Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/386c6d6b-1b0e-3998-95a9-4732a10b6608.roa
File:                     386c6d6b-1b0e-3998-95a9-4732a10b6608.roa (raw, json)
Hash identifier:          3PrjoqbFg6h0qw7inM8W6Mj8dWJxhaMWyndu+lvIUf4=
Subject key identifier:   C5:AD:FF:B4:0E:E3:04:3E:00:6E:50:E8:99:26:52:E8:2A:9D:C0:C3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA5F79AAFC8D756AD12EAD4
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/386c6d6b-1b0e-3998-95a9-4732a10b6608.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     46491
IP address blocks:        65.49.53.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a5:f7:9a:af:c8:d7:56:ad:12:ea:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=0e77113d-b242-476c-ac7e-798c5bc9d3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:b3:5a:e6:65:89:54:9a:b2:16:44:56:d2:80:
                    da:a4:43:48:3b:4b:78:7f:65:a5:c9:46:cb:c1:1e:
                    8c:2f:df:c6:57:5e:c9:fa:da:71:4a:8f:ab:31:1f:
                    ba:3a:07:b1:0a:f3:a2:7f:ff:95:e2:2f:1a:f8:3e:
                    43:c8:69:38:be:8e:03:d2:cb:04:89:a6:65:98:d9:
                    38:21:56:1d:70:38:19:35:8b:4e:1c:23:8f:84:65:
                    5a:79:03:45:96:c3:69:4e:83:47:a8:15:77:3b:d0:
                    aa:2c:65:e9:88:0d:b7:6c:43:05:8d:92:be:82:2f:
                    24:94:f8:1a:d5:fa:6e:04:78:dc:3e:fa:7c:99:ea:
                    f5:d5:12:bf:3d:74:70:de:94:26:73:89:8a:37:1c:
                    bf:94:57:73:70:12:5b:56:b4:fb:bb:17:47:a5:9a:
                    ec:b2:40:67:aa:f1:a6:5c:07:a9:25:f0:92:7c:88:
                    72:8e:3a:8a:64:a3:ed:24:45:9e:0c:6e:67:1f:7c:
                    22:9a:83:ff:51:e1:93:eb:5d:86:17:2f:cd:b7:26:
                    16:cd:51:ce:20:86:8a:26:fc:94:a8:81:8f:c6:08:
                    e5:8f:6c:71:22:3d:c9:d4:ff:c1:a6:06:18:42:ae:
                    7a:5a:72:85:32:c6:cc:51:90:8c:1e:3c:c4:71:6d:
                    0f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AD:FF:B4:0E:E3:04:3E:00:6E:50:E8:99:26:52:E8:2A:9D:C0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/386c6d6b-1b0e-3998-95a9-4732a10b6608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:65:13:eb:c2:ca:d0:70:7e:6b:40:f5:14:95:b3:8d:bb:30:
         5b:16:e0:d3:33:83:d9:17:40:d5:15:82:a9:57:87:ca:11:05:
         25:b4:de:b2:1c:65:a7:a6:3d:1a:d8:1e:3c:c2:38:91:d1:b9:
         8f:1c:83:9e:de:d7:34:d4:8a:f5:9f:36:c8:2d:1c:72:ec:90:
         62:14:34:d3:16:65:09:d7:01:65:6f:2b:c6:1b:78:58:51:38:
         06:a5:bb:89:a0:ec:1d:7f:96:ea:3f:cc:cd:08:4e:63:83:d3:
         4c:2d:25:37:64:b7:a7:bc:e5:5b:66:6d:75:cc:27:8e:09:6c:
         64:7e:4c:92:6b:e5:de:98:b6:73:0b:7d:10:b5:25:13:77:b0:
         a1:f3:35:b9:bd:99:ce:65:48:e0:df:6f:04:cd:6c:7d:a4:28:
         53:b3:ef:d1:cd:06:5c:b7:63:94:87:37:e2:20:b1:42:9d:db:
         19:69:ba:32:85:45:07:b8:2e:11:1d:e7:2a:3b:de:ce:96:58:
         3c:64:fa:49:ac:03:6c:cb:b6:f8:fa:24:28:6b:69:aa:32:86:
         37:65:8c:b3:6f:2a:74:a7:fa:08:91:60:47:0c:19:d7:cd:cd:
         0a:bd:ac:e2:30:69:e0:8d:6f:81:85:d6:be:a8:5f:2d:20:3f:
         4a:c4:1c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----