Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/83122c08-62af-3c89-8df0-9b0e88ccef11.roa
File:                     83122c08-62af-3c89-8df0-9b0e88ccef11.roa (raw, json)
Hash identifier:          9lan3uiRyjjfJ5C+N7oCklLoDsSLeh7kRn9WmOZLJyo=
Subject key identifier:   5D:75:E4:77:2A:C2:43:89:7F:BD:41:67:76:D3:71:8C:A0:D5:8B:E0
Certificate issuer:       /CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
Certificate serial:       010D0C9F4328583881D8AB5584BB88128B4C9800
Authority key identifier: 2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/83122c08-62af-3c89-8df0-9b0e88ccef11.roa
Signing time:             Tue 05 Jan 2021 05:00:00 +0000
ROA not before:           Tue 05 Jan 2021 05:00:00 +0000
ROA not after:            Mon 10 Apr 2023 04:00:00 +0000
asID:                     22552
IP address blocks:        162.245.228.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:81:d8:ab:55:84:bb:88:12:8b:4c:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1bde07b-2888-4592-8145-f4bcd3e3a12a
        Validity
            Not Before: Jan  5 05:00:00 2021 GMT
            Not After : Apr 10 04:00:00 2023 GMT
        Subject: CN=b5f145e7-23c4-4c8f-9497-24cbb091f186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:52:10:70:f6:90:90:ef:ec:8b:72:7b:41:
                    f9:2d:1e:41:ef:68:2e:fb:c3:d9:e8:ce:5f:97:2c:
                    9f:d2:98:e5:4b:29:56:7d:78:6e:1b:2d:fb:35:26:
                    f9:a3:77:1e:83:b3:96:e9:80:07:57:b6:f6:3a:9b:
                    45:91:2e:7d:77:7d:0a:15:4d:d6:16:4d:fb:ee:05:
                    96:e2:64:e9:78:1d:02:ea:9a:d4:96:fb:68:99:18:
                    16:1a:09:76:08:f2:ab:9b:6a:f3:a5:06:1a:9b:4e:
                    fd:c5:a4:34:53:cd:fd:0b:f4:7e:83:91:0a:9c:e6:
                    69:84:2f:04:5e:ad:72:35:e8:97:22:cf:cf:96:89:
                    77:e4:ae:59:24:dc:7b:90:a8:3d:2a:4a:f9:f8:24:
                    f1:d8:4e:f1:c8:0a:6b:1f:63:48:1b:3a:50:3c:94:
                    46:12:56:2c:20:10:43:5c:17:c7:67:59:0e:9a:66:
                    1c:4c:49:78:00:c7:fe:9a:83:15:08:ee:1b:a9:85:
                    db:eb:69:7e:9a:90:84:40:ea:27:19:6d:83:b9:cb:
                    8b:84:63:80:10:79:0c:49:e7:b6:e5:2e:c4:b7:91:
                    da:6d:a5:0f:6e:39:f4:11:4c:21:b6:38:e2:20:01:
                    4a:26:9d:9c:00:b0:5a:0b:08:29:fb:8f:8a:13:ed:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:75:E4:77:2A:C2:43:89:7F:BD:41:67:76:D3:71:8C:A0:D5:8B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/83122c08-62af-3c89-8df0-9b0e88ccef11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a/b1bde07b-2888-4592-8145-f4bcd3e3a12a.crl

            X509v3 Authority Key Identifier:
                keyid:2B:E4:4F:5A:CB:01:42:DC:52:ED:6B:1B:A3:E9:9E:FD:7C:C6:63:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1bde07b-2888-4592-8145-f4bcd3e3a12a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.245.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b6:59:59:eb:4c:ed:ee:4c:5c:d8:64:92:46:03:c6:4b:14:
         31:9f:8f:e1:7a:4e:ef:f3:64:93:7d:ea:a5:3a:93:d1:82:71:
         44:e0:d4:92:87:67:a1:c1:6e:04:99:51:61:1e:92:6f:74:e2:
         fc:4a:15:b0:7d:d7:25:73:24:0e:1d:dd:bc:13:80:98:f3:76:
         28:64:80:c5:4b:b1:d8:57:15:93:f9:5b:1b:97:4c:a5:91:11:
         5d:34:f8:0f:4c:57:88:f7:d8:45:28:45:be:c7:c7:62:28:65:
         f9:f1:1f:56:e6:7e:17:5a:7b:1c:b0:0b:b1:7f:2f:42:3a:2a:
         a3:69:e9:b5:23:80:50:36:d8:bb:3c:fd:7d:e2:dd:f7:9d:ea:
         fa:10:e0:c8:87:f0:d1:56:18:fc:a2:df:57:ea:1a:70:40:a3:
         63:b0:ee:38:f3:d3:44:60:3f:ce:ec:4c:2b:b8:46:11:87:3c:
         08:21:ed:21:0c:4e:db:4a:57:70:1d:e7:a8:69:47:1f:0b:5d:
         e0:0d:ec:b8:5b:28:e1:10:66:27:40:c5:bf:01:fa:7f:d2:e4:
         ea:59:1d:52:c1:ee:aa:6c:ac:73:ea:b5:90:12:8f:54:fa:fd:
         f3:96:ac:cc:c4:1f:ce:be:2f:94:15:a7:ed:5b:cc:e0:68:61:
         fa:27:a3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----