Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/835eb0ac-e88c-30bd-b93b-452d6d88fcdd.roa
File:                     835eb0ac-e88c-30bd-b93b-452d6d88fcdd.roa (raw, json)
Hash identifier:          9i6W+TNNjbroh1IGXbinpImzG4ITKrNZH2v2wrU0REU=
Subject key identifier:   33:37:C5:B3:52:48:61:A4:50:F8:E3:6F:EB:55:A8:F3:74:C6:B0:42
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648D93238CA6B54CB5B00580
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/835eb0ac-e88c-30bd-b93b-452d6d88fcdd.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     12097
IP address blocks:        184.105.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:93:23:8c:a6:b5:4c:b5:b0:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=c704ed21-94c6-4fec-a189-f745c7d35fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:23:0f:0a:7d:8f:15:7e:f4:30:ea:ef:4b:
                    0c:8c:54:e0:32:c3:49:38:c9:98:66:e7:9e:ce:79:
                    fb:fa:f9:bf:93:38:8d:ab:1b:70:3d:f5:21:87:c6:
                    1a:76:12:90:5e:54:bb:56:24:cd:0b:20:a2:14:a3:
                    93:f4:e6:d5:57:48:57:43:d5:f3:a1:d0:d0:12:2f:
                    f5:2e:ac:19:9b:2f:8a:f9:db:a0:9c:05:8f:4f:26:
                    22:c1:1c:9c:c0:e0:ca:ca:cc:08:87:0e:31:04:35:
                    33:f3:a8:70:db:2e:e7:c5:5c:01:4d:32:b1:28:81:
                    15:1c:5f:e7:46:27:e0:90:47:f9:1d:47:b9:26:56:
                    60:03:77:77:7d:f0:6b:1b:47:15:82:6c:b1:82:a2:
                    1c:a7:3f:cb:cc:f4:09:8b:c1:18:d7:86:9d:07:b6:
                    80:14:e9:17:45:e8:b6:55:fb:54:3b:52:fb:73:4e:
                    52:53:55:be:cb:9a:58:7b:74:e8:12:1d:81:d5:84:
                    03:55:4d:17:dd:a4:a4:e8:75:28:e0:87:3f:dd:7a:
                    80:11:cd:59:cc:22:bf:4d:f4:d6:0b:3a:00:5e:0b:
                    7e:bc:b0:c7:94:c0:45:11:40:6b:75:78:fa:e0:e1:
                    d5:66:36:84:e1:a3:5c:14:b2:4f:7e:18:00:c9:98:
                    56:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:37:C5:B3:52:48:61:A4:50:F8:E3:6F:EB:55:A8:F3:74:C6:B0:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/835eb0ac-e88c-30bd-b93b-452d6d88fcdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:00:33:62:ba:f8:3d:01:d6:5d:84:45:ac:35:66:6a:ee:1a:
         2a:93:6e:72:e9:a4:15:18:6d:b3:9e:38:cc:73:84:54:08:eb:
         3c:e3:f3:b9:fc:0d:e3:16:0f:f5:6f:e4:ee:77:e2:b0:3e:40:
         ad:9b:d4:7b:63:45:a2:a9:a9:b3:0f:81:85:4c:7a:3e:fd:34:
         ae:a7:aa:15:0d:cb:61:63:72:03:79:c8:91:aa:9a:6d:19:00:
         05:17:b0:90:7b:84:e1:d9:df:72:9a:84:ac:f5:a1:10:22:ad:
         81:e9:d4:e1:8b:2b:1e:01:d1:62:33:f4:74:da:0a:c2:48:49:
         d8:b8:b2:82:d8:68:78:60:7f:67:fc:47:45:42:c0:21:a4:a0:
         cd:3d:ed:75:89:20:43:9b:f7:73:ac:c6:3f:6c:ab:bc:b7:c0:
         4e:46:55:f4:c5:61:62:1d:88:86:62:ff:c4:14:b8:c1:85:e7:
         43:5c:2f:f2:7e:cd:a7:26:06:70:e1:a6:38:cb:d2:c5:22:48:
         e9:b5:5a:af:29:bf:25:64:87:98:5f:d4:da:ec:eb:47:c7:4c:
         54:af:cf:d9:4f:08:ae:c5:27:c7:57:59:1c:69:4c:72:e7:22:
         30:c3:5f:55:a3:e6:f8:1b:fb:2a:23:dc:92:c9:69:39:6d:8e:
         b3:67:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----