Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b0b18b1f-2869-3e7c-b383-41f3d03a7a27.roa
File:                     b0b18b1f-2869-3e7c-b383-41f3d03a7a27.roa (raw, json)
Hash identifier:          OKBPBRLyI2N37/OWegr+OPNMmzx9oHVW2S68LNauEs0=
Subject key identifier:   E3:D9:1B:FE:96:40:02:10:56:54:CA:20:8C:20:0B:A5:4B:9C:8A:C1
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328583BFBF51DC35D39AB3E9D202F00
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b0b18b1f-2869-3e7c-b383-41f3d03a7a27.roa
Signing time:             Thu 18 Nov 2021 05:00:00 +0000
ROA not before:           Thu 18 Nov 2021 05:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     271951
IP address blocks:        206.162.245.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fb:f5:1d:c3:5d:39:ab:3e:9d:20:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Nov 18 05:00:00 2021 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=1093fb2f-c24d-40a7-a760-826c5b7045f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0d:d9:79:44:f3:70:90:19:e8:ac:4f:46:9b:
                    27:25:6b:28:ca:0e:7b:81:48:4e:6d:8b:45:f5:71:
                    bc:26:80:c0:e2:b8:5b:e8:bb:22:80:5a:39:ff:c6:
                    d5:41:93:fa:3b:55:88:bd:6a:79:e2:96:bc:0d:b9:
                    c6:c7:89:ee:84:99:fe:9e:15:db:38:44:82:6d:25:
                    10:6a:73:35:2e:fb:a1:a1:19:10:11:7c:33:57:83:
                    fc:0f:70:b7:a7:86:8d:76:9b:14:75:4b:44:4d:e2:
                    f1:68:c1:68:31:2b:2c:e3:04:d9:53:90:ac:52:98:
                    f9:f3:8e:7f:1d:20:93:b4:eb:f2:6e:de:31:ce:83:
                    30:72:c2:3a:d1:cb:9a:01:1c:32:cf:c0:b8:63:d5:
                    25:c9:17:85:f3:04:5d:f8:17:07:06:2a:af:f8:c6:
                    c9:69:c0:bd:09:d1:c7:66:90:ff:79:b7:35:61:ae:
                    bc:a7:06:c4:96:c1:e1:44:90:37:f5:45:aa:9f:ce:
                    d8:32:16:74:d2:7e:50:b0:7f:8e:e7:05:e5:62:cb:
                    a8:65:5d:a9:58:73:a9:32:ee:36:d7:da:4a:f0:a4:
                    3c:74:f8:c7:9f:10:54:d8:f5:c0:3a:6e:6c:a1:04:
                    81:ba:ef:68:12:a6:7d:69:ea:3d:06:be:1f:17:84:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D9:1B:FE:96:40:02:10:56:54:CA:20:8C:20:0B:A5:4B:9C:8A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b0b18b1f-2869-3e7c-b383-41f3d03a7a27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:7a:38:f5:62:32:10:d1:fa:dc:86:c7:a1:d8:b6:79:6d:47:
         8d:53:cd:93:ab:a9:db:54:d2:4e:a7:98:40:ff:ac:88:46:f5:
         e2:1a:37:8a:96:4f:16:59:b9:46:7c:a8:30:b9:78:6f:c6:34:
         86:94:2d:98:d7:69:ad:1a:46:c3:be:0a:b4:e9:d2:ea:74:de:
         a4:b1:f7:42:76:7a:9e:d2:74:b5:38:67:8a:52:38:43:a0:67:
         4d:a5:14:70:09:ab:53:e4:5a:ff:8a:e2:34:3d:86:44:f2:2d:
         b0:99:7f:88:f5:33:1d:7b:9e:c3:1b:d5:99:fb:7c:fb:3b:53:
         58:f5:df:c6:88:28:d0:34:34:2e:6c:e4:65:f9:4f:a4:90:b7:
         e6:37:64:2f:0b:f9:a3:57:93:b5:ea:3b:b9:cd:57:ea:2d:df:
         da:bc:c7:a2:71:17:8f:39:67:a8:5e:bd:fa:d5:93:12:94:56:
         78:c6:66:34:0e:d7:53:2e:80:5e:4d:6e:c2:f0:d4:da:69:53:
         e5:e8:55:e1:59:32:29:90:14:ab:9f:c4:b7:01:4e:03:44:38:
         c1:4e:73:9e:2c:b1:75:0d:cc:b1:e4:f1:11:4f:16:49:49:21:
         d7:4e:a4:d3:04:66:7e:5a:46:d7:b2:79:fa:06:15:e3:01:56:
         00:28:b3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----