Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ab4f0d0-0efb-3e00-9a25-d06c4ae16fc9.roa
File:                     5ab4f0d0-0efb-3e00-9a25-d06c4ae16fc9.roa (raw, json)
Hash identifier:          QteGyne9z1EtUKmyu/5t/8xKbYs2Smu7K9RzzxiKXP0=
Subject key identifier:   00:6A:76:3F:D2:65:78:7A:B5:B2:67:47:FA:3C:70:A8:C1:1E:11:67
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648DF2B264D3289B0CF03120
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ab4f0d0-0efb-3e00-9a25-d06c4ae16fc9.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     41678
IP address blocks:        65.49.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:f2:b2:64:d3:28:9b:0c:f0:31:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=865b16d5-0639-48e4-b297-9b3b87aff71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:0b:e8:be:b9:f6:35:25:3c:ae:1b:c9:c8:
                    f5:a1:5c:98:1a:9a:e4:e3:28:eb:b8:0b:94:ec:12:
                    23:ca:21:62:ca:2a:0d:25:01:9e:f4:d2:11:9a:65:
                    c5:9a:e6:f4:33:8b:a1:a7:3d:c5:80:e1:74:2e:d9:
                    af:79:a0:f4:ee:b2:f2:b4:93:da:2e:89:11:83:0c:
                    f2:91:59:15:23:3e:5c:5e:cd:a8:d6:d0:8c:38:f8:
                    da:b0:bd:3c:4a:c4:6b:e1:ae:2b:81:53:7a:fb:e8:
                    58:89:1c:bd:7c:ec:9d:6b:72:c3:51:23:ad:85:9e:
                    ee:a8:ce:b9:95:ee:4a:d5:33:86:a4:ea:8d:3f:02:
                    cd:64:b1:f8:b1:65:58:21:e8:9e:37:cc:c2:33:0b:
                    cd:78:85:e3:a5:df:da:34:e5:96:41:11:47:a9:ee:
                    1f:f1:94:f6:d6:20:5c:02:9c:3d:6e:6a:02:38:f2:
                    c8:13:ba:be:91:36:4b:0a:41:bd:0f:e3:ca:ee:31:
                    15:d0:8c:89:07:a1:06:90:d3:a8:92:05:33:e8:d9:
                    4e:d9:12:8f:25:35:99:d8:ba:86:d5:1b:f2:c0:3b:
                    71:d5:fc:6c:14:c9:30:e7:71:26:cb:74:4c:f7:ef:
                    35:16:c2:1b:8c:10:09:6f:5f:69:36:df:29:81:a8:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6A:76:3F:D2:65:78:7A:B5:B2:67:47:FA:3C:70:A8:C1:1E:11:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5ab4f0d0-0efb-3e00-9a25-d06c4ae16fc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:16:92:ca:1b:79:c3:d4:da:6e:26:25:4a:f7:3c:30:08:aa:
         7c:bd:f2:6f:7f:1c:12:73:12:70:ab:6c:a1:5d:b5:61:22:99:
         ea:25:d7:0b:32:6e:92:eb:9d:f7:55:14:e0:66:46:37:0f:45:
         07:40:c0:cf:f5:ac:4a:be:e7:06:0f:62:4d:b3:6c:33:33:8a:
         f3:52:6f:5a:39:32:43:0c:1f:f7:3b:51:33:d5:7d:6d:0e:01:
         77:30:c5:0e:28:5e:70:02:7e:e5:16:a0:ab:73:1a:74:b1:2e:
         7f:02:7f:dc:d3:d6:4d:0d:94:9f:e9:8c:c8:a1:cb:3b:3b:8e:
         ac:3f:8d:b7:7d:ac:8f:53:c3:38:98:cb:50:ed:19:78:3f:ba:
         76:06:44:30:bc:35:2b:83:b8:e1:ee:dc:f5:d2:e2:aa:24:40:
         d1:88:ba:36:24:bb:91:35:a2:55:c4:ce:de:51:66:22:db:6a:
         ee:97:4c:6a:8c:9c:b2:3a:73:70:0d:9e:d1:e0:f8:39:b2:62:
         47:0c:77:c4:2c:b9:eb:11:08:39:01:94:85:f6:97:f8:8d:fc:
         0d:04:64:02:e6:a1:3d:e1:03:07:6c:23:31:85:1f:84:bc:a6:
         5d:32:89:ee:7c:03:7c:bf:e5:ea:ab:fc:b7:ec:d2:de:53:cb:
         67:0f:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----