Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6d224b1-79fd-3e5b-ae9c-6bf9f9b15e49.roa
File:                     b6d224b1-79fd-3e5b-ae9c-6bf9f9b15e49.roa (raw, json)
Hash identifier:          25zQ1IG/eE0KrTIZrdhNcnpsfvllkWCwhtYDKwiFLKQ=
Subject key identifier:   FD:4D:07:37:13:26:38:00:42:B5:15:4B:FD:8C:CC:3D:D0:79:98:7B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648DC61B6428CC59F15B9300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6d224b1-79fd-3e5b-ae9c-6bf9f9b15e49.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     15096
IP address blocks:        2001:470:113::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:c6:1b:64:28:cc:59:f1:5b:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=14787e45-f217-4a5f-b3e5-53880b77c875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:74:74:ea:32:3a:ba:55:6c:73:93:b4:68:
                    5a:54:2e:87:6f:8f:81:96:53:ea:ec:3d:50:09:d0:
                    5e:ba:c9:27:18:d3:72:b0:94:fe:ea:24:52:7a:e3:
                    35:34:14:f4:c0:67:49:a0:13:1c:45:f2:63:2e:75:
                    93:4b:3b:cf:a6:8b:7a:f7:fd:3d:85:6a:58:ab:ee:
                    a8:4a:c7:45:3e:8a:5a:bb:28:c9:64:7d:c1:e5:ed:
                    98:f8:9a:91:3c:1c:5b:ae:91:b9:b0:4d:ab:3a:dc:
                    0d:d2:92:fe:ed:5d:99:ea:dc:5c:e7:c6:21:b8:b9:
                    35:8e:7d:d1:1c:29:a6:8e:9a:40:8c:70:c2:72:f0:
                    63:23:69:5a:7c:f3:93:b1:84:e8:2a:fa:6f:ee:3e:
                    4c:77:5b:44:93:30:de:a9:2d:c4:06:e7:19:a0:45:
                    84:c7:9f:ad:41:26:b1:d3:0f:1b:fc:8d:ba:e6:fc:
                    52:19:6e:a9:a6:16:c2:07:f7:76:68:fc:e5:a7:f3:
                    fe:1d:97:83:aa:52:0f:7f:5c:59:ff:8f:9c:be:a4:
                    13:54:92:e8:47:6e:15:9b:1e:9e:9e:26:49:d8:be:
                    c2:00:71:c0:8a:81:7a:c5:a3:5b:7e:01:b0:73:ae:
                    e4:1e:d0:36:fc:e5:17:63:4d:55:1a:93:cd:6e:b4:
                    fe:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4D:07:37:13:26:38:00:42:B5:15:4B:FD:8C:CC:3D:D0:79:98:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6d224b1-79fd-3e5b-ae9c-6bf9f9b15e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:113::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:60:b9:0a:29:3b:15:53:d2:47:1a:9e:31:1a:19:43:be:
         ab:ca:9b:c3:c2:c2:20:b9:58:06:26:1f:5c:af:6a:f7:7b:a3:
         8e:45:dc:45:0d:f1:d4:c4:fe:54:25:d7:4f:8c:49:fb:8c:af:
         78:cc:1e:8d:39:0f:98:3f:a9:08:1b:b0:9b:bc:d0:03:80:47:
         37:c3:90:9e:3b:1c:55:5c:0e:2b:24:3d:f9:38:58:d3:86:c3:
         51:ef:3e:83:c1:43:b4:83:93:55:15:c3:f4:3e:be:a9:9b:ee:
         7f:9d:89:1e:98:5e:d4:6f:40:31:7d:9d:29:50:e5:db:c3:9d:
         cf:3b:b7:c6:f5:9b:7f:1b:cb:ba:da:61:bd:5a:aa:37:40:12:
         0b:79:ec:af:3a:43:37:b6:9d:68:a0:ce:4b:db:11:92:15:34:
         38:00:51:f9:70:e2:7a:ed:70:26:f0:3e:1d:89:bd:91:d7:d6:
         63:36:89:2d:30:79:2c:ee:1d:1f:e4:ef:a3:f3:fb:d2:c7:1e:
         47:32:92:c0:12:28:f0:bc:8b:7f:57:f1:d6:f6:47:79:ca:d7:
         4e:90:b2:b5:b3:23:c0:de:74:6f:02:7d:2d:67:3c:73:66:60:
         1a:36:60:f7:58:91:51:7c:5c:ff:bf:dc:9c:9a:b7:30:ed:37:
         1b:07:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----