Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d40030a6-270b-3530-b044-f5541d6e544e.roa
File:                     d40030a6-270b-3530-b044-f5541d6e544e.roa (raw, json)
Hash identifier:          KoLJfdfxSQU+Q+W9Dgw1zUrJsmOr1BpMgRE7AcMDs/4=
Subject key identifier:   DB:F6:93:82:AA:BD:03:9B:EC:C9:03:04:9F:F5:49:B3:79:4C:33:53
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583C5C910B334922BEDB4B3E9300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d40030a6-270b-3530-b044-f5541d6e544e.roa
Signing time:             Fri 24 Dec 2021 05:00:00 +0000
ROA not before:           Fri 24 Dec 2021 05:00:00 +0000
ROA not after:            Fri 24 Jun 2022 04:00:00 +0000
asID:                     17117
IP address blocks:        2001:470:152::/47 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:5c:91:0b:33:49:22:be:db:4b:3e:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 24 05:00:00 2021 GMT
            Not After : Jun 24 04:00:00 2022 GMT
        Subject: CN=50dd47c8-c0c4-4ceb-a398-1e7722bdbeb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:96:e2:16:f7:62:d1:f8:56:aa:88:70:f4:
                    be:c5:1c:67:42:b1:c0:ed:56:90:34:12:02:78:f1:
                    61:04:a3:fc:78:ec:9b:4c:22:58:55:62:c4:ec:99:
                    f3:c6:dc:84:0a:e9:f9:37:16:f6:a1:44:0e:26:d2:
                    56:6b:4d:ae:0a:7f:eb:87:44:58:9a:77:dd:cf:05:
                    9b:0f:ad:e7:30:a6:81:54:b2:0c:25:dd:e4:58:1e:
                    b7:9e:4a:83:86:28:f5:c4:eb:67:45:be:d4:42:cc:
                    36:88:0a:33:4c:3d:32:0e:5e:a3:2e:f3:3f:52:db:
                    5c:b4:60:2d:df:14:df:c0:03:f9:9e:e0:a3:24:75:
                    8e:d5:c2:50:ad:d5:65:6d:9d:cd:78:ca:3f:80:f7:
                    df:ed:7e:f9:31:b8:ff:94:91:f6:36:a4:ea:cc:03:
                    03:9d:b8:39:43:87:e8:07:ec:0e:d7:e1:f8:56:f8:
                    30:fd:1e:8e:a2:50:d8:b3:3a:31:b0:4c:d3:48:b9:
                    96:20:ce:10:2b:51:49:c9:12:09:4b:b7:88:0e:f6:
                    a9:0d:a0:28:b2:07:ce:bf:1c:dd:ea:c0:9c:14:bf:
                    27:4e:76:66:f4:c6:39:3f:79:50:64:55:b6:87:76:
                    b8:0e:cc:06:67:3c:ee:06:ea:57:84:28:b2:d0:f3:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F6:93:82:AA:BD:03:9B:EC:C9:03:04:9F:F5:49:B3:79:4C:33:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d40030a6-270b-3530-b044-f5541d6e544e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:152::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ad:5e:2b:40:20:55:00:3d:22:57:5e:69:08:4c:db:f0:93:
         99:73:8e:99:4b:11:00:e8:b6:61:01:2d:36:38:86:37:09:77:
         c6:5f:d6:26:fc:fa:10:5b:fd:2d:48:63:04:ec:5d:ce:1f:74:
         32:55:ad:1b:bc:b1:72:9a:60:0e:a6:42:92:84:30:b7:89:e1:
         fd:83:3e:03:00:2f:71:26:24:2e:67:17:90:78:30:0a:04:b5:
         9d:86:36:82:bb:6f:d0:0c:bf:5a:03:2f:d8:28:a7:4c:e6:c8:
         a9:af:51:ce:31:04:e0:85:ca:13:66:0c:ab:1b:7c:07:4b:16:
         db:04:0f:5e:4c:54:96:2a:1d:97:17:55:d2:fc:6e:3d:6d:76:
         21:8d:23:e8:66:20:82:95:c6:80:f1:56:20:5c:d1:2d:45:28:
         f1:1e:c9:25:48:4d:fa:3c:64:a6:8e:f4:5d:d8:7b:72:36:4c:
         63:f5:ee:2b:c0:6a:47:e5:84:ff:81:f1:66:6a:24:2b:88:d3:
         51:9d:4f:7e:02:9a:45:92:35:bb:0e:1b:cd:af:c4:cb:ff:0e:
         cf:cd:76:51:66:de:84:9b:74:d3:b1:b3:2a:f9:9f:10:7d:3f:
         c5:ba:2b:0a:ab:e7:03:fb:d6:fc:74:3e:0f:38:90:77:d1:6a:
         53:6d:5e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----