Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bab5add8-a99a-30a2-a67a-b64f35f4a7bd.roa
File:                     bab5add8-a99a-30a2-a67a-b64f35f4a7bd.roa (raw, json)
Hash identifier:          588d6CsrKQyZ3g4ZdTmbw/+VyXiL9054FDy0ZSk15cg=
Subject key identifier:   FE:09:D0:BD:18:C3:B2:FC:6F:B4:34:20:90:F1:7F:FB:72:71:32:A6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E7EE88B14FC3326213100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bab5add8-a99a-30a2-a67a-b64f35f4a7bd.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     46278
IP address blocks:        65.49.11.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:7e:e8:8b:14:fc:33:26:21:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=5b96bb9d-dd3c-4931-a74e-e368a472db3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:78:99:ed:a6:c5:e1:d0:f1:a7:a4:ee:ed:
                    8e:dd:cf:42:0e:88:d2:ec:0b:b1:19:81:80:f0:cd:
                    86:95:65:8c:3f:e1:66:8c:5c:51:5c:0e:ab:d1:7d:
                    cd:cc:4c:60:ae:0a:97:b1:f8:74:25:0c:4f:fa:cd:
                    03:00:82:b6:ca:a9:9c:c1:b2:f4:9e:7d:8d:ab:5d:
                    67:ff:e6:49:41:96:43:57:e9:bd:46:55:6a:6b:62:
                    23:4b:29:0d:83:c4:08:ec:f5:f7:31:67:49:94:4d:
                    f2:6a:52:71:d0:e1:f8:68:d2:08:d0:f6:57:f4:3b:
                    55:3b:85:27:bc:f4:56:bf:bf:6b:5b:c1:63:0e:6f:
                    7e:1b:64:26:91:28:90:ee:0d:bc:8f:42:19:e6:66:
                    b9:32:17:2c:59:23:16:9b:32:87:3e:67:77:e5:3a:
                    e6:03:26:59:70:f5:e1:69:2f:85:aa:60:62:e6:31:
                    70:f4:30:7c:ec:b4:b4:7c:5c:92:2a:10:60:ce:cd:
                    00:4b:e5:9c:11:d1:2c:ea:d1:fa:99:24:8e:85:5d:
                    00:bc:74:e8:c4:bf:b9:6a:ef:bf:dd:c5:cc:e0:22:
                    91:9d:a2:a8:fa:0c:f9:1e:1c:8e:5f:12:00:2d:a8:
                    fa:7f:aa:4b:2e:c6:ff:b1:d0:bc:9f:d3:79:06:7c:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:09:D0:BD:18:C3:B2:FC:6F:B4:34:20:90:F1:7F:FB:72:71:32:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/bab5add8-a99a-30a2-a67a-b64f35f4a7bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e7:7c:78:36:31:62:1d:69:13:5e:e6:f8:fc:f3:d8:ac:07:
         c8:fe:fa:a9:84:09:6c:40:7f:f3:95:0a:f1:9c:ba:f5:11:a2:
         fc:b9:56:60:ba:ab:67:83:33:61:6c:79:89:93:15:8b:7e:5b:
         ac:3d:b8:98:cf:15:c2:c3:b3:22:8f:6b:28:85:75:67:66:4a:
         3d:60:64:fd:45:20:0e:c7:8c:ac:77:75:2e:9d:23:c7:29:4f:
         e9:c3:e5:fb:46:02:cb:f0:c3:4c:9f:98:05:f4:64:ea:24:20:
         ec:6a:33:9f:d8:9e:31:a8:e0:32:f0:b1:ac:28:6e:ab:67:9c:
         b7:c8:e7:32:be:0d:8f:ff:8d:14:1d:a7:da:90:12:61:7f:92:
         de:88:c9:d2:83:9e:f3:83:c7:45:e1:c3:9c:86:91:34:1b:06:
         f3:25:7a:d4:53:e3:71:cd:56:42:a9:cc:06:4e:c6:ea:b8:3e:
         1d:6f:6b:52:36:df:89:37:34:3d:87:15:3f:ca:dd:f2:17:80:
         f9:c8:56:40:fe:4d:10:db:fb:ec:08:2a:73:c8:63:42:85:11:
         c3:fa:82:e9:b7:4f:aa:c2:31:10:6d:48:2e:1d:a0:76:d7:6f:
         8e:1b:97:8b:6e:6c:53:fb:70:82:d8:c3:9b:01:79:7f:f7:76:
         39:d9:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----