Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/229b3c12-9496-3bc1-9aff-1c6f748bb020.roa
File:                     229b3c12-9496-3bc1-9aff-1c6f748bb020.roa (raw, json)
Hash identifier:          Wns6wovO8qwQoEpi79JwaDm4c7C9ZT7fHaxF9mMGUxM=
Subject key identifier:   13:29:55:E4:50:32:E8:2F:B7:CF:2D:37:A0:D1:88:B3:F3:BB:82:14
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858430A048F8078D84F2FE9128200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/229b3c12-9496-3bc1-9aff-1c6f748bb020.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        108.170.206.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:04:8f:80:78:d8:4f:2f:e9:12:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=3f45fc92-010c-40d3-9192-69f768525b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1e:b1:67:fa:16:29:90:f8:00:f4:66:92:c9:
                    37:08:88:b3:65:a0:e3:cc:76:43:7c:60:b1:18:8a:
                    50:9a:26:e4:d0:32:1e:91:8e:00:4f:86:47:0a:cf:
                    3e:50:0c:29:b6:09:cf:2b:d0:2e:95:1a:58:14:f8:
                    c0:7e:d7:03:74:ec:45:47:d5:f4:ee:8c:93:2b:84:
                    58:4a:b6:74:49:d2:42:9c:f3:4b:b7:5c:11:86:28:
                    63:34:20:d9:c4:60:50:f3:d0:d1:88:d3:7a:8c:b8:
                    d7:09:43:e8:60:2d:87:5e:27:e6:5b:88:ac:c0:6f:
                    d0:89:70:7d:6d:54:3d:83:7a:35:1d:8c:b3:85:ef:
                    66:d8:c1:41:f5:6d:55:1b:24:dd:a7:f7:cc:eb:70:
                    02:82:c8:9b:7a:94:5a:85:5b:cb:4e:b0:9b:a4:db:
                    1f:99:6d:a2:d5:e1:75:d8:ee:73:fb:a1:46:34:d7:
                    bc:7b:8a:32:1c:dd:07:40:c4:65:5a:d2:e3:23:cc:
                    82:f4:b4:b6:71:23:b6:b4:a1:6f:fe:df:8e:15:44:
                    3f:5e:d5:24:f9:92:b3:19:e6:e9:b0:39:33:25:56:
                    a7:66:7d:a2:d8:1b:55:81:63:aa:18:9d:3a:06:32:
                    92:a4:1e:dd:cb:51:d7:4e:ca:45:ff:85:e4:45:03:
                    9c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:55:E4:50:32:E8:2F:B7:CF:2D:37:A0:D1:88:B3:F3:BB:82:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/229b3c12-9496-3bc1-9aff-1c6f748bb020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.170.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:5d:40:40:48:f4:e8:49:07:6a:df:85:19:5a:a6:1e:69:
         15:29:d6:e1:42:c4:98:83:27:eb:38:f3:69:91:44:21:43:de:
         3d:81:51:3b:6e:54:07:ff:ef:b2:52:6b:66:10:56:1a:f6:e6:
         68:26:30:e7:c6:69:c9:9d:31:92:fd:d9:82:00:17:99:80:0b:
         f4:67:ff:32:28:c1:86:ec:75:76:8f:28:cd:80:27:4c:49:a4:
         89:4a:52:d7:41:80:b2:51:8f:07:c1:5f:c5:1c:22:8b:5c:6a:
         f8:1d:53:38:46:6e:fe:5e:7f:29:89:47:81:75:9d:56:02:a2:
         2e:2a:fe:47:bd:26:07:75:a8:39:02:4a:c4:fc:bb:59:ef:36:
         f7:18:82:d7:76:9f:99:da:e9:9a:51:6f:e0:cb:31:97:ea:fb:
         a5:0a:fc:45:f3:92:34:3d:a8:16:c9:ad:ff:0e:d7:e5:2f:11:
         85:fc:7e:b5:08:3e:12:41:b1:26:ba:34:cb:e4:4e:d1:87:00:
         c2:60:df:30:75:5a:9a:6b:4f:f8:b1:9c:22:68:86:3f:19:a8:
         b8:e6:d4:0a:22:57:96:e3:aa:c4:84:00:21:78:7b:13:91:6b:
         72:1b:90:a5:94:8c:ff:54:d5:d7:1e:32:65:44:f5:14:67:bf:
         99:d2:86:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----