Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95a9395b-9ac6-369c-9ed6-ed0ee7682dcd.roa
File:                     95a9395b-9ac6-369c-9ed6-ed0ee7682dcd.roa (raw, json)
Hash identifier:          CjrNZoT3sMS9LbMQYgwZQFtRdTaEwLaDS0f7wFlpuhI=
Subject key identifier:   48:EE:27:CB:BF:43:44:91:8F:5E:EF:BD:C8:C5:75:1E:28:E6:D3:68
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A51A3FAAB11EAD1A653BB00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95a9395b-9ac6-369c-9ed6-ed0ee7682dcd.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     395880
IP address blocks:        209.51.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:a3:fa:ab:11:ea:d1:a6:53:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=21af63fd-d9d5-41d2-b476-6d314c18db42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:35:e2:4f:0f:2e:9f:99:82:ce:9c:8c:45:
                    4b:cd:97:0c:d9:26:a6:e5:25:19:51:f4:63:45:62:
                    fc:5d:e9:cc:44:c5:c5:97:62:84:13:ae:a8:48:5e:
                    69:c9:74:e9:cf:27:3f:56:30:ec:35:a9:98:2f:7d:
                    56:5e:fd:e8:64:96:38:7d:8e:36:3a:ec:1e:b9:c2:
                    43:e9:1c:64:73:ba:6e:e4:b8:49:19:cd:dc:b1:b2:
                    8c:d8:a5:41:b4:b8:0d:04:c5:e1:cb:aa:d9:6f:65:
                    66:3c:9a:36:03:f1:3c:d6:10:9a:09:9c:70:fb:a8:
                    e1:5d:09:8a:5d:7e:e1:41:2d:a7:c6:0f:fd:65:b5:
                    ea:cf:7a:57:60:b8:6c:d1:d3:65:f6:61:2d:29:eb:
                    c7:a3:be:6e:13:8f:5f:fb:cd:d9:1f:7c:a7:f9:cc:
                    60:f5:87:1c:92:61:6b:96:84:7e:fb:b5:55:7f:88:
                    04:67:be:18:58:a2:bb:17:1c:df:d8:58:d9:e6:40:
                    6f:0a:b6:e1:b4:81:48:a6:84:d4:06:96:05:2d:76:
                    15:4a:4c:9a:db:0c:da:5e:91:a5:ac:6f:5c:1b:65:
                    c8:32:2f:3c:7c:8f:d2:14:bc:e9:90:cb:ac:05:99:
                    e1:e1:c3:06:4c:de:b4:76:9c:98:d8:8d:4a:a7:4f:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:27:CB:BF:43:44:91:8F:5E:EF:BD:C8:C5:75:1E:28:E6:D3:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/95a9395b-9ac6-369c-9ed6-ed0ee7682dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:32:a9:f3:cf:f3:db:97:22:7d:72:5c:2b:c5:cb:49:22:
         ab:a0:fd:94:76:10:b4:66:09:aa:1d:f4:f7:c2:67:b5:d7:6e:
         74:8d:8f:4e:98:61:f6:d2:6d:ad:04:e2:c4:3c:ba:64:e9:27:
         3e:6e:8e:55:37:2d:85:b6:d1:52:0e:f4:3d:43:26:6e:a1:41:
         6b:b0:c9:45:66:bf:13:9a:ce:92:d5:e3:89:0b:1c:26:ac:4f:
         a6:3d:9f:93:65:9f:55:60:08:9b:87:2a:6e:8a:d2:f6:4a:b3:
         e8:5d:6b:e3:b7:b0:0e:d9:c0:48:b2:a9:7f:3e:dc:62:bf:77:
         ac:43:ce:02:28:6f:35:2a:a2:db:e1:a0:a1:41:da:d0:d8:ad:
         f5:91:f2:b3:09:e3:0d:61:5f:e5:ba:a1:9a:a9:d7:df:1e:23:
         0e:1d:d3:2f:7b:f9:f3:c8:c2:55:c5:e3:2b:f8:16:c8:2a:76:
         7d:99:e6:41:ee:95:29:cb:14:03:e7:18:e2:52:ad:d5:8d:92:
         8e:23:18:6c:9b:92:7a:80:59:86:6b:6e:ce:b8:95:8c:bd:d3:
         a7:09:0e:e1:94:31:9d:23:d5:fb:96:44:33:5d:09:5f:e2:d2:
         65:9e:32:04:a6:b9:bd:f3:f6:0a:c5:55:02:60:d4:8f:bd:17:
         da:04:d9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----