Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a059af3b-84a3-3a98-a314-f762bfa381e5.roa
File:                     a059af3b-84a3-3a98-a314-f762bfa381e5.roa (raw, json)
Hash identifier:          S9hduEjBGHuX0c7jUSHoO4do+7TeKm2NBvYWwlpfEi0=
Subject key identifier:   4A:2E:87:95:7A:B0:11:23:A3:36:B5:A2:E7:09:CD:52:39:B8:38:A8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A512E99741F5F527ECD6D40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a059af3b-84a3-3a98-a314-f762bfa381e5.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     394996
IP address blocks:        65.19.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:2e:99:74:1f:5f:52:7e:cd:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=0906e0d0-4841-4b8e-a7fe-bd00973ad200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cf:31:15:ad:b3:72:d1:f9:4a:02:1c:94:56:
                    f4:0b:0a:dc:30:cc:8e:dd:e5:43:12:7a:68:6b:e7:
                    e6:b5:a8:55:35:1f:f3:e8:d6:31:fc:67:5b:34:2a:
                    2d:06:1b:53:76:c3:53:a6:25:5b:0a:9b:f5:ba:3c:
                    14:96:1e:26:ae:bc:6c:93:45:d9:c8:38:43:bb:64:
                    45:87:34:7e:47:75:f7:f6:1c:b5:20:13:35:fd:ec:
                    3e:48:e3:e5:62:f5:68:04:e7:05:ab:c4:0c:bd:15:
                    df:92:62:5c:72:77:86:61:8f:ba:c3:94:e9:be:bd:
                    55:01:44:e3:0b:96:46:17:e7:a6:9f:8e:60:10:18:
                    12:6b:2f:be:05:f2:40:46:d4:93:5d:61:70:b0:b2:
                    87:f6:01:f3:0b:6e:c0:ea:a6:00:e1:e0:49:de:a0:
                    70:65:c9:5c:3f:83:6b:81:79:12:cf:58:85:03:ce:
                    f2:07:1c:99:87:1f:d8:1b:00:6c:c7:4d:49:10:0d:
                    1a:ee:97:70:80:37:fb:97:b5:dd:10:1b:05:82:b9:
                    44:8c:18:39:f3:49:38:1b:11:cf:e3:9a:4c:79:41:
                    e4:75:2b:a1:67:5a:28:33:27:11:f0:b2:43:a3:f8:
                    2e:af:09:75:6f:8f:1b:94:87:23:b3:fd:9f:39:33:
                    cf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2E:87:95:7A:B0:11:23:A3:36:B5:A2:E7:09:CD:52:39:B8:38:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a059af3b-84a3-3a98-a314-f762bfa381e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:41:42:0f:b3:4b:86:7f:6c:fb:b6:b8:cb:61:77:c3:d7:7e:
         a4:d1:85:7b:7a:7b:94:2a:9d:75:55:22:8b:f6:42:58:dc:48:
         e9:62:bd:ea:e7:27:d1:53:43:dc:ce:68:a2:c6:77:a6:df:9d:
         67:67:dc:9a:51:f6:58:8f:58:d9:80:8c:79:70:50:c4:33:f8:
         70:7b:29:da:c4:d6:da:20:0d:32:68:cd:c7:8a:6e:36:19:05:
         17:50:3f:af:29:e6:40:ab:5d:6e:5b:31:a7:01:22:aa:a5:b3:
         53:3f:3e:8d:6d:ad:bc:0a:2b:6a:ae:e3:65:66:44:ee:52:43:
         54:3d:d3:8d:8c:b0:6f:86:44:52:dd:cb:90:9e:26:65:bc:8b:
         2d:56:c7:3c:21:3d:13:15:a6:24:ab:7f:8c:f1:5b:85:b2:e1:
         ef:92:ba:bf:ce:08:72:37:f2:42:3e:86:d0:d9:53:ae:19:0d:
         30:4c:99:9c:fb:21:40:50:34:63:3f:3b:dc:93:b9:81:8a:ea:
         ad:f5:ac:39:26:a1:75:4c:29:b1:6f:30:ac:29:a4:8e:43:dd:
         5a:91:e0:fa:d9:bf:ce:e4:c6:65:48:0a:8d:4b:e7:65:de:4f:
         a6:bb:f8:da:11:d3:cb:b1:e3:c8:a3:1d:3b:a6:ab:8e:d8:f9:
         c2:22:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----