Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00bab529-bb60-38a1-899e-b7516c590429.roa
File:                     00bab529-bb60-38a1-899e-b7516c590429.roa (raw, json)
Hash identifier:          P52GdJDXWxhjXIanToVNxyqZv5K03QyJJiSD+FMP4rU=
Subject key identifier:   FD:13:0A:9A:7F:75:9B:5E:59:97:93:95:7D:D3:16:E5:B4:A5:46:9E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F61C2BD0206774D91E83CF100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00bab529-bb60-38a1-899e-b7516c590429.roa
Signing time:             Mon 26 Sep 2022 12:00:00 +0000
ROA not before:           Mon 26 Sep 2022 12:00:00 +0000
ROA not after:            Mon 27 Mar 2023 04:00:00 +0000
asID:                     28317
IP address blocks:        209.51.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:61:c2:bd:02:06:77:4d:91:e8:3c:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 26 12:00:00 2022 GMT
            Not After : Mar 27 04:00:00 2023 GMT
        Subject: CN=b9be0688-33e3-4009-9c7b-f6cce97407a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:40:c5:16:a6:f1:60:3f:af:d2:84:9f:97:
                    21:d3:06:3e:21:43:61:06:2b:50:17:a4:fe:3c:92:
                    0e:d0:cb:93:6a:0f:0c:3b:4b:7c:6d:61:df:d2:d7:
                    00:6f:49:7f:b0:f6:cc:aa:c9:60:2c:f7:ec:d9:26:
                    97:7e:91:7d:ee:3a:ff:fb:cd:45:e8:1a:76:2e:03:
                    8c:3a:3b:ec:c8:c2:7e:f9:4d:51:9e:c3:a0:11:28:
                    35:b7:dc:bc:6b:53:40:fd:b8:4c:c3:b9:4d:ea:76:
                    4e:c5:50:44:59:26:77:06:45:8b:f6:13:33:d4:bd:
                    70:eb:82:5f:64:22:ad:5c:01:ab:45:62:24:aa:c6:
                    90:3c:92:a2:3f:c4:d9:19:3d:87:d2:b1:1c:83:aa:
                    5f:01:7b:1e:ca:e5:29:89:70:99:e3:c3:1b:00:a6:
                    a6:4e:1a:43:fb:4b:fe:56:b1:e9:8f:48:5b:bb:f2:
                    ef:a1:1e:17:34:df:06:e6:c4:72:cd:64:1d:e6:98:
                    97:9d:1c:32:a9:80:c8:45:88:c0:9e:08:60:c0:91:
                    4a:b9:e7:3a:30:86:3d:9d:95:c3:5c:41:d2:72:a8:
                    5b:d4:dc:59:76:ed:8f:06:10:9a:34:83:f0:22:21:
                    f2:7f:6d:bc:c6:0a:77:5e:59:ce:1d:7d:3c:40:2b:
                    d3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:13:0A:9A:7F:75:9B:5E:59:97:93:95:7D:D3:16:E5:B4:A5:46:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/00bab529-bb60-38a1-899e-b7516c590429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:52:a7:bf:19:8a:69:97:93:e3:e4:b3:32:40:cc:a2:55:
         76:1d:40:7d:54:aa:4a:2b:d7:de:8a:6f:95:2f:82:a6:2e:41:
         11:3c:d8:03:72:8f:7a:4d:a2:76:ba:19:be:7a:07:4d:48:49:
         4a:e0:ca:d4:14:03:4c:66:2e:4f:5b:df:0d:57:3e:06:79:d5:
         da:91:4c:5b:e8:24:52:91:6c:09:f0:86:2e:8b:b3:7c:c2:cf:
         55:39:5f:be:f3:ba:66:39:39:56:47:05:70:53:2e:d0:70:d2:
         4e:0e:d4:9f:80:6c:cf:36:46:6c:8a:63:5c:f5:c4:bc:c7:78:
         63:1f:61:f4:53:9c:ef:04:d4:bb:29:9f:42:2e:06:ed:a4:1c:
         f5:82:f9:63:14:c6:36:69:91:1f:87:b6:24:21:e3:85:1f:de:
         c2:77:92:35:35:1c:c7:79:50:f7:30:97:97:63:0d:ff:3d:a3:
         4a:df:75:08:66:0d:0e:3b:af:31:e7:df:29:44:92:4f:98:70:
         d4:4d:7a:69:ee:92:b7:63:a7:1c:ce:5c:71:78:74:f2:fe:85:
         33:34:f9:72:12:06:35:8c:ee:f5:f0:73:92:23:1c:ce:f0:50:
         1f:de:52:29:e8:2d:ba:83:06:d9:d9:3c:21:fa:6c:ab:4b:36:
         77:f8:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----