Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3df03c68-e708-3852-bbd6-2a1a6a19966c.roa
File:                     3df03c68-e708-3852-bbd6-2a1a6a19966c.roa (raw, json)
Hash identifier:          XNTWi7cMNIzQ96rUfJk1l1BNP/OXVuRBkl9t0lo3V1A=
Subject key identifier:   07:75:E1:5E:20:34:B8:7D:9F:5C:FA:AC:E1:6F:E0:D0:D1:F2:0D:69
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA670DF3C0DB05B48F68E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3df03c68-e708-3852-bbd6-2a1a6a19966c.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     36103
IP address blocks:        74.82.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:70:df:3c:0d:b0:5b:48:f6:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=318b260c-7122-4636-9a5a-6674e7e8b3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:12:ce:c6:d2:2f:02:81:02:41:25:25:6c:81:
                    7d:d6:4b:0f:79:71:a9:24:93:c5:48:63:0e:d7:98:
                    9c:43:de:7e:f3:1b:f2:5f:37:9f:77:be:ec:db:2b:
                    3f:e0:56:1a:11:eb:bf:9a:db:ab:3d:b2:09:55:62:
                    17:16:08:c0:93:32:68:0e:47:1f:57:48:85:13:7d:
                    fa:0f:ef:e2:23:37:d9:d7:c6:b1:30:9a:08:dc:36:
                    c2:15:1b:ab:c8:39:30:4b:2b:bc:3e:30:19:af:0d:
                    02:86:e5:3a:37:b2:77:1e:7e:f9:06:19:f4:67:1e:
                    38:12:54:9f:d0:49:56:ac:18:2e:df:06:e6:ff:ac:
                    f4:a2:93:67:41:39:14:86:e1:e9:ab:76:fa:b5:55:
                    47:b6:96:51:8b:37:55:18:6f:80:1c:74:63:b2:c9:
                    03:3b:88:fb:4c:19:67:fa:76:3d:0f:67:f4:2d:66:
                    2c:53:22:1b:aa:96:c9:fd:f8:0c:fc:0e:19:0d:b1:
                    dd:43:7b:5c:32:f7:84:ea:96:20:a1:a8:43:14:49:
                    8e:32:e8:04:35:78:43:43:9e:46:5a:71:52:17:8e:
                    83:be:f9:8f:6f:81:65:34:bb:a0:bf:05:80:bc:8d:
                    51:42:0e:97:16:20:c1:76:8a:01:57:c3:af:3b:6e:
                    ff:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:75:E1:5E:20:34:B8:7D:9F:5C:FA:AC:E1:6F:E0:D0:D1:F2:0D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3df03c68-e708-3852-bbd6-2a1a6a19966c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a9:b4:e8:66:36:70:85:8c:30:04:f2:2a:ec:04:a8:f5:c2:
         83:eb:7b:9e:f0:33:26:52:52:b0:41:86:51:87:60:36:3d:92:
         1d:0e:b0:f8:56:e3:5e:e1:48:35:18:38:df:a6:c3:b3:81:71:
         34:4f:2c:61:22:7c:a8:a6:b4:36:ef:c8:11:b0:14:0a:9e:af:
         00:71:1c:61:7e:60:65:a2:52:6a:74:7f:6c:dd:e1:81:17:ac:
         98:b5:22:08:5b:35:86:05:bb:9e:ec:42:cf:59:b5:6c:d2:8f:
         d5:aa:64:3a:9d:24:07:42:fc:a5:80:b5:84:fd:11:5f:7c:cc:
         29:9a:4a:00:4c:d9:d2:3d:71:29:c1:7d:a9:2a:fe:c3:ac:52:
         62:0a:8a:10:4b:22:97:ff:ee:46:d4:9c:e3:da:e6:e8:5e:99:
         5e:30:6b:4d:d1:37:6a:73:14:17:45:64:65:14:d8:40:85:c7:
         10:3f:3b:12:79:98:16:23:67:0d:3e:06:ac:fc:9b:97:90:2b:
         22:fd:49:a6:a6:ca:6f:24:7b:4f:6f:7d:7a:3c:fd:f6:e9:90:
         e6:e9:13:de:a9:2b:66:8d:e7:30:c5:30:e5:4d:e7:af:0b:0a:
         aa:c8:31:3b:78:ab:dc:cd:a2:5c:7b:e9:2f:21:be:41:24:dd:
         13:11:99:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----