Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79653181-a90a-310c-bb6c-a4e254c54d14.roa
File:                     79653181-a90a-310c-bb6c-a4e254c54d14.roa (raw, json)
Hash identifier:          E1seY/eBuCxfq9TC4ZCo8E1aqw0mevCWx9ZcrFFRMkU=
Subject key identifier:   B1:73:EC:99:AF:36:DF:CB:10:F0:86:F7:FF:2A:AB:FF:99:47:41:F3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E0C31485218FE91526A30
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79653181-a90a-310c-bb6c-a4e254c54d14.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     26077
IP address blocks:        184.105.145.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:0c:31:48:52:18:fe:91:52:6a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=9e04a45f-f18f-4d3d-b73e-57ad6dd65a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:cb:ae:14:d0:b4:0c:81:83:d0:30:ba:ed:
                    e9:8f:cf:60:12:58:72:fc:b4:a1:06:9c:01:78:4a:
                    e0:1f:93:dc:ef:71:12:68:39:85:97:bb:2c:5f:d2:
                    a0:d4:8c:ce:d8:eb:b7:0c:2f:cf:e6:1f:7e:27:9c:
                    fe:bb:49:50:9f:98:a8:16:16:74:4c:67:ac:b5:8a:
                    6c:34:b2:6a:27:67:60:79:91:c4:4a:1d:76:68:40:
                    81:8b:36:be:90:87:fb:eb:ec:72:7f:be:91:43:b5:
                    1b:50:c4:f2:3f:9f:fb:28:5d:29:18:38:6d:c2:5a:
                    b3:23:af:a9:d7:87:0d:fa:f3:86:02:97:60:20:8e:
                    53:79:18:de:b7:ed:1e:68:66:94:8e:02:36:00:da:
                    78:3e:e8:c1:30:2b:c6:e1:9b:cc:c2:9a:70:8d:11:
                    ad:bb:61:ea:5f:1c:d7:80:7e:85:0b:2a:2c:ab:37:
                    3b:44:53:3e:77:f9:14:2b:3b:1e:9f:2f:5d:f4:f3:
                    8a:7b:06:e9:da:33:9a:ff:31:f3:fd:ee:8b:44:14:
                    83:dd:10:01:a9:51:ab:5c:89:e4:71:a5:c9:c7:9a:
                    7d:8a:ed:16:ad:09:ce:e9:ff:27:f8:e9:49:a2:21:
                    6d:ec:64:6c:77:5d:94:85:9c:6e:67:2e:1e:56:f5:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:73:EC:99:AF:36:DF:CB:10:F0:86:F7:FF:2A:AB:FF:99:47:41:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/79653181-a90a-310c-bb6c-a4e254c54d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ac:66:08:d6:07:ae:32:f6:58:9f:dc:91:27:e2:75:c5:31:
         e1:21:43:75:e3:4b:02:27:6c:19:1d:c3:c5:a3:d7:36:91:0b:
         6d:a4:dc:17:2e:d8:e4:48:35:53:78:16:9e:ec:98:45:d2:7b:
         cf:17:e4:b8:39:80:d6:01:de:e3:8b:fd:39:0f:02:f2:59:b7:
         a4:0d:41:0c:f5:25:67:95:20:57:0a:03:c2:86:fd:89:e5:91:
         30:8e:24:57:a4:12:82:ef:01:ba:6e:f9:7a:06:ea:0d:0a:c7:
         6a:04:17:bd:5a:50:53:01:3f:83:c0:73:b9:1b:b6:5b:92:05:
         00:ea:9c:d0:b2:f0:94:46:3f:b7:92:35:a9:41:b3:4d:5f:b9:
         8e:7d:99:f8:fd:c5:e0:54:11:c6:02:34:bf:96:08:00:95:09:
         b5:81:f4:b1:cc:7e:d1:ac:01:55:c8:bb:37:d1:90:c7:75:3b:
         bb:36:7f:ef:fd:fc:45:59:49:d8:0c:d4:dd:60:92:34:f4:4f:
         23:f0:da:e3:c5:da:6a:b3:a4:cc:a4:a2:34:fa:8c:4c:77:75:
         be:79:ed:ff:d5:06:fe:a9:05:cb:ae:23:4d:10:e0:0b:26:72:
         cb:8e:8b:11:cb:31:6a:ac:45:b8:3a:d4:3e:e3:9a:a4:f4:1c:
         38:e0:69:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----