Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01400318-06d7-3a5c-8886-636c1a08421a.roa
File:                     01400318-06d7-3a5c-8886-636c1a08421a.roa (raw, json)
Hash identifier:          DlYVROCMbh5HJoyYRDctFqQgAJPEFJiDg4NyuW1dGII=
Subject key identifier:   63:BA:F1:A7:BF:61:89:D3:E5:70:7D:02:B6:ED:4E:71:BD:C9:62:30
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449316A2E3B095DAF396F43100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01400318-06d7-3a5c-8886-636c1a08421a.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:a2:e3:b0:95:da:f3:96:f4:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=e3f1faf9-e286-4dff-bced-56a6742a7ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:b0:2c:d1:3d:f0:1c:09:1e:4b:e2:f2:39:
                    06:f8:b8:76:aa:53:6f:69:dd:7b:b4:35:76:37:18:
                    24:16:1b:6f:b6:87:51:f4:6d:9e:8a:80:c9:23:a1:
                    e9:32:cf:23:a7:a4:47:ac:ad:c3:13:59:ef:50:3c:
                    3e:70:d4:37:ae:8f:2f:e4:c5:b7:9a:d2:7e:df:07:
                    e9:8d:31:52:51:04:d0:bd:d4:d9:89:e4:9b:d5:f6:
                    15:66:a2:ca:d7:a6:5e:3a:e5:c4:bd:79:28:19:68:
                    51:96:8e:c3:a4:ee:6d:0b:df:92:e4:fc:34:10:38:
                    e0:cd:54:a4:33:a8:04:d5:33:aa:2f:39:df:1c:22:
                    ab:9c:d4:3f:9c:1f:02:a1:d5:7c:08:55:cc:03:ed:
                    b9:b9:45:b2:4e:74:e5:b8:00:68:e2:2b:f4:73:ce:
                    30:2d:15:3d:26:da:8d:f9:f8:ab:3e:c7:4e:45:c6:
                    47:c5:f7:e7:a7:2a:0b:5c:89:f8:28:b3:23:91:1e:
                    e5:27:20:a7:5e:a9:8f:47:aa:64:bc:78:2d:59:d5:
                    a0:56:7e:10:e9:5e:3b:de:1c:f3:7e:90:e0:2f:2b:
                    79:ed:af:33:2e:45:b6:e8:9f:7f:4f:2a:e6:60:84:
                    6e:a5:ff:2e:86:d5:fe:ba:36:b6:fe:1e:ab:44:2d:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BA:F1:A7:BF:61:89:D3:E5:70:7D:02:B6:ED:4E:71:BD:C9:62:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01400318-06d7-3a5c-8886-636c1a08421a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b9:3a:39:cc:a0:98:c8:c6:f8:2a:01:fb:59:ab:42:7e:5d:
         90:11:e3:a6:8c:91:66:9b:5e:3d:14:f7:05:6e:b3:9c:ae:bf:
         fa:cb:b5:cb:a8:a6:dc:36:7c:3f:f3:d3:4e:34:d2:39:59:4b:
         0d:97:46:df:95:88:a5:fb:bf:6b:ff:66:1c:d4:ea:33:e3:88:
         f2:6e:82:f7:51:2d:ed:fb:f4:b1:d8:b9:60:43:53:30:bd:85:
         32:4d:d9:8b:23:47:27:56:ec:cb:1a:31:ac:22:09:cc:69:9e:
         0e:2c:86:d9:1d:c6:cc:cc:17:3e:e4:24:d5:7f:16:56:47:62:
         bb:61:e2:60:ef:aa:b4:f4:25:1d:d1:5d:ba:f3:76:47:d8:23:
         c7:1a:15:0f:5b:08:63:b5:4b:f6:89:6a:fd:f3:fb:f1:46:d0:
         15:e5:91:26:7c:18:6e:9a:94:e4:90:c7:b9:b4:48:10:31:95:
         e8:18:44:62:71:db:8b:55:7e:21:9d:56:5d:5a:61:39:c3:e7:
         24:38:1c:ad:bc:bb:5c:38:9f:ee:1c:13:a0:70:ef:da:92:4c:
         3c:82:1c:8f:8b:e2:f5:d0:d2:b5:e7:2f:65:eb:90:1d:bb:e5:
         1e:80:a9:13:06:46:44:32:33:de:53:0e:81:8c:0d:81:00:52:
         22:a9:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----