Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c194644c-026e-33b0-b904-ec649d6deb34.roa
File:                     c194644c-026e-33b0-b904-ec649d6deb34.roa (raw, json)
Hash identifier:          aqzuPNQxCTcZs6m4Mr9X7+85c9OlF25OpDKZE9fPRzs=
Subject key identifier:   7A:BF:6C:BA:E6:20:C6:0F:39:44:4B:5D:DB:39:4D:AC:7D:26:5D:8B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E1F46B75F5655EAF85C40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c194644c-026e-33b0-b904-ec649d6deb34.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     36103
IP address blocks:        216.218.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:1f:46:b7:5f:56:55:ea:f8:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=85bd92f4-4054-4e32-8b5e-3ff81754464d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:68:de:ac:f9:85:83:d3:cc:51:9f:3d:31:87:
                    95:22:5f:a3:0e:59:8b:d0:ff:8b:ac:0d:9f:8d:18:
                    09:51:74:00:1e:98:10:fe:47:ed:85:e3:60:88:72:
                    07:46:1a:8b:a2:ea:3d:d2:a5:6b:4c:25:09:1c:1b:
                    31:42:c3:72:7a:2d:d4:ab:30:a8:5f:b6:1d:9c:e7:
                    2b:4a:32:b8:ce:4a:83:2e:03:72:89:ec:f7:ca:4f:
                    06:22:dc:69:dc:ed:85:49:c7:3c:e4:49:ea:48:10:
                    65:76:aa:43:51:e4:47:23:cd:bf:c0:ae:48:01:17:
                    30:e4:64:56:4d:47:f3:6d:de:7f:f6:99:8d:43:a6:
                    19:67:a8:24:3b:dd:fe:d0:e3:64:54:a9:a5:5a:95:
                    ef:5c:cb:51:4f:b4:96:bf:c8:88:0f:d5:14:ee:44:
                    ef:9a:e5:f1:3f:0b:03:f8:41:d3:39:92:2c:e2:a9:
                    1a:0a:ca:4a:89:56:aa:e2:e8:e7:59:91:fa:3a:c8:
                    ae:22:9b:21:57:95:01:c3:35:27:1f:c4:5e:63:d1:
                    3a:22:20:17:f1:1f:33:6d:b2:76:95:f0:b1:e6:98:
                    79:52:fe:04:7e:9a:2f:de:da:61:6c:8d:04:e1:a3:
                    e2:46:97:5d:4b:f0:84:7f:cd:48:01:a9:18:84:94:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BF:6C:BA:E6:20:C6:0F:39:44:4B:5D:DB:39:4D:AC:7D:26:5D:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c194644c-026e-33b0-b904-ec649d6deb34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:db:0a:86:05:d5:21:5f:df:1f:77:7b:c1:91:b4:66:9b:7c:
         a0:ea:e9:9f:4c:55:c7:f7:7c:b9:de:50:df:d3:97:fa:60:ca:
         48:86:b4:c2:48:dc:a8:1d:ca:19:b0:a7:f0:f7:36:5b:36:c0:
         bf:b9:33:d5:89:5a:df:d2:28:5c:27:b9:bc:24:0c:78:13:8a:
         c7:5f:6b:93:04:3c:2b:94:fb:d5:35:28:f3:2d:ac:30:b0:65:
         04:63:28:51:a1:6b:fd:fb:df:51:33:94:db:32:1d:eb:90:17:
         e3:c2:74:c9:58:63:a6:96:23:d1:2a:2d:a7:06:09:2c:74:32:
         7b:dc:3e:a1:e9:06:e5:6d:bf:4b:aa:ca:05:b4:a0:e5:18:fa:
         53:3f:14:18:bc:25:6c:eb:1d:7b:36:51:4f:41:aa:03:44:7e:
         29:81:ee:f3:f0:67:ec:a3:e0:36:96:d7:71:05:c8:68:74:4f:
         f4:b2:ec:48:d2:23:ea:2b:a9:76:76:b3:7b:0e:45:6c:68:3c:
         76:61:0b:d0:bc:52:71:26:40:a0:59:32:d1:74:78:8e:1e:1d:
         95:e3:bf:f4:56:40:80:b9:88:61:97:0e:8e:ac:b8:43:9e:60:
         20:65:87:af:07:6e:61:b6:4b:ff:2e:b3:f5:62:47:cc:ad:54:
         42:2f:ed:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----