Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dcee11c-1a3f-3eec-a07b-b4ff54ad94dd.roa
File:                     0dcee11c-1a3f-3eec-a07b-b4ff54ad94dd.roa (raw, json)
Hash identifier:          ZUV8h0vkx9MnWcdtE0XyYPwG894XYTKvtBB/CwbpQrw=
Subject key identifier:   F7:43:1F:17:8D:45:2D:15:64:C7:C1:AC:81:1B:03:77:F4:C9:4A:07
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A5174E3FCA6F9072870F880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dcee11c-1a3f-3eec-a07b-b4ff54ad94dd.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     54288
IP address blocks:        65.49.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:74:e3:fc:a6:f9:07:28:70:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=8d94fc78-ee92-4d98-8600-842f4c0f0f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:82:d0:af:61:1b:d7:64:cc:a0:18:de:5b:
                    c2:73:16:39:7b:72:88:db:ce:aa:57:0d:c3:f0:51:
                    9f:30:fb:1d:56:ca:36:48:56:11:f1:2a:3d:31:f2:
                    a6:bf:7b:d2:91:ec:d3:f5:02:12:8f:a2:a2:f4:40:
                    a0:07:09:4c:0d:ba:c3:47:be:67:3b:c4:35:0e:fa:
                    57:18:71:77:9d:62:93:e8:f3:97:62:67:87:19:5b:
                    76:9d:4a:fb:78:61:e3:6f:b6:dc:81:b0:83:c3:9a:
                    4c:80:a3:94:79:ad:10:e7:2d:58:84:03:2c:f8:54:
                    51:8d:36:65:43:74:25:f3:8d:95:5b:94:d2:43:52:
                    3f:63:b2:e6:b7:bf:dd:ea:06:a8:81:ce:a5:6b:a5:
                    ee:ad:cf:a5:5d:f1:be:fa:40:2e:2d:e4:ed:cc:1c:
                    33:ef:31:88:1f:38:1b:be:15:9f:e7:e9:bc:96:48:
                    58:fb:3f:d7:9e:5d:98:1c:85:84:c8:7d:95:6f:1c:
                    05:f7:27:7b:2f:32:e5:d9:e8:b1:76:61:ed:dd:f4:
                    41:b3:47:8b:f8:55:98:9c:ca:a2:df:0d:b3:bc:09:
                    12:da:de:6b:4c:8a:d4:4e:0a:09:14:77:36:61:f0:
                    ee:ed:6f:51:f1:c3:c0:4f:55:6b:7e:af:98:20:60:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:43:1F:17:8D:45:2D:15:64:C7:C1:AC:81:1B:03:77:F4:C9:4A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0dcee11c-1a3f-3eec-a07b-b4ff54ad94dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:46:44:d2:9a:d4:c7:2f:af:ab:5d:84:7a:de:a9:53:52:91:
         da:c0:e7:44:63:4b:f0:71:88:74:a4:d0:dd:b1:3b:b1:56:92:
         16:54:c0:82:42:59:f3:ef:c7:6b:c2:6b:49:fa:58:69:ea:b7:
         ac:d3:15:3a:34:36:e5:36:17:58:b6:5d:7b:e7:11:5f:8f:02:
         1f:c4:78:18:2c:a3:84:b9:5a:2f:f4:74:fc:f0:21:43:fd:cf:
         f4:ff:34:6d:8f:03:d1:5e:97:fc:f8:14:11:b4:d4:c1:c5:36:
         ae:72:f2:00:98:0e:e9:83:47:a6:c6:5a:26:94:0e:e9:eb:d9:
         f9:10:59:8c:13:b8:9c:5f:b6:d9:1f:80:fb:df:f9:40:5b:70:
         d0:06:d9:81:83:fa:45:2a:6d:69:f2:f7:7c:01:54:e2:b1:c0:
         47:07:42:d2:30:f6:9a:c3:d3:a6:6c:81:73:ae:ab:2a:aa:fb:
         fe:09:09:f9:84:16:b0:be:d8:8a:a2:11:b8:68:a4:26:d5:56:
         d4:7c:5f:aa:e4:75:bd:be:99:b1:38:c8:88:44:b9:ec:65:8d:
         0e:cb:46:39:85:7a:b0:3f:54:f2:43:9d:f0:60:99:d6:16:fe:
         cc:c8:e1:ac:fe:4c:70:f9:ac:79:ef:bb:e9:37:f0:93:a1:f8:
         c9:65:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----