Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/311b422b-9f6b-372a-b768-fe251c3af00d.roa
File:                     311b422b-9f6b-372a-b768-fe251c3af00d.roa (raw, json)
Hash identifier:          GWHswv1prIJB5P64psIpeFBfagG3LK0Zs9TVSyedqFo=
Subject key identifier:   D0:BE:B3:F4:A2:DF:9F:1D:1C:47:76:71:BA:FC:71:B1:A8:36:73:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584003CC2BF4B14A2AA30DF50840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/311b422b-9f6b-372a-b768-fe251c3af00d.roa
Signing time:             Wed 23 Nov 2022 12:00:00 +0000
ROA not before:           Wed 23 Nov 2022 12:00:00 +0000
ROA not after:            Wed 24 May 2023 04:00:00 +0000
asID:                     398297
IP address blocks:        216.66.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:03:cc:2b:f4:b1:4a:2a:a3:0d:f5:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 23 12:00:00 2022 GMT
            Not After : May 24 04:00:00 2023 GMT
        Subject: CN=9e1e64ce-8f58-4533-9274-c63570da8139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:eb:cc:0e:d3:53:1f:6b:8a:9b:d1:4e:90:
                    c8:52:b2:37:39:e0:72:c1:8b:2b:a5:ad:34:9f:33:
                    04:61:27:ee:57:9f:40:cb:f3:04:8d:e8:63:0a:25:
                    68:b4:bd:b2:d4:f8:0e:16:f6:2c:61:ee:99:71:55:
                    39:1f:82:95:91:ec:20:0d:59:4c:d8:c5:1f:84:70:
                    dc:dd:02:53:79:e1:ad:90:be:1a:5f:30:62:1b:7b:
                    ad:07:4a:de:8f:9f:a8:f5:ff:5a:4b:3b:5b:e6:5b:
                    c8:56:c9:f5:2a:bc:d6:c8:39:63:fc:a6:48:a4:9f:
                    bc:fd:4a:b1:d9:25:9a:06:a6:20:f6:4e:58:f8:21:
                    13:e9:3f:25:9f:34:92:eb:d3:b4:40:3b:3e:80:09:
                    e6:0e:13:17:d8:2e:30:dc:42:72:52:42:1f:82:b0:
                    21:a6:e8:2f:e7:33:53:cd:f1:6b:18:f8:09:4e:69:
                    11:f4:e9:d1:4f:9f:d5:6f:d3:b3:0a:fd:20:72:2a:
                    ee:14:e5:1b:ab:a2:5d:dd:4e:da:28:70:37:16:9b:
                    b7:f2:03:78:0f:79:62:f5:ae:2b:82:90:19:7b:78:
                    4f:f0:18:3f:c8:64:b3:20:17:eb:3f:7e:13:81:9d:
                    54:cd:4d:19:7b:9c:8a:a4:54:f4:fc:14:c0:85:e7:
                    29:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BE:B3:F4:A2:DF:9F:1D:1C:47:76:71:BA:FC:71:B1:A8:36:73:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/311b422b-9f6b-372a-b768-fe251c3af00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:82:b7:2f:57:3e:94:ab:ae:be:dc:63:7e:78:00:4d:e2:36:
         84:cc:35:e7:4a:ec:90:07:ad:83:ad:ca:19:fa:5d:b1:bb:77:
         b4:95:33:bf:00:6d:17:2a:64:ce:e2:74:79:48:e9:d0:39:f0:
         45:0c:f6:f6:d8:fc:06:dd:96:c9:12:bf:63:58:c0:20:82:85:
         8a:5f:cc:ed:c1:ce:51:cd:97:af:7d:3f:73:11:d3:5c:f4:fe:
         84:69:67:21:ba:61:58:f1:bf:3a:e1:0b:f3:23:9a:d7:e3:88:
         e3:f1:e2:8c:d2:8e:66:16:9f:32:e9:b5:66:0b:3e:0e:47:20:
         4b:7e:f9:8d:8d:a9:10:22:e5:68:47:d6:59:4d:33:64:07:09:
         64:71:b6:79:7f:11:02:ed:1e:6e:a3:23:be:b4:0e:0b:4a:d4:
         c8:28:58:b0:7b:6d:fb:2d:c7:f7:bf:00:f3:dd:d9:99:2c:8e:
         26:06:2f:c6:0a:ff:f5:17:59:7d:b2:72:43:d2:04:a1:f4:25:
         63:ee:b3:21:01:ee:e4:20:42:28:66:bd:6c:35:81:ed:78:53:
         76:13:02:cd:6d:4b:00:f4:94:cd:46:76:fa:a3:7b:a8:4d:2d:
         0c:aa:3a:3b:8b:a6:be:eb:9e:58:fa:60:bf:22:bd:b8:d9:00:
         17:ec:7b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----