Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de3d2ffa-419a-3857-a983-ce6dff0dd281.roa
File:                     de3d2ffa-419a-3857-a983-ce6dff0dd281.roa (raw, json)
Hash identifier:          bq6qPMCNarJNC1014YFJTwyRoFq1S62c6kLeC+y1eag=
Subject key identifier:   12:5C:CE:11:42:BA:A3:E6:D1:5A:3D:B2:A5:6D:60:D7:03:5D:13:21
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA6948F4179DD27B4872700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de3d2ffa-419a-3857-a983-ce6dff0dd281.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     393763
IP address blocks:        209.51.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:94:8f:41:79:dd:27:b4:87:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=c8f8accf-66bc-4fbf-87ec-7d83eab0c729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:fe:0b:ec:fd:8d:f4:ac:7f:97:16:dd:0d:
                    aa:ee:2f:a6:63:a9:cd:b7:b2:32:76:3c:86:9d:a2:
                    a5:14:2e:f8:0f:22:a8:a2:65:be:4e:ce:09:e7:58:
                    a7:01:1d:fb:0b:83:5e:ab:a2:b7:d0:d7:ae:a2:35:
                    08:1a:c6:cf:06:b3:92:8d:c3:40:6f:e8:46:c7:d3:
                    97:f6:47:66:30:20:44:88:41:88:a5:69:aa:6a:af:
                    ef:f7:3b:97:2b:71:a9:ec:2f:4f:c5:46:cc:f8:35:
                    11:ed:ea:0b:2b:ef:7a:6f:5a:1e:27:50:cc:ee:aa:
                    84:e1:2e:43:fb:14:e4:55:de:8a:70:72:e3:de:7f:
                    44:36:fb:1d:23:a3:63:bc:36:31:6f:e1:f3:ab:65:
                    ed:70:83:74:6a:1b:68:72:42:7d:46:ae:54:4a:8a:
                    63:ef:e6:f7:75:e5:92:64:93:fe:1f:cc:b7:2d:a6:
                    d3:bc:39:87:45:b0:e9:77:c7:4b:ca:db:3f:ab:53:
                    19:95:b0:d8:00:b2:be:15:94:07:27:73:2c:42:2d:
                    81:3a:36:f4:50:3e:1f:43:fd:a5:2d:bf:21:6c:a0:
                    2f:56:28:57:05:aa:87:45:dd:35:ca:39:48:62:02:
                    44:5b:0c:95:01:dd:85:fc:5d:76:53:5c:f3:30:3b:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5C:CE:11:42:BA:A3:E6:D1:5A:3D:B2:A5:6D:60:D7:03:5D:13:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/de3d2ffa-419a-3857-a983-ce6dff0dd281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:69:73:6f:1a:36:91:ac:12:83:f6:22:13:c2:de:b5:11:a2:
         77:54:2a:96:05:68:5b:3d:b1:ab:1c:ad:d4:52:3b:5b:bf:b8:
         4f:6c:30:e5:66:b5:f8:84:a8:62:13:39:04:f8:19:d2:f2:1a:
         6b:f4:7a:66:aa:74:33:77:fc:91:a2:7f:3c:3e:f4:61:ea:5f:
         ee:b2:81:4c:b2:8f:88:c3:36:1d:88:d5:19:77:a9:57:2e:a4:
         a2:bb:a3:e0:55:9d:10:0d:57:27:8f:d0:fc:31:47:d8:64:cf:
         7b:e4:a3:fb:39:dc:d6:44:cf:16:1d:17:4e:86:ab:af:5d:c3:
         e1:84:aa:ec:1d:73:6f:99:56:90:10:02:ee:ab:42:41:58:47:
         bc:31:15:f0:9d:2a:32:71:b5:b9:15:78:da:2d:90:d9:1a:95:
         09:63:69:76:55:c6:09:f8:6a:e7:64:27:1e:a4:09:39:16:b6:
         54:90:11:46:33:62:d9:cb:1a:0a:e5:47:39:2a:24:2b:33:7b:
         2d:54:9b:27:0f:2b:9c:5a:02:24:70:d7:2b:01:1b:ff:cb:21:
         9a:b1:47:87:ef:92:9e:84:05:7d:fe:7b:24:10:e8:62:1a:31:
         47:1e:83:5b:dd:41:33:a3:27:a1:05:8f:18:6c:ce:88:dc:90:
         42:b5:6c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----