Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9edbb08-9282-3a21-a3bb-d9bd5772a69c.roa
File:                     d9edbb08-9282-3a21-a3bb-d9bd5772a69c.roa (raw, json)
Hash identifier:          s3u92Tu4zMN7/w7dAjzv/mMwB1DgnhICj3sKyOszdeI=
Subject key identifier:   6B:23:6F:F1:DC:B1:FA:C8:77:D4:E2:34:D9:AC:11:AE:E9:1F:C9:EC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D01475BD3C40A5B88833B88E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9edbb08-9282-3a21-a3bb-d9bd5772a69c.roa
Signing time:             Mon 21 Feb 2022 05:00:00 +0000
ROA not before:           Mon 21 Feb 2022 05:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     398576
IP address blocks:        209.51.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:01:47:5b:d3:c4:0a:5b:88:83:3b:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 21 05:00:00 2022 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=4a7a3ecf-efab-4ba4-a364-ec8d5578805a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:60:8f:e0:d1:10:1e:14:c3:be:f1:fe:27:
                    36:d2:5e:a2:f9:9b:fd:7a:15:60:17:0e:75:ea:63:
                    2e:fe:6e:70:6f:91:3c:37:b1:3a:4c:41:7e:c7:27:
                    63:a3:8c:e9:28:3d:6d:78:8c:76:35:b4:75:bf:95:
                    47:03:7d:e2:eb:51:2f:7f:b5:c8:13:82:69:9d:24:
                    d7:2e:e8:6c:ee:16:c3:17:56:0e:8e:a8:67:75:ad:
                    48:8b:73:8d:da:38:ac:77:73:55:27:f2:ca:14:e1:
                    69:4c:84:ea:e6:54:87:04:a3:54:f4:ca:e3:d2:24:
                    f5:46:e2:39:07:db:74:5e:0c:0c:dc:7d:aa:bb:c3:
                    13:7d:c1:c9:87:b1:ef:41:5f:41:c9:b7:bc:11:2c:
                    95:f5:62:68:73:ec:7a:8c:47:3c:fb:1f:93:3e:e8:
                    d2:45:5b:62:ed:75:ca:d5:7c:52:04:bc:f8:c6:4a:
                    3a:30:1e:49:91:4c:a3:11:38:08:0b:53:ad:14:be:
                    22:f1:a1:9e:60:8b:3d:4f:0e:83:67:97:d2:cd:c7:
                    65:1e:db:27:2b:48:73:d4:b9:2c:fa:26:0a:8c:b2:
                    a6:85:05:14:cc:0f:91:35:30:67:7b:69:3d:13:7e:
                    15:c2:59:9a:d6:a2:ec:51:78:be:92:07:c7:17:27:
                    5b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:23:6F:F1:DC:B1:FA:C8:77:D4:E2:34:D9:AC:11:AE:E9:1F:C9:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d9edbb08-9282-3a21-a3bb-d9bd5772a69c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d8:06:ef:92:5c:30:7b:82:3d:61:e6:51:cd:79:e7:25:c3:
         74:50:1a:1f:04:84:6a:a4:5d:b4:e3:dd:6a:8b:1c:cb:99:66:
         03:36:0a:76:4b:ff:fb:8b:d4:a6:1e:98:36:19:55:f2:43:da:
         b0:86:e1:97:c5:4a:f6:77:c2:92:01:c2:eb:c6:17:47:2a:64:
         67:40:61:53:ba:e6:21:60:d5:88:18:96:f3:f5:4e:05:92:5e:
         13:fb:4e:7e:a9:ba:f4:d5:75:56:ce:35:73:46:dd:d6:c6:2a:
         4e:1e:d9:43:27:96:67:3f:72:ef:a9:3d:3e:be:47:70:64:8a:
         98:35:0f:49:c0:95:2f:79:e2:48:12:f8:b7:8a:80:47:e5:ee:
         fc:95:70:5b:b6:4f:15:fd:56:2f:75:99:7e:87:d0:07:54:b5:
         7f:81:62:84:71:a6:e9:5e:2f:c4:3d:b0:48:48:10:d2:a0:48:
         2c:e2:e5:43:14:ab:14:74:a0:ac:b3:f9:b0:db:9d:15:8b:88:
         8e:3d:01:c2:5a:a1:d8:d4:02:d6:e3:7e:fc:2b:ce:26:14:47:
         34:80:7a:8a:03:66:ea:f5:b8:98:62:a5:ed:38:cf:bd:29:00:
         89:59:09:61:50:db:19:d2:33:b5:f5:f3:ca:88:6a:76:21:57:
         57:ce:8d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----