Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bfbe7659-eaf4-3de1-82f2-8709222633b6.roa
File:                     bfbe7659-eaf4-3de1-82f2-8709222633b6.roa (raw, json)
Hash identifier:          ptobFu5cPxamThCMlb0gNYZz6uOGDb3ui08OME7UIa0=
Subject key identifier:   68:6A:94:2E:34:1D:2F:8E:97:3C:55:95:34:EC:70:3C:3A:0E:12:4C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493164835D5483ACCF433D440
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bfbe7659-eaf4-3de1-82f2-8709222633b6.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        209.226.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:48:35:d5:48:3a:cc:f4:33:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=7e2b8076-f692-492c-b554-35433bc94de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:2b:32:98:00:76:c4:96:c7:62:37:0d:cb:
                    10:7f:f0:78:56:ef:2f:0b:ae:d5:9b:69:c0:9b:11:
                    62:fc:19:cb:d5:8d:09:f0:39:bc:07:e5:4e:32:87:
                    49:95:bb:d7:e2:75:a3:a9:8a:ee:98:e9:a1:52:8c:
                    56:6a:80:1e:8d:12:54:e0:a1:55:80:8d:8f:50:50:
                    91:1a:63:1b:8e:e0:74:20:d2:0b:8b:fd:47:8d:4a:
                    ef:a6:85:fb:f6:22:77:6b:35:8e:1b:66:fe:ac:80:
                    7f:54:c6:14:31:eb:17:ec:32:ae:85:70:21:5d:72:
                    f9:cf:0f:6b:ec:94:cf:09:de:49:17:e6:0a:f2:27:
                    31:cb:12:fb:2d:b5:1b:10:0d:cb:d2:f4:2e:d1:fe:
                    64:c3:21:52:79:0f:f2:24:c6:ff:0c:39:04:97:49:
                    28:0d:22:c8:02:02:8f:39:e8:1c:45:23:eb:fa:a6:
                    5d:29:e6:30:93:62:de:34:4b:e3:de:00:6a:43:f0:
                    78:19:16:d9:a2:04:ed:0c:15:50:a7:92:8b:65:17:
                    52:0b:41:33:aa:40:c5:40:65:36:c1:17:12:e0:29:
                    ae:b5:30:6d:82:43:92:7b:5c:f3:28:b1:80:9f:13:
                    6c:08:e5:80:9b:fd:df:74:8c:c5:02:40:e4:11:49:
                    16:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6A:94:2E:34:1D:2F:8E:97:3C:55:95:34:EC:70:3C:3A:0E:12:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bfbe7659-eaf4-3de1-82f2-8709222633b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4b:fd:85:7d:af:bb:2b:15:b5:54:98:cb:e2:02:7c:00:6f:
         00:8a:a4:12:d8:c4:5e:f4:95:94:c2:ac:ed:f0:68:27:6f:5c:
         65:1a:f0:17:0c:52:84:0f:ae:30:ba:a7:8f:3f:70:f1:8a:f2:
         ce:9f:63:7e:08:bd:69:c2:10:ab:7c:54:fc:2a:88:d2:7d:d5:
         f5:f5:df:6e:42:2b:ee:35:ad:7e:2d:00:aa:3b:39:59:72:47:
         f8:4b:26:38:59:ce:00:19:7a:21:92:6e:22:88:a3:40:cd:63:
         2f:81:48:07:9b:40:b8:e3:d5:15:17:0e:5f:16:87:00:b5:dd:
         c2:f1:97:d9:a3:9a:a5:40:d4:b8:b7:f2:a9:65:cf:67:d3:55:
         ad:b3:9f:12:08:a2:ae:a6:17:48:dc:8f:b9:7e:5b:36:43:f6:
         bc:b4:92:92:56:ae:58:ab:4e:47:6a:89:e2:83:9a:5c:38:df:
         1e:f2:46:8e:64:5e:ef:12:56:43:40:20:e8:16:73:29:4f:e7:
         02:fa:ef:2c:99:d2:f9:52:49:c0:1f:e6:6a:c8:51:70:d9:cf:
         9c:b5:64:1f:1c:62:31:5c:91:59:1f:1c:49:41:89:45:03:eb:
         9f:06:72:5a:ff:80:3b:ef:18:46:49:2c:01:18:1a:9d:67:dc:
         6e:f5:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----