Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf/71f110b7-9a85-345c-ae7e-b1d269770078.roa
File:                     71f110b7-9a85-345c-ae7e-b1d269770078.roa (raw, json)
Hash identifier:          aC/GxPl7cMswPb3UpvHRwcQqb0xigkp2x1I51uVaa/w=
Subject key identifier:   34:61:84:C6:1B:FE:C7:5F:52:5F:EA:DD:03:01:E7:63:27:90:C9:03
Certificate issuer:       /CN=9fbd174a-7da2-48ec-9f86-d1e42adb15bf
Certificate serial:       010D0C9F4328583D42AD4BB0DC0F85AF162AB7C0
Authority key identifier: B3:5C:EE:5F:0B:D6:D1:3C:74:02:5E:36:2C:55:EA:7C:65:6B:BE:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf/71f110b7-9a85-345c-ae7e-b1d269770078.roa
Signing time:             Tue 15 Mar 2022 04:00:00 +0000
ROA not before:           Tue 15 Mar 2022 04:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     209242
IP address blocks:        23.178.112.0/24 maxlen: 24
                          64.112.117.0/24 maxlen: 24
                          2602:80a:6000::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:42:ad:4b:b0:dc:0f:85:af:16:2a:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbd174a-7da2-48ec-9f86-d1e42adb15bf
        Validity
            Not Before: Mar 15 04:00:00 2022 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=3cc5cde7-515a-41a2-b91c-f186a572a211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:38:f7:f5:de:3a:8a:27:fa:d5:da:85:6f:19:
                    65:be:63:52:ac:20:10:cf:47:f5:89:47:a5:af:c2:
                    e1:bc:39:45:6f:28:4e:02:16:3d:af:7c:a9:03:b5:
                    68:a3:7f:ae:31:63:32:29:a0:1a:77:0c:55:91:dc:
                    6b:2e:22:92:8b:6a:73:49:c7:54:b9:fd:8a:8a:20:
                    2a:8c:d2:47:f0:b9:12:36:8a:3e:9b:ec:48:b9:cc:
                    53:32:d0:32:2b:0e:d3:d6:db:25:c8:7e:f5:32:52:
                    f0:03:f1:50:6f:a8:3d:f3:50:74:56:2c:69:90:07:
                    39:b3:a8:e1:47:2d:b0:49:2b:33:16:fb:50:d5:5e:
                    e6:84:0d:50:4d:1e:8c:8c:4b:8e:a6:1f:cc:7c:bb:
                    af:8d:9a:be:3d:b7:c1:84:d4:db:15:66:a3:61:c5:
                    ba:60:c9:bb:97:1d:79:3a:c5:95:95:7f:2e:9a:d6:
                    3a:45:4e:fd:b8:34:e5:7a:77:11:4a:23:69:95:f6:
                    13:f3:fe:e9:6d:aa:e3:5a:ff:a3:2b:ff:0e:da:2c:
                    e2:c5:62:07:85:4d:c1:8e:80:d5:98:ad:5e:8b:d7:
                    04:45:b3:43:79:a9:4d:88:1b:42:b5:7b:fc:40:ec:
                    51:61:40:eb:e4:83:77:fd:8a:4e:93:93:a1:ff:fe:
                    1f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:61:84:C6:1B:FE:C7:5F:52:5F:EA:DD:03:01:E7:63:27:90:C9:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf/71f110b7-9a85-345c-ae7e-b1d269770078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf/9fbd174a-7da2-48ec-9f86-d1e42adb15bf.crl

            X509v3 Authority Key Identifier:
                keyid:B3:5C:EE:5F:0B:D6:D1:3C:74:02:5E:36:2C:55:EA:7C:65:6B:BE:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9fbd174a-7da2-48ec-9f86-d1e42adb15bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.112.0/24
                  64.112.117.0/24
                IPv6:
                  2602:80a:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:94:1e:e0:40:d9:f2:1b:98:99:c4:d5:d7:d3:69:56:13:3e:
         58:17:00:b4:2d:d0:2b:dd:f4:c0:3f:15:50:35:1d:d5:4e:ad:
         61:76:7a:4b:9e:2a:9e:ff:73:af:b6:9a:ba:35:7a:b4:e7:ad:
         1d:9c:85:38:76:ae:fa:d8:4d:6b:89:b8:d7:64:56:fb:ea:12:
         3c:ac:3c:04:06:d7:b9:e0:e2:7e:3b:43:6c:f3:56:89:e0:0a:
         16:00:99:44:14:53:aa:07:a5:a9:f7:4a:37:92:c0:50:78:45:
         56:36:6c:f0:30:62:39:96:de:be:84:00:75:40:2d:4e:67:53:
         7e:9c:dd:fd:e8:7c:57:39:dc:75:be:6c:6b:76:1c:77:a9:e8:
         a8:0d:c2:8b:cf:8b:b4:8d:1a:33:54:7d:e6:35:ec:50:54:a3:
         26:19:9f:a0:02:21:40:dc:91:6a:b2:4a:99:a1:4e:4a:87:e0:
         94:86:c3:b5:ee:77:be:52:fb:5f:5f:42:b6:0c:a0:ac:fe:6c:
         31:3c:d7:b8:93:6f:00:a4:f8:d6:2e:41:80:01:95:a4:b6:7e:
         ae:1e:09:a7:7e:83:eb:27:d9:af:f5:0c:61:8f:26:e8:f0:fb:
         3a:4c:3a:32:51:15:27:a5:82:82:0d:61:50:e5:fb:e9:58:f8:
         ed:c9:00:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----