Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01c389e4-8d47-3251-b47e-607f5f9054b7.roa
File:                     01c389e4-8d47-3251-b47e-607f5f9054b7.roa (raw, json)
Hash identifier:          lS6Kj0aAtObkmU9uA7jW1ejSsmUQtIEWve9tAW3XRaI=
Subject key identifier:   59:84:4A:A8:97:FC:F7:BC:02:C7:05:DE:87:78:EA:5C:30:53:72:0C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA687D64F4659586F4CB180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01c389e4-8d47-3251-b47e-607f5f9054b7.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     36707
IP address blocks:        65.49.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:87:d6:4f:46:59:58:6f:4c:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=3fb01b6c-9524-4009-a676-d245f8087195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:ce:a2:88:b6:ab:fc:12:31:cc:88:86:61:
                    af:15:38:80:76:31:39:f7:d4:80:6a:72:ea:2d:68:
                    47:6a:31:3d:f7:92:c2:47:c6:9e:12:a2:5e:ad:91:
                    d8:39:b6:7b:dc:7f:d7:66:66:2c:1e:2d:c0:9a:87:
                    f6:07:bd:03:3a:70:cc:36:61:a6:ba:a2:3c:03:d2:
                    02:9c:b3:21:bf:d0:7d:51:fd:9d:77:c7:68:b2:d8:
                    98:8c:49:a3:c8:d0:48:9d:e2:8d:38:88:b2:69:46:
                    96:c5:4a:ae:10:6a:ef:18:4c:a5:b9:7d:5f:dc:5b:
                    82:b5:30:fd:3d:66:d1:e1:fa:45:22:d8:c5:00:25:
                    2e:45:a3:81:a8:b4:16:fc:60:a1:79:14:61:de:21:
                    0e:e7:54:25:de:a2:85:8c:2b:a7:15:d1:1d:b8:35:
                    0f:2d:6e:21:13:e1:86:d8:f2:41:8e:1e:8b:ff:24:
                    64:73:c8:39:7c:4d:14:93:77:31:3f:6e:57:81:e7:
                    10:d1:66:b4:68:3f:24:eb:24:0b:eb:6a:1f:7a:aa:
                    76:aa:79:d1:af:76:2a:fb:33:f1:d7:18:4c:37:b6:
                    8d:57:00:3e:aa:cc:e1:f6:82:5a:63:0c:62:9f:d8:
                    b8:97:b8:ec:e2:cc:30:0d:e6:f9:a9:17:b7:93:d2:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:84:4A:A8:97:FC:F7:BC:02:C7:05:DE:87:78:EA:5C:30:53:72:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/01c389e4-8d47-3251-b47e-607f5f9054b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:15:ac:ec:7d:71:50:92:cd:0f:9c:76:86:12:e5:4b:ac:fc:
         47:bf:9a:b2:6a:55:f5:cd:7f:b4:80:f0:67:5b:15:d1:d5:64:
         0f:80:86:1b:d8:0f:ab:73:8c:15:08:de:dc:cd:f2:be:c4:8d:
         68:e7:79:a6:f9:73:24:26:5e:f2:6a:63:66:9e:eb:82:fa:12:
         13:2e:b4:83:ac:1b:7a:b6:93:f3:e5:6c:cc:87:68:67:18:23:
         81:49:30:28:e3:c8:f4:5d:55:70:cc:29:42:35:9e:55:7e:70:
         fe:15:68:5c:35:82:98:10:62:ae:7d:b2:e2:ee:99:67:cc:a4:
         13:5e:b9:82:9a:da:40:c7:c4:f2:b1:ce:f5:0d:66:bb:63:ec:
         71:80:e5:a8:df:e5:4a:e5:94:4f:0d:81:ad:cc:8e:c2:89:94:
         a9:13:67:7d:f6:5c:e0:eb:7e:a8:d5:69:7f:1d:ca:d2:db:21:
         f9:0e:2f:a1:f9:16:7b:99:34:70:a8:d9:c9:3c:c1:34:fd:a3:
         b6:71:46:e6:46:e9:72:fe:9a:c1:c8:2b:17:3d:b7:37:14:fa:
         71:cf:08:60:6d:22:ec:7e:0f:43:02:c7:85:9b:47:97:85:cc:
         ef:c7:34:7e:75:a2:9d:44:a6:59:bb:08:e5:9e:57:0d:8a:0f:
         da:e5:6f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----