Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafbe5b3-2e42-3e9d-b510-c1fc423fc8f2.roa
File:                     aafbe5b3-2e42-3e9d-b510-c1fc423fc8f2.roa (raw, json)
Hash identifier:          0+VFBU0FgaeLwQR7/Q2dp9RCmzEINhmP6selK+5ykTo=
Subject key identifier:   7A:C6:50:F6:EF:1D:58:C7:82:F7:FB:20:EB:10:D4:9A:F6:D0:12:6A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648EB1ECD2258C7C8B74E2B4
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafbe5b3-2e42-3e9d-b510-c1fc423fc8f2.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     63186
IP address blocks:        184.105.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:b1:ec:d2:25:8c:7c:8b:74:e2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=b2b9265c-484c-4836-8dbc-521e52906a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fa:4a:89:59:d2:52:9d:e8:d0:f2:24:67:cc:
                    1a:bc:96:81:fc:e6:c8:fe:52:8a:c8:9b:2d:9b:45:
                    37:37:95:61:93:f1:34:76:4c:64:2b:ae:0c:fa:fc:
                    ec:67:c4:8a:2e:65:d6:4c:20:76:9f:10:54:72:8d:
                    99:03:f7:b6:24:96:8d:59:64:d5:13:26:a5:cb:e7:
                    f7:9c:8f:f6:a0:36:d5:02:8c:2e:ad:fc:c6:bd:cb:
                    3b:16:b1:db:79:0a:f1:76:53:b7:a2:63:a0:ef:de:
                    08:ee:28:b2:57:da:d7:55:33:ba:0f:f5:fa:49:51:
                    c1:75:ff:9f:44:d5:bb:d7:83:9b:4f:26:fe:a8:12:
                    58:96:42:57:a7:cb:9a:3f:ed:60:55:2b:a0:a7:45:
                    0a:b1:ae:99:45:66:55:1f:1b:18:27:06:98:56:08:
                    d8:a6:b9:21:f3:f2:c9:28:f2:28:bc:60:b7:fc:b8:
                    91:1b:75:59:70:51:4a:84:ee:fc:02:5a:70:9d:a8:
                    8e:26:41:3f:00:a2:26:15:c5:55:52:7d:07:4e:47:
                    0f:ce:27:6d:14:44:35:94:29:aa:c1:93:42:09:a3:
                    0e:f5:08:3e:0d:8b:24:7f:0e:1b:12:67:e4:bc:ae:
                    92:51:ab:fc:bc:25:ed:79:aa:68:fb:e5:b1:82:47:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C6:50:F6:EF:1D:58:C7:82:F7:FB:20:EB:10:D4:9A:F6:D0:12:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aafbe5b3-2e42-3e9d-b510-c1fc423fc8f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:35:f0:72:de:e7:6c:1f:68:26:ab:a8:ce:fc:c0:9a:77:99:
         02:7a:bc:6b:0b:a5:01:0b:4d:af:f5:b7:c5:b9:dd:e3:c0:b3:
         4b:f3:dd:79:7e:df:22:26:2a:cb:dc:91:57:3d:d4:db:72:da:
         2f:e6:83:5f:08:74:0b:08:af:81:2b:ba:a9:02:3f:a5:f8:4b:
         56:67:80:39:9b:ca:93:d1:1a:97:71:7d:15:8d:24:0e:77:50:
         80:79:aa:71:67:98:b6:63:62:6d:1c:11:50:68:9a:11:73:9a:
         4f:fc:00:55:dc:8a:02:5d:a5:4f:0b:fb:85:a8:75:2b:01:ff:
         9d:5a:05:4e:7c:c2:01:58:71:a1:6b:1a:96:fb:a8:53:6c:ca:
         4d:0d:de:0d:72:0f:4b:7c:ad:be:8c:6b:d5:3a:50:b6:7d:2a:
         ab:2f:de:f1:6c:20:d0:62:e5:aa:4f:43:b9:d1:a0:07:52:9b:
         e7:64:85:1b:81:7b:02:24:99:2f:05:21:68:27:84:d1:0a:78:
         09:ea:e7:3a:69:03:2d:76:ac:a8:fc:12:1f:d0:03:47:a3:23:
         57:f0:14:c4:26:7d:5e:22:fd:98:fa:9f:bb:97:d6:1f:17:75:
         18:67:47:dc:e7:2b:b7:37:72:f3:31:4e:b9:03:f2:6a:94:a4:
         78:fd:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----