Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e6f3f8a-b66b-3ed1-9c55-58ad8cdee62b.roa
File:                     9e6f3f8a-b66b-3ed1-9c55-58ad8cdee62b.roa (raw, json)
Hash identifier:          l5sJzXdZEllcMuUNMoWZ/AsZEcI2ZWUK6ZC5rim0fzc=
Subject key identifier:   23:F8:4C:6E:72:FE:E8:AC:48:49:64:B2:49:74:3B:CB:4B:B7:30:5A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858422F3CA9D98920085C20315740
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e6f3f8a-b66b-3ed1-9c55-58ad8cdee62b.roa
Signing time:             Sat 10 Jun 2023 12:00:00 +0000
ROA not before:           Sat 10 Jun 2023 12:00:00 +0000
ROA not after:            Mon 11 Dec 2023 05:00:00 +0000
asID:                     54466
IP address blocks:        74.82.25.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2f:3c:a9:d9:89:20:08:5c:20:31:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 10 12:00:00 2023 GMT
            Not After : Dec 11 05:00:00 2023 GMT
        Subject: CN=4b12be6b-058d-41b2-bf9f-0f3f046c99fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:60:44:9c:93:b2:86:a2:6a:c0:b4:57:88:
                    49:aa:c6:de:76:25:78:cf:21:d7:40:76:fb:9e:db:
                    22:08:e7:2d:2d:c0:df:49:f5:10:c8:94:f6:f5:f1:
                    92:d4:4a:67:70:94:be:c2:58:23:0a:4c:13:2e:26:
                    8f:2e:f7:ba:f3:a7:b5:63:80:a0:e5:2c:b0:9d:d7:
                    24:ed:46:61:a9:92:ee:fd:ef:c9:35:b3:d3:13:3a:
                    9d:f4:bc:37:36:4a:da:01:51:de:5a:a8:b8:6b:2b:
                    9c:50:c1:aa:70:9e:b8:00:f1:73:b6:24:6d:e2:0b:
                    75:00:76:83:30:bb:d6:14:79:12:33:e9:b8:e6:38:
                    83:a1:83:99:dc:07:ef:e6:bd:8b:fe:97:19:7f:1a:
                    3f:8b:1e:cd:05:76:51:55:87:d9:97:f2:df:c8:90:
                    16:36:59:70:1d:f2:3c:3b:ef:cd:60:13:03:38:bc:
                    29:b9:2f:d9:c0:90:77:18:4f:ce:9e:7c:b9:df:eb:
                    20:e5:5f:fd:8f:c4:38:6e:ae:2e:f0:2d:a1:6e:22:
                    78:ca:98:55:9e:6f:d7:79:d4:72:ee:9e:e5:fd:ac:
                    20:8e:3f:4a:9c:2c:af:6c:17:19:fa:72:fa:82:98:
                    19:ca:0a:26:c1:70:f6:5f:71:fa:14:de:e7:5e:09:
                    e1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F8:4C:6E:72:FE:E8:AC:48:49:64:B2:49:74:3B:CB:4B:B7:30:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9e6f3f8a-b66b-3ed1-9c55-58ad8cdee62b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d7:d6:0d:e9:f6:00:f9:2e:76:bf:bb:fa:d1:88:8b:76:eb:
         de:71:45:e3:86:53:e2:17:da:c3:67:0e:b2:b1:c2:77:58:43:
         f9:e8:57:84:b5:5a:a4:39:a6:a1:63:cf:8a:57:78:06:8f:d5:
         23:54:cf:5d:bf:82:9b:f8:94:56:a2:bb:dd:41:ba:bd:58:37:
         45:40:b6:7a:20:46:6f:38:d7:82:27:c4:9a:c9:18:8e:92:ce:
         bf:bc:e3:82:50:57:1a:7b:af:1f:64:77:1e:b3:ac:e1:ad:87:
         83:40:46:37:b6:49:90:a1:a4:3a:47:f8:bb:b8:69:49:a4:5b:
         cb:47:07:d2:01:4a:94:b5:11:50:ff:65:e9:a6:18:c2:f9:5c:
         33:e9:cd:fe:3a:0d:d3:a4:21:df:d0:e7:7e:d1:f6:f3:6a:63:
         b0:a7:ce:dc:e6:48:4f:8f:27:99:c8:8c:3f:e9:26:18:dc:d7:
         23:31:b4:8c:2f:0b:69:c7:b5:af:e1:22:dd:e9:79:ab:ce:ad:
         bc:ba:30:42:32:61:4b:92:63:66:7c:ec:61:12:4d:fa:f8:27:
         36:10:7d:f6:f9:c0:4c:5b:35:0b:07:c0:fb:9e:38:11:b8:14:
         bd:b1:6c:a4:3e:4a:65:9f:01:f2:a3:ae:75:80:c7:e7:26:0e:
         15:8f:ea:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----