Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/99275b61-5c5c-3aff-ba9f-71b4b27c2e90.roa
File:                     99275b61-5c5c-3aff-ba9f-71b4b27c2e90.roa (raw, json)
Hash identifier:          4J9hHHI2pZW30TadJmgjvqF+BR9J2FrTq5DVTzuhGpM=
Subject key identifier:   0E:CB:DD:DD:C0:7B:74:FF:66:30:4F:06:D2:53:20:34:AE:CA:00:A3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D7935955F2B1109CBA1B74F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/99275b61-5c5c-3aff-ba9f-71b4b27c2e90.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     18106
IP address blocks:        64.62.220.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:95:5f:2b:11:09:cb:a1:b7:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=6c6c2581-f68e-4837-b0f1-770ba20c627f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:07:64:4b:93:1b:f4:98:d5:b3:de:a6:17:ed:
                    a3:a6:55:49:46:44:47:28:de:af:3b:0a:00:db:71:
                    b3:fc:75:73:7e:37:f5:de:85:c7:67:a9:64:b9:6d:
                    71:d0:6f:db:54:c8:84:f4:4c:85:61:2b:49:84:3c:
                    a1:b0:bd:02:da:c3:64:cc:e8:93:20:ae:8b:a9:63:
                    99:77:fa:89:0f:9a:64:1c:44:f8:93:b8:a5:cb:da:
                    bc:62:54:d6:35:a1:63:17:64:42:4c:8a:11:1d:28:
                    99:cf:ef:d2:ca:90:ce:1e:4c:03:98:c4:c5:87:90:
                    23:75:7a:a0:58:3e:45:02:12:33:36:d4:17:b1:fe:
                    4d:d0:97:67:e1:c5:3d:e2:cd:c7:0b:7d:ad:e4:eb:
                    87:2d:f4:c7:b9:e4:8e:5f:3a:de:8b:bd:7c:c0:50:
                    6a:50:c3:68:e3:f8:51:dd:1e:49:8f:ee:79:f9:d2:
                    8f:3b:cd:b1:95:5a:5f:3a:89:3b:5f:ec:7e:4b:05:
                    4b:b1:da:9e:93:d5:e3:da:7d:8a:a3:13:18:a6:ae:
                    40:24:fa:31:18:c5:5a:cd:e4:2d:5f:cf:d8:45:7a:
                    14:0c:e8:d1:da:eb:cb:e4:7f:b4:11:50:ac:0d:28:
                    ba:41:c4:cd:83:ae:fa:75:b7:25:2a:67:1c:22:77:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CB:DD:DD:C0:7B:74:FF:66:30:4F:06:D2:53:20:34:AE:CA:00:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/99275b61-5c5c-3aff-ba9f-71b4b27c2e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:c5:98:99:76:69:91:da:0b:be:4a:82:26:24:32:72:db:
         e1:cd:2a:9d:be:73:41:91:b2:a3:d5:cd:2b:6a:3b:53:77:63:
         fc:fa:c7:57:61:41:5d:ec:9f:6c:45:40:0e:44:2b:c3:79:56:
         69:bb:26:a7:76:89:0e:4c:d6:dc:38:27:60:5d:03:d7:b7:79:
         e8:3c:d6:68:cc:1a:33:9d:73:b9:76:ce:68:0e:cd:fe:c4:25:
         7c:90:66:b2:eb:d4:63:a8:fc:70:6e:77:69:d6:d7:1d:c2:b6:
         5d:57:33:8e:44:2b:e5:5d:0b:de:a7:0f:48:85:b4:e5:55:d2:
         6b:f9:15:bb:d2:1a:de:a9:5a:f8:19:64:26:a4:94:ff:6f:5a:
         01:e5:92:9c:54:2e:06:3e:02:9a:50:e1:7d:0f:94:9e:1e:27:
         f6:bd:17:30:60:a0:67:b6:b7:d7:d6:d9:28:8d:ec:f0:c6:68:
         7b:5d:c5:d4:f8:9d:68:69:06:10:50:71:c6:21:ca:96:97:30:
         9d:4d:00:00:30:c6:47:9b:6c:4d:ab:18:ae:ba:29:50:08:29:
         27:6f:7e:b1:f5:c1:58:85:c3:52:fb:59:c5:14:7e:29:fb:08:
         2a:e4:40:82:70:52:66:a8:a8:06:82:0e:74:db:04:fd:01:0e:
         b6:4e:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----