Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8aeced64-ab93-30cc-9a9f-b351bdcfeab5.roa
File:                     8aeced64-ab93-30cc-9a9f-b351bdcfeab5.roa (raw, json)
Hash identifier:          IzQKIyfAyRa3S5IoqynwMOR3YlxUXyyRwS05OmoQvy4=
Subject key identifier:   01:48:F9:86:93:AA:D6:1E:C7:C2:2B:38:8B:85:1B:D7:F4:DC:E9:07
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F043CD29C317DA44D516C9880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8aeced64-ab93-30cc-9a9f-b351bdcfeab5.roa
Signing time:             Tue 23 Aug 2022 12:00:00 +0000
ROA not before:           Tue 23 Aug 2022 12:00:00 +0000
ROA not after:            Fri 24 Feb 2023 05:00:00 +0000
asID:                     394230
IP address blocks:        184.104.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:04:3c:d2:9c:31:7d:a4:4d:51:6c:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 23 12:00:00 2022 GMT
            Not After : Feb 24 05:00:00 2023 GMT
        Subject: CN=a8bdd0b4-0b61-447c-afb0-841383bb5b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:dc:79:ca:2c:65:cb:20:98:b4:04:99:a2:
                    e7:74:6a:73:ee:b5:9d:03:1f:a9:c0:9c:d5:fe:8a:
                    ed:63:c8:a0:2c:82:71:40:d3:01:0d:00:f4:4b:2e:
                    2e:8d:e2:db:36:3a:65:96:61:c4:ab:8c:ae:45:3e:
                    ab:eb:99:e0:7d:c2:0f:f8:79:a7:42:06:42:d3:ce:
                    53:04:e5:a9:36:a2:1f:f6:be:e7:fc:16:74:98:b7:
                    51:08:04:d7:69:10:05:c4:b5:f9:eb:7d:62:b0:81:
                    49:09:e4:2f:ba:e8:9b:d1:29:7e:75:e0:92:c2:4a:
                    36:1d:54:50:06:1a:91:6c:2a:e1:c5:f7:52:9d:cc:
                    4c:b4:bd:af:10:23:e7:6d:ba:66:d2:db:52:1a:2d:
                    ea:46:79:e0:e1:90:90:df:89:0f:9c:7f:70:8c:f0:
                    fd:de:fa:d6:e3:e3:c5:4c:32:c5:8a:ae:62:84:7e:
                    e5:ee:c1:11:81:d5:a1:45:65:57:f7:4b:14:0f:a0:
                    10:32:7d:f3:8a:6e:83:44:b1:1b:81:98:44:ce:7d:
                    5c:fb:a8:a8:23:10:3d:73:2b:dd:3b:84:bf:96:ca:
                    5e:cf:c0:e1:01:ac:d2:8d:5e:80:9c:7e:8d:ba:69:
                    23:4c:9d:ab:e7:5f:b5:19:0e:2f:ba:5e:38:17:4e:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:48:F9:86:93:AA:D6:1E:C7:C2:2B:38:8B:85:1B:D7:F4:DC:E9:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8aeced64-ab93-30cc-9a9f-b351bdcfeab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.104.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:01:bb:88:93:fb:7b:f3:28:f6:80:63:06:03:0b:e4:8e:df:
         d8:d7:e0:b6:14:45:c1:81:68:7e:2c:0a:47:27:fc:d1:f4:ca:
         91:75:32:ed:42:d2:6c:8b:d9:af:f4:db:fc:c2:e5:f3:8b:74:
         0a:95:fe:4f:bb:48:1d:59:8b:ae:a6:9a:93:e4:20:70:82:d6:
         c0:74:f7:ad:b0:b0:06:74:c9:cb:a9:e9:b9:73:0e:61:00:0d:
         1e:ca:89:27:78:1c:3e:46:f5:eb:28:60:79:f9:35:0a:f3:62:
         df:8e:05:ff:e3:28:c3:54:25:df:44:12:e5:8e:d9:47:a8:9f:
         06:c6:98:41:38:f1:b9:e6:df:b3:d9:e9:a1:e5:93:9c:68:02:
         c9:e3:6b:a5:97:72:bf:14:17:c4:1b:0b:a1:d7:14:23:86:25:
         8a:b7:62:49:f7:25:4e:56:bf:21:29:52:35:d0:f2:3a:25:2a:
         4d:60:af:12:5a:27:90:0a:ee:05:ad:95:cc:0a:59:2e:1a:a4:
         42:fe:38:92:90:d6:9f:5c:91:f9:4b:9e:6e:aa:20:4e:16:2a:
         f7:5a:98:fa:97:4b:8e:b0:0c:76:e5:12:48:5c:26:da:d3:be:
         74:4b:36:e0:0b:41:00:91:84:52:50:30:f2:28:0f:3a:ef:ed:
         5a:60:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----