Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c9bb73f5-0cc3-3a0c-92a5-b098744b2c9b.roa
File:                     c9bb73f5-0cc3-3a0c-92a5-b098744b2c9b.roa (raw, json)
Hash identifier:          peDRdyTvTcUDysK7jF4R05HD1ga2WlkwN7+QsekjLIg=
Subject key identifier:   B1:D8:1B:8B:13:5E:87:A1:56:4A:DE:32:54:63:AB:F6:76:1D:82:2B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584309EE1326908224567E8AD000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c9bb73f5-0cc3-3a0c-92a5-b098744b2c9b.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.82.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ee:13:26:90:82:24:56:7e:8a:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2b051b61-2317-4f28-8439-95a33686d805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:66:95:ac:10:5a:79:72:84:47:40:31:06:
                    e6:2c:cd:94:d1:1f:47:a2:40:90:8c:bc:a8:b8:1e:
                    4d:e7:b7:05:33:3e:23:04:97:eb:39:e5:59:9c:f8:
                    0b:f6:1d:7c:50:02:45:02:7c:e4:2b:93:35:33:b7:
                    7d:e2:9c:14:45:9c:6e:7b:c6:33:fc:20:ce:19:bf:
                    0c:82:42:ac:b8:48:76:c0:20:6d:fa:9e:ea:2e:de:
                    ad:f5:d8:96:f5:57:38:89:48:5e:aa:52:26:23:64:
                    ba:53:8d:33:1b:e7:ae:2c:7a:aa:34:dd:74:d7:17:
                    e8:c3:5f:68:b9:c6:eb:b2:a3:a9:8d:e4:ac:fe:ea:
                    0c:c9:1d:d9:e0:6f:92:ad:56:f0:83:ab:a6:2b:a7:
                    68:96:9b:3a:5d:ca:bb:e0:fd:b9:b5:2a:aa:5e:e4:
                    6c:06:08:31:88:fe:3d:95:d8:26:7d:bd:1f:54:b1:
                    23:65:40:01:97:8c:e8:7c:57:11:32:f8:6e:75:98:
                    84:f2:aa:f1:e4:90:12:7a:08:b0:c9:06:1e:7f:ad:
                    0e:47:10:23:ce:7d:9a:d7:c9:63:03:6b:54:94:40:
                    e1:ca:7e:67:13:5d:b7:81:6a:e5:f4:18:90:d1:0b:
                    af:67:e6:84:24:46:77:80:fe:03:82:8d:3f:9d:f2:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D8:1B:8B:13:5E:87:A1:56:4A:DE:32:54:63:AB:F6:76:1D:82:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/c9bb73f5-0cc3-3a0c-92a5-b098744b2c9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a3:c9:dd:91:df:6e:91:27:e5:d4:ba:35:6a:90:b5:2f:0f:
         e0:e8:6b:2e:5d:59:d1:5d:01:c1:c1:18:3e:be:23:ee:3a:ce:
         c8:d3:28:ac:de:39:14:70:cc:cf:fe:0d:e0:1f:28:57:78:67:
         56:5d:ab:b1:44:fa:3c:a8:1a:01:70:1b:e9:6a:cc:6d:4d:86:
         e6:73:90:b0:b0:b4:4b:fd:f2:2b:8c:43:74:e1:7a:32:89:09:
         0a:aa:ef:bc:0b:33:6b:5e:e2:82:b5:7e:17:3c:8c:d4:a6:c9:
         58:aa:76:f0:4e:6a:95:19:e5:fc:33:74:54:e3:bb:1d:ca:2c:
         76:71:2a:cd:b5:8f:99:59:9e:3a:c8:37:b9:bb:88:0b:1c:34:
         38:52:21:c5:01:a7:ba:c7:be:d7:5e:c7:5f:37:b1:6b:1d:c2:
         66:bc:d0:e8:30:41:6f:ce:54:b1:c5:20:43:bc:b5:14:a9:c4:
         0f:1c:b4:46:8d:1a:70:d8:b1:a4:ea:9f:25:f1:51:38:4f:01:
         9d:da:e7:a3:68:d9:79:34:29:da:73:90:26:e2:4e:28:ae:6a:
         c6:77:74:0c:c7:a4:00:69:4b:90:6e:fa:f3:8a:1d:8a:a8:10:
         c8:b6:0e:27:e3:03:70:af:0b:23:18:35:56:f2:24:1b:61:fb:
         9a:40:92:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----