Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/b8828ccc-5078-3eaa-b5a7-7aa63814f5d7.roa
File:                     b8828ccc-5078-3eaa-b5a7-7aa63814f5d7.roa (raw, json)
Hash identifier:          rmSzjY64kyTXb6UJm4zwoLUCZaXbn3L1BKhllsVRKR4=
Subject key identifier:   1F:1D:DE:58:53:65:34:F3:AD:DE:A6:28:80:B0:90:B2:C3:2A:26:CC
Certificate issuer:       /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
Certificate serial:       010D0C9F4328583F8C5E0DE9504CC8C923061980
Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/b8828ccc-5078-3eaa-b5a7-7aa63814f5d7.roa
Signing time:             Tue 11 Oct 2022 12:00:00 +0000
ROA not before:           Tue 11 Oct 2022 12:00:00 +0000
ROA not after:            Wed 30 Nov 2022 05:00:00 +0000
asID:                     5719
IP address blocks:        199.109.44.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8c:5e:0d:e9:50:4c:c8:c9:23:06:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c
        Validity
            Not Before: Oct 11 12:00:00 2022 GMT
            Not After : Nov 30 05:00:00 2022 GMT
        Subject: CN=08996653-235b-4ca6-8664-97d8d3a3a31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8c:c2:a7:3a:23:c2:96:7b:2e:4b:bf:d0:5c:
                    13:f2:88:44:7f:78:9d:50:8d:76:c8:11:14:a8:5d:
                    ac:8a:58:bf:a4:4c:9f:6d:85:cd:2b:55:ec:11:1c:
                    fd:b1:ce:af:57:29:59:e5:27:e3:2c:93:4f:8a:ec:
                    66:71:e6:80:54:fd:01:12:c5:ac:1b:f9:b4:6a:d3:
                    e4:fe:43:24:cd:6b:ec:57:37:c3:52:06:4c:35:91:
                    5d:36:7f:b9:4e:ad:df:25:d8:3f:87:eb:46:c4:62:
                    7c:b8:6d:0f:d4:42:ad:b1:c1:44:a6:7f:28:93:24:
                    cb:f5:2f:9c:f1:0b:14:a5:86:84:49:63:dc:cc:f2:
                    e3:78:3e:e6:d8:0b:d2:9f:b3:d4:ef:86:47:2e:27:
                    70:2e:6c:95:a3:11:98:e6:fa:d3:fe:33:9d:57:3b:
                    2d:5e:93:0e:dc:f8:d7:3d:de:b7:4f:ad:c0:6d:2a:
                    72:5b:b4:a8:ff:8e:ad:1c:ec:f7:ef:39:e3:81:c0:
                    7a:d5:90:8f:ea:42:91:44:f3:79:f9:62:24:0e:21:
                    39:0b:0e:b7:70:98:4b:de:65:2d:73:1f:21:84:38:
                    ca:e5:71:fd:13:ca:a6:ab:a7:4f:fd:4c:fd:59:71:
                    cb:fe:89:41:7e:51:ba:0a:cf:8a:93:c5:82:78:b8:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1D:DE:58:53:65:34:F3:AD:DE:A6:28:80:B0:90:B2:C3:2A:26:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/b8828ccc-5078-3eaa-b5a7-7aa63814f5d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl

            X509v3 Authority Key Identifier:
                keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.109.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:99:d6:cb:39:97:ac:12:68:06:b1:cb:74:c7:42:3f:55:4a:
         06:6f:9d:34:c3:7f:eb:75:eb:43:60:0c:27:f0:38:de:72:69:
         75:06:09:bd:81:53:82:e7:6c:33:da:e3:21:4b:c6:da:f8:ee:
         38:ed:f4:1f:c2:50:82:08:39:b4:6f:2d:cc:fd:8c:75:69:39:
         08:9a:a9:07:01:e8:ce:5c:da:4b:a6:5d:de:6c:c0:e3:28:17:
         23:c1:bf:e5:c8:fd:b3:29:66:f3:16:fc:a5:08:a8:92:c9:e8:
         94:59:f5:03:c7:f1:a1:45:c6:b9:78:e9:28:1e:61:85:8f:cc:
         6f:2e:f2:3a:d2:c9:2d:89:f7:51:8a:8b:a7:09:fe:78:40:98:
         20:3f:4f:a1:11:64:a3:09:fb:b5:90:d7:f5:fe:e9:77:3e:ef:
         3e:55:d9:8d:bf:8e:62:06:48:50:34:d7:98:32:a8:d8:ce:49:
         a9:5b:3a:29:c3:ae:b8:44:6a:ac:94:5c:7f:e6:a7:ea:dc:77:
         cb:d8:e1:ec:0e:b8:c9:34:48:23:91:b6:3f:3e:e3:05:80:76:
         6b:3c:3a:70:3e:56:cd:6b:a5:61:9a:de:93:69:66:a0:3e:b3:
         c7:a0:7b:52:c1:8a:28:eb:1c:99:fe:9f:9d:26:69:bc:ab:cf:
         9e:f7:7b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----