Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98fe6953-7b63-35ae-ab60-32a8dad54a95.roa
File:                     98fe6953-7b63-35ae-ab60-32a8dad54a95.roa (raw, json)
Hash identifier:          N3RINpdefjPlSHCX+Rj+RqavtxXr0sWQAYxkQKLu8zI=
Subject key identifier:   B5:F5:10:28:86:65:33:F4:45:46:64:42:B4:A3:E0:DE:D0:0B:4A:5A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583EA81C3ECE9C3F06B7A8CB8B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98fe6953-7b63-35ae-ab60-32a8dad54a95.roa
Signing time:             Thu 21 Jul 2022 12:00:00 +0000
ROA not before:           Thu 21 Jul 2022 12:00:00 +0000
ROA not after:            Sun 22 Jan 2023 05:00:00 +0000
asID:                     394230
IP address blocks:        74.82.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a8:1c:3e:ce:9c:3f:06:b7:a8:cb:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 21 12:00:00 2022 GMT
            Not After : Jan 22 05:00:00 2023 GMT
        Subject: CN=a789e175-2c48-4484-9afe-18e9d3f69c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:df:3c:76:94:b3:68:2b:83:0d:9f:08:e4:
                    6e:8e:d4:f9:36:fa:77:09:ef:75:5d:7d:22:7f:7a:
                    b2:63:7e:6b:2d:60:13:3a:5e:83:e0:b6:60:c9:95:
                    e6:e0:45:d4:82:00:e9:3a:d6:6a:48:25:bd:ec:c0:
                    9b:79:05:57:8e:a9:e6:62:54:1d:cc:da:5a:72:46:
                    c6:9c:25:3a:c8:6e:99:1e:f9:c8:c5:f9:6d:66:77:
                    97:26:48:6b:c9:fd:a9:37:6a:e5:65:59:52:67:89:
                    3a:46:4c:89:13:aa:6a:e2:38:1d:14:69:ee:2d:ca:
                    ad:fc:0d:12:fa:b2:86:e4:fc:7f:57:a6:00:f8:b0:
                    c4:ef:3c:78:fc:95:bd:55:59:90:52:64:bf:3f:fb:
                    13:36:27:ee:9f:b9:29:e8:51:31:d6:a1:13:5c:fd:
                    7c:70:e7:7d:8f:08:da:8a:f0:23:d6:4f:73:0b:d9:
                    75:bb:7b:bb:24:52:7f:20:f9:23:db:15:cb:d2:d8:
                    b0:69:9f:46:a1:f8:11:ba:c3:33:18:80:11:33:e4:
                    76:b8:b8:07:68:62:68:ca:91:7f:fe:c4:a5:c9:87:
                    97:5f:90:a5:fa:0b:22:50:c6:a2:91:44:08:77:6d:
                    1a:92:7e:6c:c8:72:fe:f0:85:7d:2d:bc:d1:71:25:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F5:10:28:86:65:33:F4:45:46:64:42:B4:A3:E0:DE:D0:0B:4A:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98fe6953-7b63-35ae-ab60-32a8dad54a95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:5b:71:ef:e1:f9:d3:2e:25:71:b7:f2:d1:30:5e:37:76:
         e4:46:19:ca:05:cc:0e:1d:86:8a:b9:9d:c4:6e:7c:19:e9:f3:
         f3:56:4c:48:ef:b3:d5:02:06:17:05:47:85:2e:43:4f:07:0d:
         7c:48:21:dd:0c:61:5f:e3:f1:2d:f4:34:16:dd:af:c4:9f:40:
         5f:3e:4f:68:26:e4:c7:94:98:12:40:79:d5:17:ef:8c:ba:d7:
         19:d9:00:39:17:78:27:92:17:b8:f0:c3:e6:b9:b2:5e:11:3c:
         40:bd:f5:71:21:09:55:ee:f4:e1:34:3a:5b:b1:c5:e6:d8:7e:
         c2:63:73:ac:fd:16:d1:30:95:85:6b:86:be:63:41:29:73:4e:
         7e:ab:a7:00:51:3b:46:45:f3:65:db:67:88:70:a8:02:07:9e:
         82:c6:fd:f5:cc:1d:eb:0c:66:f3:b7:cd:c4:71:bd:88:c8:c9:
         78:11:a9:78:ff:8e:b5:26:d3:0b:37:eb:38:33:d8:cc:3c:b8:
         f0:3c:be:a3:ac:eb:58:48:a7:d1:ce:34:c8:53:16:f1:1b:a4:
         87:5d:b7:56:ac:73:1a:74:9b:36:62:f4:1f:71:59:76:53:e2:
         f9:b6:10:81:4a:24:6e:a1:5e:f0:23:e8:da:c1:ec:3e:30:a3:
         03:8c:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----