Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7fa5438c-1332-3a06-9169-37dbdd8b79f0.roa
File:                     7fa5438c-1332-3a06-9169-37dbdd8b79f0.roa (raw, json)
Hash identifier:          39sOzsh2PM2jQg95oPqaPB+QM8ZpNZZvPgLX6PgA2Zg=
Subject key identifier:   8D:87:81:D6:D3:71:B1:08:70:E1:B4:B6:9E:6C:42:32:DC:A9:5A:F9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493155C4A560857E0217481C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7fa5438c-1332-3a06-9169-37dbdd8b79f0.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     21552
IP address blocks:        206.47.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:5c:4a:56:08:57:e0:21:74:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=603193fc-ae18-48e1-bb5b-5487867eef01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:7b:c4:7f:52:9a:3c:35:dd:ef:04:1b:9a:
                    10:2d:a0:d0:72:73:64:70:24:81:38:77:7d:31:46:
                    b8:cb:9e:1a:a1:b8:36:50:e7:55:0a:ca:f0:75:ab:
                    90:5c:03:10:62:6f:73:bb:c2:97:aa:e5:7f:74:03:
                    d8:d1:89:bb:77:62:6d:53:13:a0:59:66:cc:84:70:
                    90:06:30:2f:2f:b3:20:c6:3c:4c:f1:00:4d:30:63:
                    db:ad:29:cb:79:72:af:60:6c:3b:7d:af:94:f1:c1:
                    c4:cb:4b:03:af:59:8f:97:be:6e:bd:1a:32:4c:ac:
                    bf:ed:ce:e0:06:81:fc:b6:f6:13:04:0b:e3:7d:26:
                    eb:ef:91:c7:0b:68:51:12:28:6a:7c:a3:91:79:22:
                    19:dc:ea:49:d3:ea:b9:ab:e8:e5:90:c9:12:91:94:
                    3a:fa:e1:e8:bb:bb:f3:71:84:9e:22:1e:82:dc:5a:
                    73:1d:1f:9e:6b:6f:67:8b:a3:77:3f:e6:ca:5f:b9:
                    4b:51:b2:d2:12:ac:4b:02:bf:e8:ab:72:57:b2:ec:
                    9f:b0:4a:da:f7:ac:7d:7b:47:c0:d0:98:8a:34:0f:
                    ee:82:00:e6:e5:f2:43:08:28:b7:c9:cf:af:37:ae:
                    b5:d8:69:24:58:8c:7e:5f:5d:c9:d7:89:f9:59:e3:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:87:81:D6:D3:71:B1:08:70:E1:B4:B6:9E:6C:42:32:DC:A9:5A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7fa5438c-1332-3a06-9169-37dbdd8b79f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:87:1c:62:d4:37:1e:e2:87:64:d7:64:8b:bd:03:51:08:70:
         ce:26:c5:ac:5a:ff:8c:31:3d:58:4a:8b:60:9d:ea:8a:e8:52:
         46:63:2d:98:bd:c2:41:9a:65:43:63:6d:e0:42:43:e1:0f:b2:
         95:5e:33:f3:db:01:9d:97:89:43:4f:32:c4:cc:c7:8c:6f:29:
         0b:30:09:97:c7:21:82:e0:8e:87:aa:7e:b0:f6:d3:53:98:57:
         65:34:f1:bc:4b:3c:29:b1:8a:49:d5:e7:12:3f:76:32:06:aa:
         ac:d0:e8:42:13:41:2d:42:65:7a:92:9e:7e:3e:6b:6f:b8:f6:
         14:98:65:06:a3:c5:ae:c2:0c:95:2a:46:5b:8a:9b:27:f9:a1:
         f5:de:0c:63:63:99:b9:54:fa:ef:35:8f:e4:4c:1c:eb:7e:ab:
         1d:f6:8f:6d:0b:0f:11:fe:f7:20:63:73:d1:05:59:84:ef:f8:
         d5:4c:67:57:af:f0:cb:20:53:a2:47:a7:7e:0f:79:fe:6e:84:
         1c:22:ae:4f:92:88:14:04:b5:44:4f:0d:b9:1c:cc:5c:44:eb:
         26:97:3c:1b:42:b8:1b:88:5c:33:7b:df:2d:5c:41:a6:99:70:
         83:90:a1:be:39:3b:32:11:10:dd:8a:a1:7c:44:ba:f8:29:15:
         49:0a:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----