Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f63ac205-3776-38a5-a682-af03a163583e.roa
File:                     f63ac205-3776-38a5-a682-af03a163583e.roa (raw, json)
Hash identifier:          A1tWJ6D4FcJpAsoziFwR7SysjOsMxfINH7bSEspF08I=
Subject key identifier:   1E:15:FA:4C:08:DE:C9:AB:A1:66:01:F9:30:1F:9C:FA:F7:C1:7C:C0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E25B9F3184FF90AE77240
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f63ac205-3776-38a5-a682-af03a163583e.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     36103
IP address blocks:        65.49.94.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:25:b9:f3:18:4f:f9:0a:e7:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=8a5e8fde-cd52-4274-8af2-69eaa64e63bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:60:ec:bc:7d:65:d7:fe:02:aa:d1:a6:22:c5:
                    6a:fa:f3:4a:c1:6e:c6:65:12:4c:4d:53:fc:a6:45:
                    d3:4c:d7:a7:5a:89:76:fb:1a:09:2b:5f:3e:e3:6b:
                    2f:59:c8:f5:a3:e7:12:7b:bc:ff:28:b8:ad:44:ff:
                    90:46:c8:82:30:0e:4a:f0:c9:c0:81:07:d6:40:54:
                    e4:c7:1e:b7:2c:81:62:40:f5:e0:bc:42:9a:40:36:
                    b4:87:db:64:e6:fc:60:89:60:92:98:d1:63:99:54:
                    84:21:f5:f5:d0:95:7b:a0:36:a0:c2:22:07:98:ce:
                    b8:b4:b0:27:60:ed:a3:1c:48:3c:26:28:3a:89:2b:
                    3f:1f:3e:77:58:12:f2:c5:18:9e:46:18:68:2e:8b:
                    41:b8:b3:bf:92:89:3d:d0:00:9a:db:0d:5a:2f:d0:
                    28:c2:33:26:05:20:16:8f:65:ea:6b:36:25:e2:c4:
                    90:e6:3c:a4:43:b9:56:df:75:8b:bf:cc:2a:e0:6d:
                    36:ac:2f:77:3d:5b:49:18:a2:12:b5:e5:d2:4e:4c:
                    b3:30:ef:49:17:81:b7:f5:a0:9d:0b:b6:80:1b:f4:
                    dc:04:5f:16:af:42:50:e9:0d:bc:5a:8e:8e:73:4f:
                    ff:bf:ab:de:87:f9:b8:5b:ac:89:25:89:d7:da:8f:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:15:FA:4C:08:DE:C9:AB:A1:66:01:F9:30:1F:9C:FA:F7:C1:7C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f63ac205-3776-38a5-a682-af03a163583e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:48:3b:b3:b3:72:12:45:56:43:e0:24:10:1e:af:ac:11:4e:
         7a:cb:1a:85:c9:e8:27:02:8b:84:c0:f1:d0:7f:4b:36:64:f0:
         95:ed:96:67:be:0f:63:c4:a8:24:9f:7e:b8:f7:ba:b0:4d:d6:
         01:fd:a7:95:2b:29:c2:af:b8:10:10:02:25:32:26:65:f7:b3:
         80:65:8c:a0:9e:a5:d1:14:8e:7c:1c:cf:45:6a:e8:6d:dd:1c:
         51:41:0f:17:cc:fa:f6:c9:b7:4c:13:be:e9:d1:28:c6:76:29:
         6a:e1:76:1f:26:43:ec:5f:66:9f:67:39:18:82:d6:c4:16:56:
         60:b7:ad:3c:7a:b3:12:dc:e8:dd:90:80:8e:ea:02:3e:01:6c:
         7a:a1:5c:12:c2:b2:af:e6:84:49:07:02:3e:97:5b:f4:1e:85:
         3f:97:11:5e:97:a6:79:7f:fb:62:77:d7:50:5d:dc:cc:2e:ff:
         a1:d4:d3:7b:82:75:31:8e:61:73:1c:69:7a:6f:38:1f:3a:f3:
         42:8e:d9:e6:f8:a3:de:0d:c3:b3:0e:19:cc:41:02:20:f0:e5:
         23:19:33:e1:22:3f:d7:f6:2f:bf:d8:d1:aa:d4:98:66:9a:93:
         1f:82:21:e8:c2:47:d1:3b:8a:5c:a9:e1:67:57:ac:df:29:9c:
         93:2c:9e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----