Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a31fe95-83d6-38c2-b844-3cdf80f13ba8.roa
File:                     4a31fe95-83d6-38c2-b844-3cdf80f13ba8.roa (raw, json)
Hash identifier:          iK+2LoLPasFJ1o7CogPWwJB31MR+7GIQFh9Hr1b1yhA=
Subject key identifier:   9C:45:00:77:DE:9F:51:0B:36:69:93:60:DB:39:24:4B:FB:27:78:C9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648DCC7B1C99D64D2CBE9C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a31fe95-83d6-38c2-b844-3cdf80f13ba8.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     397805
IP address blocks:        64.62.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:cc:7b:1c:99:d6:4d:2c:be:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=25ca0783-272e-427b-a402-e084ee95f66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:7c:62:7e:17:c6:06:d3:fa:6f:e4:c6:c8:
                    88:14:7e:4e:62:f8:78:79:26:87:bc:7f:a7:7f:ac:
                    5b:60:1c:c2:fe:bd:48:81:da:e2:5e:ac:d5:05:4c:
                    97:6f:81:9e:62:4c:1d:fb:2d:7e:4c:9d:4e:de:93:
                    4b:0f:2b:11:5e:21:03:39:db:bd:a7:2e:84:93:3b:
                    e5:15:85:11:f2:b4:3d:1f:24:b3:da:48:9e:ba:cc:
                    7c:5d:5b:1a:20:48:3b:95:72:42:59:3e:51:7f:76:
                    1b:87:51:e9:a2:99:ea:cb:d6:fc:2b:d9:0b:70:a0:
                    b3:26:28:3b:45:d7:f3:1f:d8:82:91:32:46:c9:9f:
                    65:68:6f:68:56:78:57:73:7e:24:b4:67:95:32:a7:
                    d7:99:c4:7e:37:e7:8d:75:3d:7d:06:43:a7:a6:bf:
                    1f:df:65:6e:35:67:83:20:e5:b6:63:37:3b:a7:5e:
                    fb:a6:ba:73:4f:5c:e2:16:0b:b8:05:55:9b:2b:35:
                    dd:3c:c3:f9:e6:2f:66:1b:d3:d7:df:ea:7a:1b:2b:
                    b6:a8:d5:d4:c4:84:52:0f:c4:b9:18:67:a8:bb:d1:
                    31:ff:15:4b:fa:b3:f3:e5:f8:b8:73:c3:49:e4:86:
                    93:1c:e0:02:0a:08:34:1b:00:a7:c2:27:d6:c2:0b:
                    6b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:45:00:77:DE:9F:51:0B:36:69:93:60:DB:39:24:4B:FB:27:78:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a31fe95-83d6-38c2-b844-3cdf80f13ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:8b:18:ef:d0:5b:3c:21:7e:92:f7:5b:1e:75:37:1a:73:59:
         b3:7c:92:8a:ae:68:24:90:0d:ed:a3:e9:fb:76:25:e5:23:73:
         37:9d:73:a2:8a:4d:6b:1e:07:42:45:1d:b6:c7:c4:59:24:07:
         4a:e2:55:e9:3d:4b:15:1e:90:f4:16:47:50:8f:2a:52:4c:05:
         a7:cb:35:9c:fb:32:13:3d:a0:74:bc:86:fa:15:4c:fc:a7:64:
         e8:a9:47:3a:ad:ed:cf:d8:1f:03:cf:f5:aa:46:19:fc:7c:17:
         2c:19:4c:c3:ac:3d:40:9e:c0:ff:29:53:77:32:ab:f0:b9:c8:
         20:6f:74:38:f0:95:eb:00:c6:25:b6:e5:d5:51:da:8d:16:f3:
         94:38:04:d2:94:2d:da:6d:f0:21:aa:cd:ca:cc:93:ff:73:dc:
         d7:3e:b6:fb:38:5e:0c:3d:be:26:eb:d2:14:17:cb:7e:6e:ed:
         c4:d8:9c:39:5c:3d:cd:2d:a0:27:2f:ae:f0:5a:ec:4a:fb:22:
         d5:09:d8:9f:1e:90:34:84:9a:20:26:da:9a:e2:ca:fc:e4:e9:
         69:1e:7b:27:4c:35:74:cd:b7:82:cd:1e:78:49:ad:32:62:dc:
         aa:e5:03:84:05:4e:0f:f5:ac:cb:d8:40:1a:1c:32:7b:37:08:
         bb:17:44:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----