Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f735b98f-aa80-3149-81a0-e380a6cf51e3.roa
File:                     f735b98f-aa80-3149-81a0-e380a6cf51e3.roa (raw, json)
Hash identifier:          3b8IdTNEufHqAys55Bl2ff6A9OwNdsz8sB4u7HzzL+8=
Subject key identifier:   1B:8C:7F:2C:F5:19:78:19:CE:2F:F8:A9:AB:A5:60:73:48:E5:3E:8B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA66E6FCF608521F4DA6C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f735b98f-aa80-3149-81a0-e380a6cf51e3.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     36103
IP address blocks:        64.62.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:6e:6f:cf:60:85:21:f4:da:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=3375eab7-6272-4ac5-8235-2e2c994cf796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:ac:52:0b:2b:81:3e:7b:47:08:2b:85:c7:
                    d5:e2:88:30:6a:2e:cc:26:32:85:f5:63:ac:ab:e4:
                    c4:ca:6b:5d:2c:7d:7a:0a:55:b7:3c:4d:6b:09:7b:
                    18:86:0a:1c:48:48:4d:a2:b0:de:f0:03:02:bb:1b:
                    18:d4:46:66:4d:85:f0:bd:41:81:7e:c4:c0:da:4d:
                    b1:df:da:26:87:fe:4e:f6:88:94:a3:a8:8b:50:84:
                    d0:0b:30:ef:0e:57:6b:bd:c3:ee:fd:82:94:14:2e:
                    f4:91:85:78:0d:43:de:bc:a3:3f:4d:14:83:31:c4:
                    8e:af:3b:75:2b:f9:72:ab:92:eb:e3:3e:33:24:64:
                    06:3c:27:f9:83:81:7c:7b:20:f2:cc:9c:16:55:f2:
                    8c:27:ba:47:9b:5f:0c:a3:11:c0:d7:34:9c:54:de:
                    58:2a:21:6e:70:a6:81:79:eb:aa:82:3f:64:e3:89:
                    97:b6:9b:f2:98:02:8d:11:dd:de:ec:77:98:c0:cd:
                    41:40:53:15:07:97:c1:20:5b:91:78:d1:21:ef:42:
                    99:9b:dd:81:eb:f8:c2:8a:6d:81:ac:a5:bd:5d:f9:
                    70:70:6b:75:05:7c:51:6d:ce:1a:e2:cc:5d:39:45:
                    58:2e:67:ba:95:8a:2f:a3:c4:7e:46:c2:07:87:db:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:8C:7F:2C:F5:19:78:19:CE:2F:F8:A9:AB:A5:60:73:48:E5:3E:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/f735b98f-aa80-3149-81a0-e380a6cf51e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:9a:3c:60:e4:3e:c2:55:5e:82:dd:4b:58:b6:3a:b0:d8:7d:
         36:3a:d0:cd:87:c5:5c:f8:d0:32:b3:58:d4:b1:8f:a9:41:74:
         be:e8:bc:58:46:1a:c4:16:9d:1f:3b:95:1c:46:10:16:73:36:
         b6:71:3f:14:30:2c:c7:73:bd:69:cf:e8:48:8f:c0:d2:4b:1b:
         ac:b5:75:14:50:d8:ca:23:17:e9:95:bb:32:85:4d:02:54:9b:
         14:12:fe:44:ba:3d:a4:17:8b:16:df:9d:77:98:67:e3:e1:8d:
         11:08:9c:28:81:79:02:10:72:e0:fd:a5:0e:bb:85:7f:9a:f2:
         e6:c2:4c:8d:7c:f4:70:10:f5:5a:b7:b0:8a:54:20:4a:60:bf:
         b5:13:23:61:5b:37:2e:c2:a4:27:a1:de:ec:3d:41:bc:fa:6d:
         9f:80:51:89:02:98:26:7d:1d:1b:42:d0:62:68:38:08:21:4c:
         e3:ad:4d:b6:cf:5c:58:7b:6a:e7:01:67:02:0d:83:8c:bf:67:
         6f:b0:ef:90:25:ed:90:f0:81:ce:f7:bf:3b:53:eb:56:d5:40:
         c0:2b:53:4e:15:10:6b:a7:1a:b4:7c:c0:01:98:d7:8d:9b:c1:
         14:cd:d0:56:43:7c:b6:9e:ba:8e:ea:e9:28:7d:58:6e:f3:d9:
         30:75:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----