Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/9e9b1901-d136-3200-9535-fb3ac6161ced.roa
File:                     9e9b1901-d136-3200-9535-fb3ac6161ced.roa (raw, json)
Hash identifier:          rBkckWPY0hTOVg/UQ4vKObPNkVZO2EgiHscdAFdNpVY=
Subject key identifier:   7D:63:B4:70:E2:18:CB:95:7C:A1:E8:61:63:85:01:61:11:C4:3B:CB
Certificate issuer:       /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial:       010D0C9F4328583E8A91548AEE5D209988BC7700
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/9e9b1901-d136-3200-9535-fb3ac6161ced.roa
Signing time:             Mon 11 Jul 2022 12:00:00 +0000
ROA not before:           Mon 11 Jul 2022 12:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     61317
IP address blocks:        147.124.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8a:91:54:8a:ee:5d:20:99:88:bc:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
        Validity
            Not Before: Jul 11 12:00:00 2022 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=52be7660-75c4-4290-b7ab-f774efa3f815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bf:a0:3b:9f:97:40:92:23:73:bf:99:18:60:
                    30:bf:c4:ec:68:ce:10:a1:bf:50:d5:7c:f6:e2:02:
                    74:e6:4e:53:98:e8:4b:46:a1:2c:eb:88:66:0c:9e:
                    bd:9c:04:87:7b:b5:bd:aa:78:59:9a:ec:52:e3:3c:
                    59:86:2c:c5:84:92:bb:c8:42:aa:e1:32:a4:84:e9:
                    c6:00:e2:f5:db:4a:c3:75:2c:be:e0:fc:bf:74:73:
                    e4:d4:c8:28:ef:a1:b1:23:86:4b:cd:c7:cc:a9:d9:
                    89:fe:55:e2:ef:1f:b7:2b:54:f7:47:27:e1:74:ea:
                    04:54:6a:09:48:9b:36:08:b9:99:bf:2a:d5:b0:b0:
                    9d:9b:3c:6f:59:34:a0:58:e0:0b:d8:94:48:ee:21:
                    fc:18:35:65:1a:e9:e7:ba:77:ba:21:3a:24:33:4c:
                    76:dd:42:85:3c:ec:a7:7d:7f:40:1d:67:02:a1:dc:
                    bf:14:21:b5:4c:9b:bf:b6:98:84:6b:d5:c1:f0:d1:
                    6a:61:13:e9:cd:17:fe:75:e5:80:f5:dd:24:b5:3d:
                    aa:f9:ad:fe:2e:76:96:63:53:08:d9:fa:75:3e:78:
                    d5:30:70:6d:57:99:a1:8c:41:ca:71:15:d3:85:e9:
                    7e:e0:c3:dd:b2:4b:ed:5a:a0:00:7b:27:74:26:56:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:B4:70:E2:18:CB:95:7C:A1:E8:61:63:85:01:61:11:C4:3B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/9e9b1901-d136-3200-9535-fb3ac6161ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl

            X509v3 Authority Key Identifier:
                keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:44:fa:00:31:36:b8:93:2a:45:f3:40:a0:bf:a1:0b:06:6c:
         d3:4d:dd:c6:05:3d:5e:af:f8:13:c9:a8:fe:7a:3e:e8:58:d5:
         3f:ff:87:f5:55:9f:2c:ad:5c:59:0d:0b:ae:23:b4:b3:66:6b:
         50:75:fe:6f:b2:2a:ce:dc:2a:91:61:d9:67:f2:59:8f:2c:a9:
         e9:f7:cb:b9:43:07:1f:c1:02:ad:92:b3:5d:16:9d:b1:7e:19:
         e7:48:61:71:15:5f:5a:cd:dc:e2:b6:ba:cb:41:a4:9d:b5:a2:
         76:3a:94:f2:2c:0c:e8:d0:ab:62:d5:68:0e:e6:12:2d:91:43:
         b6:db:3c:d0:64:4c:c9:4c:70:38:50:21:d4:59:00:5a:56:63:
         b7:a0:fd:f6:76:7b:c0:fa:87:f5:82:a9:2c:f6:25:a8:02:72:
         74:d8:69:5d:2d:90:f9:86:87:67:0f:07:23:a9:9d:2d:9d:0b:
         6c:0c:c4:74:58:e7:60:d1:a0:fe:53:4a:4c:e1:07:41:cc:c8:
         d5:a9:97:82:63:7f:0a:84:e3:59:52:0b:e5:70:8b:50:ea:e1:
         bd:7a:64:84:b8:a6:f8:76:41:8b:51:8c:06:58:b3:5b:a8:2c:
         5c:27:a3:b2:c0:a0:6b:2a:83:dd:85:54:1b:13:9b:00:44:15:
         52:e9:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----