Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fdd89653-73be-3cd4-9bf0-bfe9eb4f8a1e.roa
File:                     fdd89653-73be-3cd4-9bf0-bfe9eb4f8a1e.roa (raw, json)
Hash identifier:          8KPp1MaFumw9KWf/UCCz1ce04KEwg10BbzNS7lq8oPU=
Subject key identifier:   22:81:11:18:CB:B4:B7:74:29:B1:39:8E:C8:95:92:5D:D9:61:A1:F7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E06155D8B97A2FA90DC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fdd89653-73be-3cd4-9bf0-bfe9eb4f8a1e.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     26077
IP address blocks:        65.19.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:06:15:5d:8b:97:a2:fa:90:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=007c069a-629f-4cee-91ea-93b1841cfa50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:81:3d:66:6b:31:5a:dd:16:df:0d:65:7f:
                    f6:58:bc:05:1a:a5:1f:59:77:99:7b:de:ae:3a:a0:
                    46:cf:33:78:8f:3e:c4:63:90:12:00:de:ce:2e:ad:
                    f4:ce:f8:4b:2b:46:72:2f:99:37:53:40:96:c3:0a:
                    ff:8a:87:e3:34:4f:eb:03:c4:6e:0b:36:b4:be:da:
                    99:51:29:57:68:5b:70:2b:22:70:d7:6b:0a:c4:dd:
                    38:3e:86:cc:32:1f:c9:8a:08:12:41:0b:78:49:7b:
                    25:b6:32:ec:0e:54:4e:fe:6e:89:58:ee:9f:ea:af:
                    bd:52:5f:ff:3a:08:dd:4b:cc:3a:4d:d4:d4:e2:43:
                    5d:f1:30:94:78:70:2c:db:a8:71:b2:b5:e5:76:0d:
                    9b:b3:e3:4b:fa:8e:58:b6:17:6f:0b:f4:bb:49:c7:
                    80:9a:3e:23:ac:22:68:8b:61:15:09:ff:df:9f:c3:
                    9b:08:e4:af:83:b3:fc:d4:8b:59:c2:46:42:73:c8:
                    2d:2a:b8:3f:3d:09:aa:c7:72:73:3f:4e:bb:19:cf:
                    1f:c1:60:07:9b:00:58:ff:bb:3d:54:20:76:0c:f1:
                    4c:12:73:d6:b5:8d:39:3b:ed:e2:17:d9:83:c6:db:
                    f0:35:8d:9d:62:84:a9:0a:ef:37:58:01:d4:87:ec:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:81:11:18:CB:B4:B7:74:29:B1:39:8E:C8:95:92:5D:D9:61:A1:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fdd89653-73be-3cd4-9bf0-bfe9eb4f8a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.19.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:79:be:51:fe:8f:ad:6c:32:64:26:8c:49:b0:b1:32:f6:7a:
         bc:2c:60:76:fe:05:da:1c:3d:c9:57:18:d2:99:e7:d5:9b:3d:
         6c:a5:e5:b3:75:dd:20:6e:41:9c:72:80:11:00:7f:79:ab:e9:
         9a:1c:ac:3d:e2:d3:7d:0f:6b:05:35:cd:cf:fc:96:eb:c6:19:
         6b:92:cf:5c:de:8e:9c:57:1a:bc:bd:ad:27:b8:1c:72:4e:30:
         34:07:5e:40:65:e2:67:ac:8e:de:5b:ec:26:da:45:e6:f3:c3:
         59:31:c1:69:f4:ca:af:56:ed:42:05:ed:5d:a4:3d:22:25:09:
         99:8c:41:8b:34:43:d9:7d:9a:ef:38:35:3e:f1:3b:3f:8d:e8:
         0b:32:9d:5c:4d:4c:ab:e8:4c:a0:59:38:87:c5:47:06:93:3b:
         64:1e:81:9e:f0:7e:62:30:76:71:ba:1b:9d:6b:a1:33:13:83:
         85:b2:d8:20:91:68:8f:b9:dc:6a:ef:35:be:d0:18:9d:d2:3d:
         89:53:8c:30:6e:58:22:a0:0f:76:24:9d:d6:dc:0e:ff:f5:d1:
         c1:d0:d9:00:61:8a:0b:52:00:19:36:b9:89:28:6f:21:03:98:
         59:31:03:ac:11:bb:e8:e7:a0:03:fa:57:30:f9:8f:02:64:53:
         a1:4d:a9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----