Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f321cac-516e-3ba9-b42c-9bd5f62b0446.roa
File:                     9f321cac-516e-3ba9-b42c-9bd5f62b0446.roa (raw, json)
Hash identifier:          v3vktrNb5uqEL4GrmEZYQvdi4xH/DjPaWdxRyABPVHg=
Subject key identifier:   88:CF:88:A3:20:52:F4:67:3F:DB:23:52:70:A6:97:E7:15:70:F2:99
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E1F451E8BC0CC02667E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f321cac-516e-3ba9-b42c-9bd5f62b0446.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     36103
IP address blocks:        72.52.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:1f:45:1e:8b:c0:cc:02:66:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=284c170d-7f96-4af5-aecd-be7d9eaf30b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:1f:88:a7:2f:99:03:1e:f0:4e:a5:5c:02:
                    20:f2:44:c7:f1:85:36:d5:af:ce:23:93:96:89:3e:
                    21:92:95:67:c4:4e:e7:10:66:25:8d:ab:cd:08:4c:
                    18:72:71:5c:09:11:78:6b:f9:8d:42:d1:64:cb:b0:
                    7a:ed:2c:df:ac:48:ac:8f:8d:61:51:80:a3:19:f6:
                    1d:5f:76:38:fb:15:85:20:97:01:a3:5e:1c:f4:3f:
                    01:d7:7d:5e:88:6c:dc:7f:5a:60:3a:95:76:fe:38:
                    36:1f:ba:7e:ba:22:a9:47:72:59:dc:75:27:2e:d6:
                    5b:01:6c:48:af:2d:5d:9f:1c:95:b9:5b:9b:e8:9f:
                    bc:e8:14:93:2a:36:5c:26:a8:8a:dd:f3:a8:30:9e:
                    b5:9a:84:39:c1:e4:15:11:0e:a0:bc:ae:40:9d:87:
                    3e:7f:eb:db:65:ac:0c:63:1c:57:96:4b:aa:90:c3:
                    4a:e2:68:2b:1a:af:4c:5d:84:a5:7f:6c:4e:1e:d2:
                    fa:a3:c2:91:48:71:fb:e6:c9:78:37:7c:83:ab:88:
                    fe:da:e0:12:73:a3:1b:a5:8e:f4:ea:ea:2a:a6:fc:
                    fa:6c:c0:c2:5a:47:ef:de:21:a1:1f:a6:1a:c7:7a:
                    f4:cb:5b:61:14:f9:00:db:90:22:8e:ab:c4:eb:4a:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:CF:88:A3:20:52:F4:67:3F:DB:23:52:70:A6:97:E7:15:70:F2:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9f321cac-516e-3ba9-b42c-9bd5f62b0446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:22:ce:fe:0e:76:8b:7f:60:e0:d9:17:fd:0b:66:8a:03:41:
         81:c8:38:9c:44:ad:07:f3:dd:f2:2e:a2:48:f0:17:b9:a0:4b:
         92:7f:47:ab:01:c1:2b:d5:36:9a:94:e6:f4:b9:f6:d4:a1:4e:
         cd:84:15:9c:42:22:54:dd:12:d8:83:f3:d2:cd:09:74:0c:24:
         a9:44:ba:07:37:bf:6f:33:7c:fa:2d:00:95:bf:fb:56:28:56:
         e3:78:ea:c5:34:6b:7c:84:d0:c8:a7:62:e7:e0:09:e9:6d:d6:
         e5:3b:b6:bb:c0:ee:53:9a:52:cf:71:1d:a3:f3:09:da:2c:61:
         a9:78:98:c1:f6:cc:62:5c:ad:ca:d4:56:0a:a2:b5:31:48:9e:
         65:9e:9d:d5:53:cd:81:60:8e:0f:06:48:c6:ea:92:98:71:63:
         5c:ad:b7:8e:04:d5:3d:f4:46:e5:f1:7d:43:3c:51:6b:28:08:
         55:4b:e6:8a:c0:4d:39:d7:61:5f:7b:43:6b:3d:dd:95:19:48:
         26:d6:fe:dc:f8:05:50:de:6a:3a:af:56:4f:e9:eb:85:02:fb:
         f9:11:66:7b:23:a1:e0:41:19:dc:61:b2:da:e8:3d:8b:32:de:
         44:22:83:3b:7e:87:68:42:ae:42:9f:96:94:06:29:bd:8c:a5:
         8e:95:5a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----