Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4eba0f4b-caf8-3af8-bced-3a9ecd03a693.roa
File:                     4eba0f4b-caf8-3af8-bced-3a9ecd03a693.roa (raw, json)
Hash identifier:          KB2T0PVQgBmhrnD9VhfVpTiZh6NUJ+jV8lebOVuHp5s=
Subject key identifier:   82:28:40:E1:F3:D4:A1:F2:29:CC:FE:71:54:0D:2D:61:F2:96:A8:DA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583C72E68D4770EF0381EC882F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4eba0f4b-caf8-3af8-bced-3a9ecd03a693.roa
Signing time:             Sat 01 Jan 2022 05:00:00 +0000
ROA not before:           Sat 01 Jan 2022 05:00:00 +0000
ROA not after:            Fri 01 Jul 2022 04:00:00 +0000
asID:                     394708
IP address blocks:        184.105.56.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:72:e6:8d:47:70:ef:03:81:ec:88:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan  1 05:00:00 2022 GMT
            Not After : Jul  1 04:00:00 2022 GMT
        Subject: CN=0ef4dd44-e84c-4321-bb18-fdebd9dfdf52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:d4:77:39:81:6a:6c:1d:17:5f:ab:73:e3:
                    6c:ac:b0:dc:cf:8e:ad:da:84:6b:57:5a:2a:46:91:
                    70:ad:9c:25:c3:4c:16:1e:f1:59:74:50:96:41:3b:
                    d1:c1:79:4b:f7:c1:ac:fc:e1:e1:e3:a1:cf:5d:4c:
                    a8:54:ba:2e:93:d0:01:4e:7e:a8:62:c9:23:0b:0f:
                    72:57:16:7f:93:45:07:8b:04:d1:1b:df:76:22:c4:
                    77:d6:e0:8c:b4:ac:ff:10:d0:aa:3a:5e:09:98:8f:
                    f4:87:ef:67:6e:06:f3:6f:07:dd:0f:02:05:5c:c6:
                    09:43:d9:9f:0d:f2:59:e3:7d:1e:79:5b:47:39:fe:
                    08:36:bb:1b:ee:fa:ca:45:38:11:05:f3:b7:5c:59:
                    fb:98:33:60:bf:a6:8c:73:b1:55:18:4b:9c:6b:d8:
                    ee:1c:0d:7c:11:fe:c6:80:fb:ba:70:f8:e0:cb:a3:
                    8f:b8:7c:d3:1b:56:2a:f9:b9:f8:9a:e1:5b:94:39:
                    2a:8e:2f:03:46:e9:82:f8:e7:e8:3f:dd:98:46:65:
                    42:aa:40:e2:a9:64:7e:27:9f:6c:8f:f0:2a:a1:9c:
                    a6:0b:8b:fa:51:a5:4f:d7:df:97:38:41:58:6f:de:
                    93:4f:23:fb:07:88:64:d6:85:56:d1:33:bf:eb:fc:
                    0e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:28:40:E1:F3:D4:A1:F2:29:CC:FE:71:54:0D:2D:61:F2:96:A8:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4eba0f4b-caf8-3af8-bced-3a9ecd03a693.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:33:fe:7e:cd:af:f5:dd:15:b4:4e:e8:5f:36:9e:36:68:
         9b:14:34:2c:52:bf:c9:64:a7:7c:e2:aa:c8:63:c1:e3:e7:9b:
         a7:96:59:2f:8d:b6:e7:c5:3d:bf:a3:3c:da:8b:fc:7a:48:26:
         70:48:20:9b:81:a6:31:fc:16:29:3b:2e:ea:db:b6:33:1e:bc:
         5b:35:41:bd:2d:a2:46:44:6d:3b:73:95:0d:50:ce:a7:a4:c9:
         75:22:34:81:a3:9d:a4:06:63:f7:d8:9a:1c:ba:91:52:71:eb:
         fd:df:5b:4f:70:b7:96:84:f6:3c:91:0e:10:86:7b:8e:fa:1f:
         04:f9:9b:ed:34:c2:e5:06:6b:bf:26:08:a1:8a:15:16:68:b7:
         af:18:68:0d:61:f4:6f:48:e3:9f:1d:38:db:af:9d:10:06:45:
         11:2a:a3:04:67:05:fb:79:62:e1:ea:3f:f7:ec:c0:22:f6:35:
         8b:c1:ca:ef:46:2e:4b:59:c5:c8:6f:6d:e2:d8:b3:6d:81:57:
         5f:35:a1:f6:50:dd:1e:09:e0:d6:c2:99:d7:46:aa:d8:1a:19:
         69:f7:8c:42:4e:fe:4f:c7:0e:d6:ab:44:72:21:3c:e1:e3:f2:
         3a:64:3c:b9:5a:9f:d9:60:99:3c:a3:a0:8b:da:b7:66:6e:c1:
         ca:32:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----