14:05:07:7f:4a:
                    7e:55:97:64:ff:15:a3:b9:a7:0d:12:16:cb:d2:c4:
                    94:20:b0:78:41:e0:fa:15:05:d1:2a:c0:cb:0b:9e:
                    44:3a:fe:29:66:20:1b:02:f4:4e:5f:b7:ed:5e:30:
                    fb:b1:b3:b2:12:25:95:80:b6:4f:10:95:b8:fe:32:
                    ce:0d:09:c8:59:e1:f4:61:1a:37:c4:10:56:bb:7f:
                    7f:44:cb:55:84:84:07:05:63:63:36:99:ce:13:ae:
                    35:07:10:60:ba:95:f3:17:70:a9:28:31:3c:8a:29:
                    3c:05:3e:be:7e:bc:ff:79:fd:57:f2:87:9c:19:76:
                    9d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:10:8E:47:EB:67:6E:4E:95:FF:24:D2:CE:36:90:17:70:CE:F3:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9a093540-bd55-3e8c-8233-f859dc78e745.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:38::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:e1:e0:b4:d2:c3:53:77:2c:59:9d:30:ad:e4:69:58:e6:
         92:ab:24:b1:f7:e7:95:37:3d:01:c1:d2:40:06:14:cc:da:b9:
         29:61:07:2f:61:d9:19:3b:d5:78:ff:47:6c:08:73:6a:49:a2:
         1d:52:a9:a2:dd:e8:ec:30:97:59:1a:69:d0:e4:5a:7b:f6:e8:
         67:0d:3a:f6:4c:f6:db:90:1d:d2:16:62:cc:98:d3:59:99:45:
         9e:87:8d:5a:2e:b2:ba:14:9d:24:df:95:a1:79:15:ba:e6:26:
         62:f9:60:a9:70:50:61:7e:0c:11:99:e3:00:78:81:e1:d5:7e:
         f7:6c:0d:c7:42:1b:5f:a7:b0:69:e6:c0:62:75:55:e5:b5:77:
         78:61:b5:fd:b5:7a:84:1b:75:eb:97:c3:eb:4b:d8:6f:f1:32:
         fd:94:b1:23:7a:db:9b:dc:f9:d0:64:2c:b2:69:04:e6:7f:f6:
         07:f1:2a:87:cb:8e:54:0c:e0:1d:b6:e5:74:f8:c4:07:2e:8c:
         2a:ca:86:c6:34:1e:38:9f:46:99:0c:08:5d:02:d1:f5:60:30:
         07:a2:55:32:fb:f4:73:43:1f:02:e1:4a:bc:50:78:9c:84:ca:
         15:3e:b9:cb:7a:80:7f:a3:e8:da:cd:f4:1d:9c:f4:71:10:c4:
         f8:49:e7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----