Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d2ed91a-f2f5-3d43-8007-82ecf5046641.roa
File:                     0d2ed91a-f2f5-3d43-8007-82ecf5046641.roa (raw, json)
Hash identifier:          eFepBD4PLPmHEXsEXS6YehacC+COV7mPL9W3o/U5iCA=
Subject key identifier:   B6:84:03:B0:03:FB:6B:2E:B5:3A:41:22:C9:F4:C1:5C:9B:CC:7F:5D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A515104C5065E95BDB17D40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d2ed91a-f2f5-3d43-8007-82ecf5046641.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     397655
IP address blocks:        66.160.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:51:04:c5:06:5e:95:bd:b1:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=4c607707-e628-4a68-8c64-622f4342f481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:7a:d5:76:ab:da:4c:b4:9e:31:da:df:d7:
                    d1:7b:a1:20:b6:00:78:1f:b0:63:4a:b2:8d:5c:29:
                    3c:9b:3a:f4:7f:04:17:55:94:89:98:49:9e:f0:67:
                    38:fb:65:24:d6:ea:f4:d1:84:c0:fa:27:a0:ae:b3:
                    0c:8d:46:4f:35:83:64:b3:f9:d1:d3:9a:41:4c:48:
                    8d:22:f9:82:03:2b:4b:51:17:b5:29:f0:de:7b:6d:
                    1f:b1:4e:08:17:05:69:cc:93:d2:75:28:45:5a:08:
                    42:c4:20:df:1a:ee:27:f7:41:a8:c4:41:a6:91:54:
                    b5:2b:f5:58:39:cf:31:78:db:a5:cd:8c:0e:b3:4e:
                    49:1f:36:e1:fa:e9:84:af:95:b8:89:dc:72:bd:39:
                    80:e6:95:43:94:ef:b0:8e:1d:1c:db:47:dd:e4:70:
                    9a:e8:af:fb:56:08:eb:8b:b0:46:9c:7f:57:47:e7:
                    79:12:5a:af:8f:80:cf:c8:c9:dd:fe:1c:20:1b:4e:
                    e4:d7:d1:89:0a:21:b0:8b:44:23:4a:2b:55:e4:8c:
                    0c:65:df:67:18:0e:7b:9a:79:ea:15:8d:0c:53:e8:
                    e6:9e:32:6f:f9:8d:b6:9e:34:ce:37:83:1b:31:95:
                    2b:af:c0:2c:78:6b:77:1c:44:51:8e:00:ba:ba:d4:
                    22:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:84:03:B0:03:FB:6B:2E:B5:3A:41:22:C9:F4:C1:5C:9B:CC:7F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0d2ed91a-f2f5-3d43-8007-82ecf5046641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c3:20:e2:ff:04:5e:31:45:b7:b5:83:8a:d9:b4:0c:9f:c3:
         8c:a0:39:ef:08:f5:5f:ea:41:21:71:db:ef:25:44:24:db:dc:
         a3:3c:0b:90:fa:04:95:a1:1b:c3:22:75:9a:8e:93:6d:f7:fe:
         b0:1d:70:10:6c:0b:4c:b7:60:a8:67:0a:32:4e:09:96:21:48:
         e4:dd:27:f1:1d:b0:d3:d2:42:36:14:b9:aa:c7:f1:54:ab:3c:
         cd:a5:42:6d:66:94:b0:97:2f:1a:51:0d:cb:b3:0b:01:b2:65:
         bf:18:bf:44:bd:fc:a3:d4:5b:3b:06:10:67:b2:94:45:19:54:
         b3:ec:b5:91:e3:0a:3c:2a:5d:3b:4f:c4:ea:75:45:2e:7a:aa:
         4d:bf:1c:05:6f:25:50:04:92:8d:98:62:e9:02:12:75:42:67:
         41:7e:91:cf:72:7c:2a:3b:39:e4:16:2f:50:8f:5c:f7:d3:f0:
         dd:c4:bb:29:c6:33:46:a9:cd:5a:13:36:46:89:dd:d4:90:02:
         9f:c4:6d:ce:f2:bd:d0:b2:f4:ba:d1:f5:83:71:d4:d6:11:66:
         a6:be:73:ca:05:92:2c:cf:dc:ec:bd:78:97:5b:4a:05:7e:ca:
         4f:76:27:90:16:de:01:58:66:d5:3f:b4:7a:46:69:d5:58:07:
         ce:4a:3f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----