Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/099b7926-80f3-38da-b316-96647ebfa723.roa
File:                     099b7926-80f3-38da-b316-96647ebfa723.roa (raw, json)
Hash identifier:          n59c8iGjbBH6b3nZl4On9sx2PV8x7IprS8E064TI/MU=
Subject key identifier:   97:1A:BE:8A:96:7F:83:47:0A:DF:26:3B:44:25:E4:90:FF:A8:80:FD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E920613FFE42DD7B411A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/099b7926-80f3-38da-b316-96647ebfa723.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     54288
IP address blocks:        66.160.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:92:06:13:ff:e4:2d:d7:b4:11:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=13eaa7d2-7d91-4666-9ee1-69d6b6157c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:1e:a9:f2:d6:2f:21:25:93:ab:8a:8a:d9:
                    f3:de:d1:43:b9:37:7b:6c:4d:94:0b:34:59:2e:80:
                    66:bd:8d:30:a5:85:c0:d6:b4:90:1e:04:ea:73:ab:
                    36:b8:bb:3c:7b:23:a5:17:e7:be:5b:8b:f7:90:5b:
                    9b:81:38:18:ea:81:82:c0:eb:3b:a6:69:6f:80:f5:
                    32:fb:c6:c0:84:84:44:5d:23:7a:69:7d:58:89:b1:
                    c5:ca:13:61:3d:60:b2:d0:23:e9:11:df:9e:bf:9f:
                    8e:dd:40:9b:68:37:e4:14:57:dd:b7:92:03:af:2f:
                    5c:72:dc:69:96:f7:87:d1:24:cb:fd:fc:09:71:9b:
                    b8:86:4a:08:c5:4c:1e:84:fc:e2:40:b8:11:ca:4d:
                    f4:d1:5d:4a:21:ac:17:e4:08:78:9c:9a:1a:0a:34:
                    5f:54:67:f0:e4:0e:ab:09:77:b0:0f:ec:97:af:40:
                    63:96:63:64:cc:ca:83:b7:4b:f1:2b:fd:7d:b8:23:
                    46:5e:a1:22:80:17:c4:2f:24:eb:2e:a8:10:43:82:
                    2c:3e:20:06:de:31:3b:4a:aa:b9:6c:53:38:76:26:
                    3e:84:b4:a0:6a:87:d9:0c:31:29:01:17:1a:f4:9d:
                    96:91:12:d5:27:19:9f:33:cb:9e:18:2a:5f:17:7d:
                    b3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1A:BE:8A:96:7F:83:47:0A:DF:26:3B:44:25:E4:90:FF:A8:80:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/099b7926-80f3-38da-b316-96647ebfa723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:be:ff:fa:94:7e:09:3e:03:45:d7:20:17:b4:9d:43:ea:
         34:02:2a:43:4f:61:7f:64:c9:12:98:e3:36:1a:67:0c:e5:19:
         f8:69:2f:f6:db:76:7e:92:b6:3f:af:27:7e:84:c2:ac:93:b7:
         63:de:73:74:b2:d9:e0:10:3e:37:a5:b0:51:06:0c:24:88:84:
         ba:58:62:0a:06:e9:52:93:61:6a:87:3e:33:8e:4b:c5:62:d0:
         69:a8:47:c9:e7:bf:65:67:ff:4b:a8:9c:79:e3:d0:81:9c:58:
         84:16:d8:f7:4b:92:ee:41:0a:6c:c6:d3:a8:7d:1e:47:39:6d:
         66:81:25:bb:75:1f:be:39:3e:7f:0d:36:17:76:ab:67:02:2a:
         b3:85:62:c9:b3:5b:0e:58:97:cd:77:9b:86:c9:e4:c4:da:68:
         9b:98:25:ac:f7:1a:6c:c1:d5:d1:db:58:df:b3:b7:57:9c:90:
         26:fb:fb:b5:6c:2a:dd:ba:6b:cd:44:11:d7:19:65:34:a0:40:
         0a:8b:07:2c:6f:81:89:1f:7b:af:ae:cd:4d:b6:04:b5:85:85:
         2e:61:4f:08:ca:33:1c:32:f5:54:75:fe:82:0f:17:c6:3c:e3:
         b8:4f:7f:6f:7a:50:4c:51:db:5a:b5:b1:ac:2e:81:ab:6a:6f:
         05:b3:03:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----