Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d907ef4b-af2c-3a0f-ab67-e5f31ef2f959.roa
File:                     d907ef4b-af2c-3a0f-ab67-e5f31ef2f959.roa (raw, json)
Hash identifier:          WG8A+5S0SzFxUxG97fQHvu1wAewAkRT8bR9O3NKIH6E=
Subject key identifier:   D1:25:37:05:9C:96:6A:09:36:BB:E3:B7:7C:E1:23:55:F4:61:18:79
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E25ACF6222725822B6C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d907ef4b-af2c-3a0f-ab67-e5f31ef2f959.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     36103
IP address blocks:        65.49.74.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:25:ac:f6:22:27:25:82:2b:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=bb6143c5-c20f-44d0-8fd4-599287743ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5a:a8:a3:26:68:98:35:7f:23:94:fe:f2:fb:
                    ce:27:cf:39:ce:c9:2d:12:a6:ae:aa:9f:7a:ff:e1:
                    10:29:ae:82:cb:f5:44:53:08:38:51:34:eb:b6:a4:
                    a8:9d:c7:0b:02:03:d3:38:44:a3:af:a1:fa:4f:6a:
                    50:1f:dd:2a:89:af:83:71:2c:64:e7:2a:33:32:a1:
                    2b:3c:c2:f9:09:b5:0b:51:fb:e6:07:4a:84:b5:4d:
                    3b:aa:c2:e2:20:0e:b3:b4:d5:2a:2a:d6:c7:47:83:
                    37:d4:3a:2c:25:33:61:86:ee:db:2a:b8:ef:67:47:
                    5e:c1:04:d5:d2:96:03:9f:ae:5f:47:2f:83:13:20:
                    e6:52:a1:8b:e3:8b:1e:46:41:f1:14:cf:a8:a3:1f:
                    5a:7a:ca:f5:60:8a:6b:4e:bf:5a:51:d2:7f:32:dc:
                    fd:13:bb:8c:64:3f:9e:5a:82:76:d5:f7:b5:35:09:
                    1c:e2:76:27:f3:63:82:6f:f2:e5:89:6a:6c:2d:77:
                    ec:d6:e9:c1:6a:61:4e:19:43:7c:4d:44:91:28:59:
                    e9:4e:98:63:5e:b4:63:fb:30:c3:97:50:e2:ae:6d:
                    11:8e:74:88:0e:29:b0:d5:2a:d7:95:67:ec:ef:3a:
                    c4:4d:a5:05:8e:f0:fd:04:5c:99:49:94:1c:be:b9:
                    b5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:25:37:05:9C:96:6A:09:36:BB:E3:B7:7C:E1:23:55:F4:61:18:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d907ef4b-af2c-3a0f-ab67-e5f31ef2f959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:86:a0:2a:53:dc:3e:1e:a3:58:25:0e:36:8e:50:ac:38:95:
         8a:3f:ce:70:19:a1:a3:5b:8e:d7:ee:0c:0a:b6:fd:b6:06:18:
         a1:f5:14:3f:cb:22:5b:07:f7:52:7d:48:51:e8:01:b5:f9:cf:
         a8:a2:fc:b7:f4:2c:e2:d3:8d:65:01:a0:4d:0e:0b:d9:df:92:
         f1:24:5d:55:d5:c1:54:67:29:b0:e5:64:80:56:c2:8e:8e:2f:
         60:04:80:2f:64:95:84:a1:74:16:a1:48:cd:1b:5e:e0:11:b0:
         e1:aa:67:54:fe:49:c7:6b:ed:52:89:4f:98:e8:46:de:42:cd:
         19:7e:a0:be:3d:5d:6f:cb:ea:cd:1f:7d:8e:d6:23:8c:81:14:
         e0:f5:35:ae:f1:80:34:0c:9c:4e:e4:61:e8:31:6f:80:de:0f:
         a9:49:27:74:d5:2d:7c:f1:bc:ea:e2:e7:49:05:c7:6e:ad:6e:
         9f:b4:32:b7:81:d4:48:ca:7d:74:6a:56:04:7a:29:a8:fb:58:
         e9:06:26:ac:cd:91:96:8c:25:09:35:8b:5d:ba:4d:56:c7:33:
         56:1d:76:74:0a:b7:84:0f:2b:37:f8:64:1d:ca:11:30:29:c1:
         6e:23:f5:29:2f:fa:8e:6d:40:3d:b1:d2:cc:1b:60:a2:40:2c:
         6f:fc:41:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----