Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ca07f24-6a71-351c-980c-818a4abaf2a4.roa
File:                     3ca07f24-6a71-351c-980c-818a4abaf2a4.roa (raw, json)
Hash identifier:          6r+4ma4JrIRPriyL7BmavO7pSdzkVUVDu3OCiTlKeO4=
Subject key identifier:   91:39:A3:D3:5F:62:28:F6:6E:EA:14:38:83:BD:82:7A:98:AE:24:AA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA6B46DE448D79EA173DC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ca07f24-6a71-351c-980c-818a4abaf2a4.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     394996
IP address blocks:        184.105.180.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:b4:6d:e4:48:d7:9e:a1:73:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=a5bb11a4-2978-4840-a855-1997d9bd9b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:e5:e7:0e:87:46:e6:be:91:ef:81:4f:7d:
                    07:05:57:38:c7:99:1e:29:7c:d6:86:f1:4d:47:3b:
                    e1:fc:f2:b5:6a:ca:10:c2:1d:b0:74:bd:ef:39:72:
                    73:4c:8c:a4:d1:6f:48:d8:02:2e:aa:39:b0:48:11:
                    06:3c:ee:8b:3a:c5:b0:f1:0b:bb:67:18:15:e7:3a:
                    7b:fb:b2:ee:42:04:00:64:d6:bd:7f:2e:f3:75:90:
                    6c:94:9d:d1:8e:34:4e:7d:bc:bd:48:8a:54:dc:87:
                    f1:4d:e9:47:d1:dd:2f:26:4b:2f:06:bd:09:44:01:
                    17:f4:5d:9c:ce:f5:bf:fb:4c:5a:82:8d:8b:b4:ba:
                    be:66:e3:97:19:2d:43:fe:ff:3a:93:86:ff:ca:b5:
                    53:d5:3d:62:35:47:c2:37:9f:d2:83:00:dc:ed:a0:
                    28:d1:0f:e6:15:09:f4:33:e5:a7:e0:f8:6c:db:8f:
                    04:f9:2f:11:90:5f:7a:83:10:73:d4:49:75:c3:20:
                    22:2a:7b:0d:ef:1f:a0:3e:61:e0:cd:ad:58:f6:37:
                    1c:7b:36:e9:73:18:f8:c3:ce:09:d4:5c:fa:26:11:
                    c6:bb:67:a7:61:b5:a1:e2:db:d9:57:8d:19:89:e8:
                    e4:e7:2d:5c:e3:94:e3:44:a3:19:d5:55:90:ac:68:
                    f9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:39:A3:D3:5F:62:28:F6:6E:EA:14:38:83:BD:82:7A:98:AE:24:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3ca07f24-6a71-351c-980c-818a4abaf2a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:da:f7:29:eb:27:09:de:18:ba:89:d4:a8:c9:a4:10:29:c4:
         9a:ce:33:79:71:8a:38:43:fc:3b:4e:d3:fc:63:f9:46:e6:43:
         08:c3:7a:af:8f:06:36:ee:40:a1:84:98:75:8a:63:e8:b4:76:
         62:2a:d7:d0:f8:02:f1:4b:97:42:41:1e:96:5b:26:c7:93:2c:
         4b:2a:63:6b:b8:fb:3b:8c:13:25:39:20:ad:1b:dd:bb:94:0f:
         0e:ec:52:0a:40:23:ba:71:2b:9a:2c:d7:53:3a:02:e4:d0:54:
         18:55:b2:08:fe:f5:d7:48:24:3c:5d:ad:fa:6c:a2:7c:fd:ae:
         d1:16:ca:fb:8c:02:d9:ed:65:bd:12:98:fb:df:b6:72:93:ba:
         52:99:f2:dc:f3:81:a2:d1:39:5a:33:dc:c6:61:12:dd:8b:c9:
         cc:c3:e6:b3:9e:39:73:3c:7e:68:6d:f3:9f:fc:ba:ad:7f:9c:
         f2:7c:10:d1:61:f2:93:13:40:a6:de:6a:6e:02:df:3b:b4:d7:
         28:1e:ae:12:7a:5d:e8:b9:38:ec:4f:b4:bf:fa:e6:e6:40:0d:
         3e:cb:3f:91:7c:ca:55:8e:56:7f:37:79:36:9e:84:c7:1b:53:
         78:09:f0:ba:ca:47:b9:48:11:80:77:9b:ae:87:52:96:8f:7a:
         f5:94:77:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----