Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/3bb83241-bdd3-34c0-ae1b-52c7452923bb.roa
File:                     3bb83241-bdd3-34c0-ae1b-52c7452923bb.roa (raw, json)
Hash identifier:          OWtXbO6hFlU9M0FhsSzjSJWH5AOYA9c7/o31+mLo1WQ=
Subject key identifier:   67:31:B7:B1:AC:8A:2D:73:DE:DC:CC:7C:AA:68:12:8F:E5:50:30:3A
Certificate issuer:       /CN=5587bc0d-775f-4b49-89c0-0d12d8bddc05
Certificate serial:       010D0C9F4328583FDC45607609158CD09155F100
Authority key identifier: CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/3bb83241-bdd3-34c0-ae1b-52c7452923bb.roa
Signing time:             Thu 10 Nov 2022 12:00:00 +0000
ROA not before:           Thu 10 Nov 2022 12:00:00 +0000
ROA not after:            Wed 30 Nov 2022 05:00:00 +0000
asID:                     396828
IP address blocks:        69.58.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:dc:45:60:76:09:15:8c:d0:91:55:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5587bc0d-775f-4b49-89c0-0d12d8bddc05
        Validity
            Not Before: Nov 10 12:00:00 2022 GMT
            Not After : Nov 30 05:00:00 2022 GMT
        Subject: CN=50d30d84-9464-4886-9650-03d688afd4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:01:e3:b5:97:2d:a7:c1:33:79:3f:94:ad:22:
                    51:fb:d5:30:16:8b:c5:c3:64:cd:8c:0f:27:42:a6:
                    57:d9:08:6e:dd:98:83:4d:d6:8a:f6:b7:8e:c9:38:
                    a6:c0:76:9f:71:16:c1:56:a3:00:13:09:40:9d:d1:
                    6b:c2:64:fc:f0:fc:a4:63:13:1e:61:dc:78:c4:09:
                    7f:0e:ef:af:a7:9c:ed:a5:d7:51:4d:cd:4c:89:ea:
                    13:50:a5:a7:e9:0a:cc:1e:af:18:13:b9:8e:7b:72:
                    e2:78:14:fd:0b:7e:76:d1:8e:ba:7a:4c:e2:74:52:
                    75:f2:68:05:a5:89:d7:e5:8e:24:7a:31:6e:31:5a:
                    db:d3:33:a8:23:65:ca:9f:f3:8c:b7:d2:49:21:44:
                    2c:12:7c:28:24:73:90:9d:1e:3e:71:ef:e1:3f:e3:
                    18:ab:6d:9e:42:27:41:25:bf:08:50:2c:db:a2:d9:
                    e1:ef:49:75:19:7a:f8:d9:68:ba:44:05:85:d8:f0:
                    48:f2:81:5f:77:f2:26:5d:79:1d:1c:29:1d:76:fd:
                    2d:5c:49:be:3e:3f:53:c1:cf:51:5e:43:27:09:2e:
                    20:39:49:4d:ee:a2:11:aa:64:12:7d:a3:e4:53:05:
                    77:5f:c8:f5:a9:a3:99:35:f5:66:4a:e5:be:f6:54:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:31:B7:B1:AC:8A:2D:73:DE:DC:CC:7C:AA:68:12:8F:E5:50:30:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/3bb83241-bdd3-34c0-ae1b-52c7452923bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.crl

            X509v3 Authority Key Identifier:
                keyid:CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8b:cf:5d:ef:41:ed:67:b7:04:97:20:2e:d7:0e:74:27:3a:
         d1:24:c5:53:9a:9f:13:b5:51:90:39:fb:a0:b5:d5:c1:1f:f6:
         e2:0e:cc:6f:1f:f4:79:df:e3:83:0b:ce:ed:41:b6:03:da:49:
         d7:22:59:0b:c4:df:a8:55:95:18:bf:a5:06:e7:5c:0c:e2:db:
         3d:f6:c3:fa:3a:01:ea:f4:28:6c:b7:49:33:3d:e9:83:66:e9:
         90:60:81:89:b3:13:5a:2c:48:85:54:9c:78:4d:b9:d0:e9:89:
         d1:e7:20:90:ac:35:dd:db:52:48:b8:e5:5e:db:ce:11:13:dd:
         0d:c9:0b:9c:e6:d0:d9:ed:da:c7:23:16:b1:fc:31:1a:97:4d:
         bf:79:9c:60:09:72:1f:7a:da:04:3d:b0:a2:4a:38:69:6a:77:
         e5:6a:ef:7a:79:2d:82:14:40:7c:63:44:25:a5:4b:78:26:74:
         db:4e:e9:fe:63:ab:e7:f9:2f:94:5c:2e:20:6a:69:6c:86:99:
         58:f3:ac:45:04:66:fd:3d:a0:7c:95:b8:7a:2e:d7:54:b3:c3:
         b4:0f:e1:14:28:c6:f6:a2:31:2b:3a:81:90:1e:f0:1d:29:ea:
         61:c1:5c:1f:c8:09:a6:f9:fd:d6:cc:dc:05:fe:3a:c1:0c:f2:
         6f:ad:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----