Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc55420f-0b21-3fe4-af52-ff25fd0c7d4b.roa
File:                     fc55420f-0b21-3fe4-af52-ff25fd0c7d4b.roa (raw, json)
Hash identifier:          XkmoqiDXxsZ13948Hth4SVq/0fGJuSObC7gtW3qdWeM=
Subject key identifier:   58:62:1F:37:AA:5B:D7:93:47:EF:DA:02:BF:CD:DA:A2:81:A1:76:E0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA68179CE818687609EB538
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc55420f-0b21-3fe4-af52-ff25fd0c7d4b.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     36111
IP address blocks:        184.105.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:81:79:ce:81:86:87:60:9e:b5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=917aa619-d3e7-4e31-9464-b556b33db2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:6a:4c:2f:04:a1:6d:e6:29:c5:c3:ba:35:
                    4b:00:62:aa:e8:c7:ea:13:13:77:32:48:00:c7:f1:
                    d9:f5:15:14:68:66:ad:9e:43:89:d0:fd:13:38:95:
                    48:2a:b4:ce:77:c2:ce:98:8d:52:4e:16:23:40:a5:
                    d5:b2:82:23:21:9b:92:2b:f3:7e:26:a9:82:b2:7b:
                    98:3b:a9:55:a8:f1:94:63:b7:9d:2f:62:49:d7:2a:
                    15:79:d3:4f:50:1a:82:29:de:82:5d:03:07:9c:23:
                    0d:be:5a:cc:9d:0f:ab:72:9b:84:37:16:02:53:61:
                    35:27:4d:80:94:3b:fd:03:40:81:85:93:ad:dd:e9:
                    4a:ef:52:06:c2:5e:22:47:07:5d:3c:70:fa:3d:65:
                    16:39:f1:80:95:17:dd:89:f7:88:5c:19:a8:62:87:
                    3e:43:17:2c:6e:22:34:ee:16:b1:44:65:02:1b:07:
                    1f:b3:98:19:88:91:db:d9:6d:47:5b:7b:3d:5e:9e:
                    f8:ef:b1:e5:ae:77:eb:7d:b5:9c:af:e0:f9:ea:81:
                    05:f8:9b:b8:64:5f:64:77:b8:ce:ea:30:c3:0f:34:
                    8a:57:ae:8c:13:23:05:87:22:73:dd:25:f1:a8:a6:
                    39:44:4e:22:c1:b9:aa:ec:36:8c:b3:f4:01:3f:af:
                    e9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:62:1F:37:AA:5B:D7:93:47:EF:DA:02:BF:CD:DA:A2:81:A1:76:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc55420f-0b21-3fe4-af52-ff25fd0c7d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:26:9d:40:20:99:89:fd:9d:5f:d1:ea:91:99:4d:86:e3:8d:
         64:1e:c5:43:0c:34:2d:0a:c7:ca:e0:dc:58:03:25:49:58:10:
         72:44:fc:5b:5a:33:1e:de:73:8a:8f:44:b1:bd:85:7e:c6:56:
         7c:d2:a4:3f:6e:18:27:c0:77:97:4f:f3:40:54:a7:78:08:4e:
         07:59:57:4c:34:2b:fa:1d:1d:3c:e4:4c:94:df:29:1c:7a:46:
         d1:7d:83:55:78:91:1b:6d:4f:89:2b:05:f3:1f:cb:84:a4:67:
         b4:4c:82:3d:f2:84:79:25:93:20:98:d2:b7:d6:fd:c3:16:6c:
         79:f4:95:e4:be:7c:9d:60:f1:c4:43:d5:6f:cb:0c:b0:60:55:
         76:e7:3f:77:bd:0c:c1:87:b3:62:32:35:36:14:f1:aa:a9:4f:
         b3:4d:90:3c:10:cd:a8:4f:4c:1e:5f:2e:e0:5f:95:ba:4e:cb:
         0b:fb:2b:23:d7:20:3a:3a:48:7a:c5:59:83:39:17:a2:9a:fe:
         29:5f:d3:f5:e7:6c:f6:e3:4b:01:35:c5:70:e0:a2:c2:60:15:
         4f:c3:69:3b:d4:ce:7c:ab:ac:ca:ac:16:91:41:35:30:8e:5a:
         75:82:e4:06:0d:39:a3:92:f7:45:6c:ed:bc:26:89:bc:5a:29:
         12:25:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----