Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9998faa-65aa-3ac1-b1b5-ca8996b428ea.roa
File:                     d9998faa-65aa-3ac1-b1b5-ca8996b428ea.roa (raw, json)
Hash identifier:          opppAbK5XX/pt/ofHfTN5B9ZD+Scrxqb1YV4jpwFNEQ=
Subject key identifier:   31:F9:2A:E4:54:07:17:58:1B:56:34:19:D3:18:B5:CD:5E:83:E1:BB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449315671D948065A3BEB59980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9998faa-65aa-3ac1-b1b5-ca8996b428ea.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        206.47.177.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:67:1d:94:80:65:a3:be:b5:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=f16cc4cc-e103-4170-ab9d-c6349328d880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:bc:cf:07:09:88:02:11:4b:3d:dd:4c:c2:
                    15:e0:5b:33:ef:38:ed:ca:5c:66:58:69:11:62:96:
                    36:14:16:4f:1f:f2:6a:46:ff:e7:27:cc:ae:9a:d6:
                    05:58:f8:65:22:1e:3f:1f:5a:01:fe:56:ab:ae:76:
                    1f:44:a7:ca:a7:19:69:dc:14:fe:98:24:af:e7:0e:
                    28:94:08:26:70:71:92:ca:0c:52:ba:ab:ba:53:5d:
                    f1:81:37:3b:5d:4a:9f:de:c6:e4:63:5a:89:e3:3f:
                    33:63:e2:de:f8:5f:41:f3:d2:7f:59:d7:f3:45:17:
                    bc:be:c8:2f:b9:2c:71:13:ab:a3:47:5f:3c:8e:94:
                    88:d8:b4:32:74:1d:10:f3:35:44:90:ba:5b:af:d4:
                    2d:31:60:1b:21:69:ab:5d:8f:81:56:d4:e3:62:02:
                    62:0b:38:ce:8e:66:ff:6c:53:1b:0a:7c:95:46:4a:
                    d3:22:37:a2:d1:38:2e:2c:0d:46:d4:b2:cc:94:f8:
                    a3:25:cf:c7:06:1e:ab:ed:b3:ab:97:46:68:42:f9:
                    0c:0c:1b:8a:c3:d3:b0:d5:52:85:7b:05:6e:dc:7d:
                    cd:38:6b:31:4c:76:d1:11:84:ef:68:77:9c:a3:5a:
                    ca:cd:49:00:b8:af:dc:51:dc:3c:de:a2:f9:a1:d3:
                    91:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F9:2A:E4:54:07:17:58:1B:56:34:19:D3:18:B5:CD:5E:83:E1:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d9998faa-65aa-3ac1-b1b5-ca8996b428ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:12:79:9c:58:91:74:1c:ee:af:1f:22:48:5e:dc:19:ba:
         98:6f:1c:0d:d6:3e:73:30:12:61:37:27:50:38:4f:1b:76:c8:
         1b:c4:b0:a1:7c:7e:60:4c:20:02:38:e5:a3:75:97:83:79:2e:
         c8:02:ee:13:af:04:28:6e:21:40:e5:e2:e0:ec:81:7c:82:9a:
         73:2a:6b:90:97:93:85:03:fb:e2:d8:3c:54:11:c6:c3:43:dd:
         e4:92:6b:b1:f6:24:51:44:0a:1e:02:6a:45:9a:4e:e9:a7:12:
         a5:93:ab:74:5f:89:48:1a:6c:85:33:34:7a:ea:cd:c2:19:16:
         a7:95:e7:35:9a:5e:42:be:c1:4e:7f:f4:f8:23:5c:f0:4d:40:
         0a:48:e1:c0:8a:ae:42:c3:44:8e:5c:a1:1b:7e:63:f8:1e:bf:
         1d:1f:7a:94:08:59:3c:8e:64:b7:51:5d:0a:b4:3e:b0:9c:04:
         c2:75:f1:e8:b9:f0:29:9b:13:b5:47:bc:4d:3c:65:24:d7:9d:
         82:a2:cf:24:60:20:c6:66:81:42:1a:3c:fe:73:26:4f:8f:28:
         3c:db:00:83:65:98:8b:f1:d8:2c:46:32:07:83:27:cf:d8:34:
         a6:c4:13:35:54:b4:c2:22:73:b9:a8:09:65:b1:0e:63:57:af:
         84:e2:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----