Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c679d13c-f6c7-3d92-a190-77241e39835f.roa
File:                     c679d13c-f6c7-3d92-a190-77241e39835f.roa (raw, json)
Hash identifier:          SgnJBX1zm6UarcWio04fhMfDRWfnO0ZLVchuJVq+yAU=
Subject key identifier:   ED:60:48:9B:19:60:A7:52:25:D4:3D:BD:0A:35:0C:5C:45:35:28:16
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648D9FFADF0FA93C2E163600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c679d13c-f6c7-3d92-a190-77241e39835f.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     12247
IP address blocks:        65.49.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:9f:fa:df:0f:a9:3c:2e:16:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=1cac3c54-dfdb-4532-8bed-d0d24540d952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8a:c3:ec:4a:7c:29:9d:ef:f2:a2:14:54:22:
                    ac:e3:54:e1:43:d4:2c:41:28:f6:35:c4:72:7a:ad:
                    b9:2a:39:fa:ff:43:d5:4b:25:56:76:d2:73:89:e8:
                    68:3c:0b:1d:1f:c4:5c:68:b5:0d:4c:3c:b6:30:ed:
                    c1:26:09:ef:61:94:17:64:8b:ab:01:d7:74:3e:4f:
                    24:a8:dc:f6:ba:93:de:6e:01:f5:33:e0:55:9c:a9:
                    5a:a7:8d:da:46:7f:d1:3e:5f:b2:be:13:71:83:d5:
                    a9:bd:00:38:27:3d:d2:0b:d5:4e:c2:16:2f:19:e1:
                    9d:7f:2a:ba:a7:94:78:af:5c:d8:15:c3:f3:71:04:
                    e5:73:cd:58:64:a9:5c:f4:5f:bd:eb:a7:16:fb:9d:
                    be:eb:63:dd:39:a8:9a:f4:79:c1:29:16:b2:bc:d9:
                    e2:df:0d:f8:89:15:ad:4f:04:5f:2b:5f:71:a4:6d:
                    14:ec:30:a8:bf:37:61:3f:ac:aa:5d:6a:c1:5e:e0:
                    ea:97:b4:2d:f3:d2:16:99:f8:32:7e:35:70:ae:c5:
                    48:3b:8e:38:12:d9:11:e8:f6:cd:c1:82:d0:39:3f:
                    0a:cb:88:2c:f5:64:6a:f9:80:8e:a7:15:ab:b0:ed:
                    80:70:4f:45:01:de:8e:08:a1:a0:b9:2d:04:6f:87:
                    4e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:60:48:9B:19:60:A7:52:25:D4:3D:BD:0A:35:0C:5C:45:35:28:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c679d13c-f6c7-3d92-a190-77241e39835f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:6f:fe:a6:b2:1e:4b:91:5f:7e:7b:8c:76:14:3e:c9:d9:a3:
         2a:29:23:2f:4d:a8:32:9d:b8:9c:f3:19:11:c2:3c:e4:ac:8f:
         6d:f0:8a:2a:f6:8b:d7:84:fc:a6:df:50:28:93:ea:27:19:1e:
         de:a6:20:da:a6:34:65:e9:f0:c8:fc:a8:df:ed:70:43:9e:8b:
         3b:85:75:96:7e:43:ce:02:6e:42:8a:a9:37:ed:12:53:24:5f:
         42:d7:3f:89:ed:48:f9:2b:80:38:4b:36:94:23:ce:7c:7e:ff:
         f5:ea:83:f8:59:02:81:7a:30:01:d7:5d:02:4b:10:45:70:fb:
         54:24:d6:12:51:26:00:fe:e3:14:eb:b8:51:0a:23:0b:d3:2b:
         7a:39:01:61:27:9a:14:e4:bb:3a:12:f6:77:67:a2:20:c5:03:
         25:37:64:ed:02:76:04:81:9c:74:c0:98:84:55:77:23:f4:9b:
         93:30:04:48:28:21:20:c4:53:ae:9e:64:0b:96:e5:22:9f:7a:
         2e:d6:64:79:44:86:75:77:78:a1:b6:1d:48:96:c0:40:d7:71:
         b9:a1:0c:63:a8:9b:64:f2:a5:8e:61:0a:04:bc:3f:10:62:53:
         f5:37:69:d3:48:98:f4:43:27:3b:58:a6:97:43:6b:64:13:a0:
         3e:17:f5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----