Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee8a8c76-ff89-3202-87ee-0b6b89b5427e.roa
File:                     ee8a8c76-ff89-3202-87ee-0b6b89b5427e.roa (raw, json)
Hash identifier:          eZt2qARQgqhbWbUZA9SyhFk9j1uHoGQNNpCAbml6BQ8=
Subject key identifier:   B3:24:E5:F2:CD:03:EE:18:63:C4:50:61:98:8A:90:6E:D1:F3:9C:E6
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493147B75D651CA151A99F4A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee8a8c76-ff89-3202-87ee-0b6b89b5427e.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        184.150.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:7b:75:d6:51:ca:15:1a:99:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=ee0d9aea-8c7f-460b-b8e7-7e20bdfeeb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:44:3c:81:76:c7:bf:9c:82:d2:cb:71:34:
                    30:a5:d0:7a:f3:da:cb:74:54:6f:07:ab:6c:b7:1d:
                    c4:f8:7f:58:84:a6:b8:a2:c8:99:30:51:d2:b6:0f:
                    ac:db:44:79:40:0e:94:db:06:09:a0:df:82:d8:7f:
                    06:e3:04:44:5b:ee:5f:4c:b2:04:fe:02:d3:1c:6b:
                    c6:e8:58:fe:71:42:37:f5:bf:db:0c:00:cf:b6:24:
                    57:a9:65:97:b2:52:5a:0f:a5:67:08:e1:ef:35:2c:
                    90:20:7d:d3:11:64:b1:fb:28:2c:a1:47:c5:33:cf:
                    e9:77:8c:a3:a3:b7:1a:ce:25:c1:9b:3f:06:cf:09:
                    77:c8:cc:a1:21:24:f6:b1:38:40:3f:64:6c:46:1f:
                    aa:1e:9f:c9:61:be:7d:f1:1f:76:d8:3d:28:f2:2d:
                    7a:eb:98:51:f6:3f:0d:e3:b6:6e:ed:2d:eb:d2:bf:
                    8c:3a:28:bd:98:b1:97:ea:75:75:7c:f8:67:a1:a7:
                    2a:fc:c9:62:c7:1d:e5:7c:c2:0f:a7:25:b9:ae:4c:
                    90:e5:d7:56:0b:45:d0:b4:1a:7d:4e:37:11:2e:9b:
                    ee:c6:91:f2:33:f1:f1:da:7a:ad:70:81:20:77:1d:
                    2d:57:f8:63:77:5d:9a:c4:44:af:19:51:9e:71:ea:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:24:E5:F2:CD:03:EE:18:63:C4:50:61:98:8A:90:6E:D1:F3:9C:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ee8a8c76-ff89-3202-87ee-0b6b89b5427e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:bb:8e:33:f7:29:a1:51:0c:e3:cf:84:8f:f0:0f:82:e7:6c:
         85:07:41:d2:87:2e:36:f3:e9:25:04:fb:19:00:d0:9f:7c:7a:
         8d:df:6e:bf:66:db:97:62:df:d3:29:31:10:fa:36:0d:f2:c7:
         a3:21:1f:e1:a5:79:6f:d1:9a:f3:fb:f3:80:f2:f9:87:56:7b:
         0a:23:ae:72:fa:29:ae:5c:c1:5a:51:6a:54:0a:a7:3b:01:52:
         58:4b:78:80:44:35:cf:49:8f:e6:f1:eb:d5:9c:88:c8:cb:d3:
         e3:82:5c:85:51:10:09:88:ef:59:2b:68:13:8c:be:1c:f4:c0:
         b9:bb:39:5e:06:90:08:f8:63:e3:5c:94:a1:5c:64:16:10:80:
         f4:c2:e0:a3:83:a5:6d:fd:ed:3a:24:a6:38:f9:6c:48:e4:80:
         1d:63:da:48:ae:49:f1:b7:e5:88:ce:41:1e:2f:5d:5c:15:5f:
         53:ef:4b:2f:67:84:1f:b2:d7:0b:dd:59:06:c8:1a:73:62:e9:
         d0:18:33:f6:1b:31:76:e9:43:41:91:b1:da:9a:67:a7:bc:ba:
         e0:74:33:d7:2e:bd:d8:e1:b4:54:14:02:a0:68:ee:78:81:10:
         d6:a9:be:3f:a2:32:d5:0f:eb:0e:e1:18:59:0b:cf:d8:45:b4:
         c8:d5:ea:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----