Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/cd04f539-141d-39f7-b597-42713d911aec.roa
File:                     cd04f539-141d-39f7-b597-42713d911aec.roa (raw, json)
Hash identifier:          2k25x7BFavAZ2fiFI9yutnC7tuDkZ911dU54zSXFrHs=
Subject key identifier:   6E:F8:13:1E:C7:88:7F:D1:34:C6:9C:53:56:2D:22:69:06:D2:6B:B8
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F43285841E44735D6AF18B001E8D52900
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/cd04f539-141d-39f7-b597-42713d911aec.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Sat 17 Jun 2023 08:08:29 +0000
asID:                     33392
IP address blocks:        199.19.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:35:d6:af:18:b0:01:e8:d5:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jun 17 08:08:29 2023 GMT
        Subject: CN=714560bd-aa76-47af-b4e9-21f21d32d033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:17:b3:6b:6f:02:94:e3:36:fa:06:73:19:
                    03:f1:08:a6:99:5f:5d:97:7b:48:34:86:cf:7e:72:
                    a8:39:9d:67:fe:f9:60:22:de:41:83:1f:ff:d9:f9:
                    09:d0:b4:52:ae:a8:7d:a8:53:df:bc:2d:e2:d3:11:
                    99:36:3b:64:d0:9c:ba:f6:c8:61:f1:03:23:1f:79:
                    0e:aa:6b:af:28:64:66:f5:05:87:03:eb:48:2f:9f:
                    42:6a:5d:3c:71:80:1c:fd:ec:c6:30:d4:94:87:16:
                    9b:b5:23:47:35:6c:df:b3:30:37:7a:27:f6:e7:f4:
                    a0:2a:3b:c9:32:58:26:75:ed:ab:a7:7f:f4:1c:38:
                    44:5c:5c:15:1b:30:22:fe:38:38:e1:ca:c7:5d:9d:
                    e3:58:f0:b4:88:db:de:41:d0:21:f8:8e:88:fa:fd:
                    f9:c9:bc:5a:64:4f:72:73:71:f7:fd:23:db:ea:b9:
                    40:26:88:b7:62:80:2a:94:c8:e8:ae:1e:ba:b8:fe:
                    f7:62:3b:ef:3e:73:e4:91:2c:80:33:d7:22:2d:bd:
                    76:aa:c5:2e:78:48:ef:8e:cf:c6:22:e3:36:98:61:
                    6a:7e:7c:ff:24:2b:90:e1:91:1b:c4:63:e3:d6:3b:
                    7d:6a:b0:c6:6b:5e:90:cf:18:bb:22:3f:e8:f8:f2:
                    7d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F8:13:1E:C7:88:7F:D1:34:C6:9C:53:56:2D:22:69:06:D2:6B:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/cd04f539-141d-39f7-b597-42713d911aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.19.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:47:0f:af:04:04:7e:f9:e7:62:d9:c6:83:ec:87:4a:87:42:
         d5:5e:09:d9:75:43:c5:31:ae:dd:b5:80:be:df:6a:13:4d:15:
         ce:32:12:42:0c:d3:13:78:a2:cc:ee:88:69:34:d7:18:cc:da:
         3d:e9:d4:41:ba:7f:83:17:c2:39:1d:22:b3:20:51:5a:c1:70:
         1b:8b:75:b1:57:ca:c9:fc:e0:65:74:9a:e5:c8:a6:c2:a1:87:
         5e:31:0b:ee:13:33:75:ae:11:cc:fd:58:36:bc:60:b1:fa:65:
         4d:73:1d:ae:14:43:9e:80:0f:6e:6f:77:86:c3:9c:6d:da:9e:
         df:4f:75:ad:e3:cc:08:13:34:87:6b:74:45:a2:bc:a6:9f:11:
         95:90:b9:6e:6c:d6:33:12:e1:e2:83:2c:07:8a:ca:e3:0d:1b:
         f9:19:c6:32:fc:6c:1f:f1:4f:26:aa:2f:21:e9:4b:93:98:46:
         a3:b5:55:c3:43:32:0f:e8:8b:83:aa:17:40:cd:71:4c:78:6c:
         02:85:d0:89:ed:01:b8:70:2f:d9:37:e9:8d:80:01:24:89:fe:
         40:48:c7:ab:7e:d2:2c:0a:1d:e8:b8:b7:c7:30:07:4f:ef:ec:
         6e:d3:2e:7e:a8:79:7b:a5:4a:b0:f9:a8:71:24:9b:63:b3:60:
         cf:af:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----