Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73c51f5c-b59e-3e9f-af44-131c8066f001.roa
File:                     73c51f5c-b59e-3e9f-af44-131c8066f001.roa (raw, json)
Hash identifier:          s0BCqR7hg2S+VNe5CsQD57DBsCJJ1h7N+ZliAqM0USM=
Subject key identifier:   41:26:DF:4F:6B:E1:4C:BA:48:4F:CB:D7:98:47:BF:31:C3:63:4E:4B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F1BF7A1A1AEBEFCF800A8C960
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73c51f5c-b59e-3e9f-af44-131c8066f001.roa
Signing time:             Thu 01 Sep 2022 12:00:00 +0000
ROA not before:           Thu 01 Sep 2022 12:00:00 +0000
ROA not after:            Thu 02 Mar 2023 05:00:00 +0000
asID:                     31769
IP address blocks:        184.104.233.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:1b:f7:a1:a1:ae:be:fc:f8:00:a8:c9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  1 12:00:00 2022 GMT
            Not After : Mar  2 05:00:00 2023 GMT
        Subject: CN=13e44dcc-6954-44ce-b768-4e2c6e8e259f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:2b:ef:9f:b9:9e:ee:01:04:de:91:78:4d:
                    a6:db:03:5d:02:7b:25:74:a9:79:49:f0:48:df:f9:
                    f0:3a:c2:48:60:6e:44:5f:95:6b:d2:40:89:33:58:
                    7d:76:a1:9e:81:07:ad:2c:03:99:da:4e:21:1f:89:
                    a7:b7:d6:c1:c2:01:74:d2:c8:b8:db:63:47:8f:db:
                    7b:8e:a0:fe:e6:a1:b3:91:2f:b4:28:74:32:70:4c:
                    6b:fc:f6:f4:12:c5:b2:fb:0c:52:ca:1d:0e:51:d2:
                    50:d9:9a:14:c8:08:cc:a9:64:ff:a8:bd:1f:f7:b7:
                    08:88:7b:f4:d0:12:c7:3b:93:b3:19:af:28:9b:8b:
                    5f:eb:c5:ac:ef:b0:a7:fc:1b:5d:14:60:b8:18:15:
                    e8:3a:26:e8:02:f1:6f:7f:b2:c1:55:79:54:22:80:
                    5f:cb:bf:b6:93:69:fb:02:2c:59:f0:48:c8:4f:34:
                    ef:0d:5c:6f:74:aa:6f:a3:04:0a:e5:72:5a:74:45:
                    91:5e:e5:7b:5c:5d:51:d8:15:3e:2d:c6:8d:4b:37:
                    d0:80:b9:4c:76:9f:96:b6:d5:fd:02:23:8c:81:e4:
                    e7:c7:04:0c:04:42:d6:40:90:64:ef:a7:12:6d:4d:
                    64:5a:ad:d5:e2:0f:73:88:9b:0d:f6:9e:a5:29:4a:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:26:DF:4F:6B:E1:4C:BA:48:4F:CB:D7:98:47:BF:31:C3:63:4E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73c51f5c-b59e-3e9f-af44-131c8066f001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ff:06:02:8b:fb:ae:d6:50:f4:5d:cb:9f:f1:41:f8:95:cb:
         ff:02:d8:ad:39:78:b8:ce:41:22:48:98:fc:ae:06:f0:99:81:
         eb:e1:dd:97:a3:eb:81:4d:53:5a:fd:8e:d7:cd:87:d1:d9:8e:
         b6:a9:1f:d9:ca:0a:21:36:a5:f8:58:81:c8:6e:c0:5a:0d:19:
         1d:bc:82:e9:8c:12:0b:2d:f3:b5:00:88:a9:2d:9c:42:d2:75:
         4a:1a:51:1b:e1:b5:df:b0:eb:e8:b0:00:0f:3a:88:9c:10:5c:
         ea:aa:60:f9:7f:01:25:c4:92:48:45:5f:f2:65:22:73:e6:1c:
         3e:32:09:fc:41:58:af:07:a1:2b:3a:20:29:76:1d:7d:5a:1e:
         46:66:4c:bc:0b:6d:a6:e5:3a:ef:bd:2f:f2:8c:e8:fb:0c:11:
         28:5b:4f:03:dc:e0:72:ec:1d:02:69:24:9e:88:2e:68:2d:01:
         0b:8a:c5:3a:35:f4:ab:04:d8:d1:a0:fd:00:f0:34:f0:73:d6:
         24:c8:05:cf:24:ec:54:98:e9:e4:a2:c4:d9:11:18:94:57:4e:
         b2:9d:ca:31:07:f0:02:9a:5a:64:d6:f7:77:fc:70:5a:d4:cf:
         15:00:91:df:3e:6c:25:e8:24:e1:3d:d1:cb:a6:b1:51:42:ef:
         6d:32:0a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----