Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c52ca5c-fff7-327d-a232-3fe5bf889abc.roa
File:                     6c52ca5c-fff7-327d-a232-3fe5bf889abc.roa (raw, json)
Hash identifier:          zlnivV6QyoiJ3AYFVHvNQoD4kH/5wy+ioEiPhNpI0q4=
Subject key identifier:   29:5C:BB:AA:AF:58:FA:01:6F:D3:08:DF:EA:6A:18:1E:0D:68:5C:CE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA63130121B73B27E2D56C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c52ca5c-fff7-327d-a232-3fe5bf889abc.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     199516
IP address blocks:        65.49.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:31:30:12:1b:73:b2:7e:2d:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=dccdb75b-dfa0-4dc1-b200-fa7a097176e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:20:50:a8:1f:64:fd:2f:04:4d:31:d7:c8:
                    b2:f1:02:1f:e6:cf:f0:8e:53:92:db:2c:29:ec:ca:
                    90:26:2a:ed:87:ca:2e:04:8a:55:1f:40:2d:52:60:
                    fc:13:0f:da:44:3d:5a:f9:b6:f8:e0:45:d5:d8:4e:
                    77:c6:45:ba:63:e0:b6:6c:77:df:c1:bf:8a:fd:f4:
                    12:e7:da:40:13:31:d0:f5:0a:c6:b8:49:42:4d:18:
                    11:91:28:38:b8:bb:d5:43:31:39:50:bf:9b:87:50:
                    e9:bf:cb:0a:26:60:32:8a:d5:4a:2e:26:e1:47:f1:
                    16:90:19:2e:99:89:28:7b:ba:77:1d:ba:85:06:b0:
                    e2:09:4b:93:12:a1:04:0f:8f:e2:ad:10:ca:a2:b6:
                    93:f3:91:12:e0:4a:30:00:71:54:fb:4a:3c:67:70:
                    fc:1a:15:5c:28:e7:ec:c0:08:9a:cb:a6:3a:a2:d2:
                    87:91:05:e7:04:27:18:cf:29:7b:b3:62:46:c5:4f:
                    c8:cd:b2:8b:eb:02:88:23:1f:4c:57:86:35:7f:9f:
                    c1:da:7f:44:80:10:28:d2:dd:81:0b:51:70:1f:33:
                    f0:39:ba:96:e4:cc:b7:8d:f5:4a:b1:07:f0:90:4a:
                    cf:ff:0b:b9:ac:2e:b8:58:9a:bc:d2:56:d3:ef:fa:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5C:BB:AA:AF:58:FA:01:6F:D3:08:DF:EA:6A:18:1E:0D:68:5C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c52ca5c-fff7-327d-a232-3fe5bf889abc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:a8:9c:fc:88:e2:7e:09:ee:b7:0b:d1:ab:be:66:dc:4b:
         3c:1a:03:d5:3c:d3:d7:a1:86:b9:4b:d8:56:3b:d0:fb:cb:33:
         b9:b9:9e:18:12:ce:15:68:15:ea:17:56:31:91:f7:e4:0a:e5:
         fa:cf:54:a9:b1:6c:ea:b8:70:0a:1c:a9:cb:32:04:33:b6:96:
         b8:27:a2:c4:29:d9:c2:19:e5:cf:71:bd:ee:3a:63:30:38:99:
         9a:40:a5:74:ca:c3:6b:da:c7:e8:90:40:1e:0e:f5:9a:17:62:
         56:17:fa:70:7e:2d:cb:05:05:68:24:27:f3:ce:87:66:9c:58:
         de:d5:a3:b9:04:bc:32:3f:e4:c7:6c:89:38:d4:ef:78:df:79:
         a4:47:f8:35:27:8d:f0:aa:f3:94:93:88:93:5b:6e:66:64:29:
         f1:2d:e1:5c:90:04:99:c8:83:2b:8c:86:2b:98:48:be:3b:fc:
         8e:86:e1:67:94:a8:2d:c5:e6:55:b1:ce:ca:b4:6b:09:a8:a3:
         07:50:f4:19:45:9c:5e:7b:ae:34:18:9c:cd:19:f9:0d:96:a8:
         35:cb:bd:32:bc:c1:62:16:6f:94:19:09:6e:d3:4c:0c:5d:59:
         f1:c6:06:cd:54:74:dc:ca:12:2c:23:ff:6d:1b:78:e0:ee:db:
         c3:c9:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----