Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/388f38dd-e7f0-3414-8eb1-88c338c3b424.roa
File:                     388f38dd-e7f0-3414-8eb1-88c338c3b424.roa (raw, json)
Hash identifier:          32zDzJdyJce0QuZezBsEadYAds3AdS8AUkIs0imt5SA=
Subject key identifier:   0D:E8:F2:B2:4C:26:72:5B:87:F8:30:D2:63:8C:E3:87:0A:F4:87:35
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449314D1B25A6221023F108680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/388f38dd-e7f0-3414-8eb1-88c338c3b424.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     12132
IP address blocks:        199.243.253.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:d1:b2:5a:62:21:02:3f:10:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=5c86e923-2f25-45d3-b99b-6ab61bafb7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:a4:76:94:8d:31:a7:25:90:2e:3d:fc:72:
                    95:79:27:57:23:c3:b1:a9:40:dc:2c:9c:92:7e:55:
                    7c:d3:2e:d5:dd:99:8f:17:3f:46:d9:bb:de:0c:23:
                    0a:6d:b7:84:8d:6b:aa:c7:e1:4b:4b:94:71:93:09:
                    1c:b0:d3:b8:29:54:85:99:97:47:1e:1f:f2:85:e8:
                    96:ec:53:2e:34:ad:38:ea:e9:9f:9c:32:ac:a1:4b:
                    6a:6c:06:b4:1d:59:2a:ad:d0:db:d6:45:36:35:ed:
                    ae:b9:02:92:47:68:45:9d:51:35:0e:da:d2:6b:bb:
                    c6:34:8d:a3:0c:46:b1:78:1d:d1:c1:88:ce:59:b3:
                    cd:dd:93:33:b7:9b:14:0f:91:b0:28:ed:f5:f7:6a:
                    e5:09:19:f8:14:66:c7:eb:cc:b4:31:71:08:b9:b5:
                    30:d8:90:1d:71:65:44:74:93:ad:81:07:d8:e6:8c:
                    aa:54:92:36:3d:d2:b0:b1:6d:01:80:ba:a2:de:3b:
                    5c:81:79:93:e0:ee:58:04:c2:26:9c:52:3b:c0:a3:
                    b7:c6:1b:5a:67:f1:cc:0a:dc:d6:a8:b8:5e:3e:95:
                    75:b5:fa:d0:9e:37:5c:d7:c9:2c:72:bb:9d:40:c6:
                    7b:73:ba:9c:7a:b8:df:67:35:f4:45:d0:fc:19:45:
                    c8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E8:F2:B2:4C:26:72:5B:87:F8:30:D2:63:8C:E3:87:0A:F4:87:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/388f38dd-e7f0-3414-8eb1-88c338c3b424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.243.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:94:13:31:ab:f4:30:4e:22:5f:06:2b:ca:0f:74:64:40:7d:
         73:a9:59:25:d4:cd:65:21:d2:12:db:0f:7f:b3:fc:fb:cf:5d:
         f5:e9:bc:4b:6a:53:c4:47:7a:b1:7a:df:69:20:a5:2a:5d:56:
         53:ec:02:ee:49:b8:4f:c8:66:46:55:76:16:eb:56:db:f2:ef:
         ff:85:76:1e:dd:c1:5b:bc:d7:cc:d8:a0:97:da:e4:2f:26:dd:
         20:0f:8d:b9:a2:56:bd:d5:fd:f2:89:ce:7d:8f:b6:a7:4e:dd:
         91:3c:62:e6:0f:58:90:26:1b:82:d3:04:f9:7d:c2:56:de:bd:
         49:4f:41:d2:8b:ae:56:fe:b8:51:8b:8f:fb:96:9b:0a:da:7c:
         51:f5:25:e0:04:55:d4:dd:81:88:47:03:7e:66:b2:6e:c6:ab:
         4b:41:46:ad:e1:23:26:31:68:95:91:76:af:e5:86:6c:32:37:
         b5:3a:ae:5f:c0:84:4e:84:5c:6e:96:fa:a2:24:79:d3:e0:41:
         ef:f8:dc:bc:f2:ba:09:62:2c:db:d9:39:5b:36:64:86:16:30:
         2a:dd:4a:39:0b:d5:fd:e7:93:d4:41:a2:49:d6:64:9a:3a:b3:
         8a:83:f4:f0:d2:0a:a9:ae:93:a8:48:12:ff:ae:8b:12:ac:53:
         c4:70:e8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----