Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/f94e29c9-6694-350d-a66b-212c77dae415.roa
File:                     f94e29c9-6694-350d-a66b-212c77dae415.roa (raw, json)
Hash identifier:          UOad/HGAmrJEOp+hqNPL8H8k/JKnXDa4jKjQUpV63TA=
Subject key identifier:   AE:33:D7:FF:1C:4E:A1:D2:49:B0:2F:AC:71:B3:D1:6A:AD:49:6F:88
Certificate issuer:       /CN=7838225a-28c8-4c97-8ba3-272c018c5ee5
Certificate serial:       010D0C9F432858440F2F37577BE70563F026F340
Authority key identifier: 14:4C:2B:DD:17:84:8D:53:A6:6E:0A:BC:7F:21:DB:78:B4:31:03:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/f94e29c9-6694-350d-a66b-212c77dae415.roa
Signing time:             Thu 30 Nov 2023 11:31:24 +0000
ROA not before:           Thu 30 Nov 2023 11:31:24 +0000
ROA not after:            Wed 28 Feb 2024 11:31:24 +0000
asID:                     22773
IP address blocks:        158.51.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0f:2f:37:57:7b:e7:05:63:f0:26:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7838225a-28c8-4c97-8ba3-272c018c5ee5
        Validity
            Not Before: Nov 30 11:31:24 2023 GMT
            Not After : Feb 28 11:31:24 2024 GMT
        Subject: CN=4a7eb1b5-5042-46f2-b6e3-595bcf5ed225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:fd:f3:93:ae:86:3b:96:21:23:c4:b9:9e:
                    ca:33:f8:d1:c3:67:17:83:48:8e:e7:16:2c:01:bc:
                    59:5a:8d:2e:80:06:ef:73:ca:fb:ae:d6:7e:88:69:
                    ad:c1:a6:30:95:a5:95:b3:7f:1c:fd:f1:a6:12:84:
                    9b:b1:a8:50:f3:bd:34:21:58:a4:c2:36:30:69:21:
                    a3:51:3d:36:6b:ce:9a:c6:ff:bc:45:f6:00:90:25:
                    a5:41:07:fb:70:da:17:e9:7f:df:91:11:bb:03:2c:
                    f5:71:c8:44:43:24:cb:e6:b4:e4:ee:1f:d4:22:07:
                    87:a4:6f:1f:74:ef:26:c8:a8:fb:55:0d:ea:02:73:
                    2f:b6:1d:85:b9:7a:a9:fd:66:4d:4b:a6:71:db:2b:
                    38:ba:a9:d2:82:e9:77:de:83:59:9b:ac:9b:a8:ce:
                    14:01:f3:02:1e:a3:d0:99:6a:10:92:3d:92:71:7f:
                    86:8a:a0:bb:73:ef:0c:12:b8:4c:49:69:58:3d:88:
                    d1:a0:1e:2c:43:62:a6:b6:5e:ea:fa:cf:1d:bc:eb:
                    b4:f1:71:86:24:38:a6:a5:08:76:43:1b:f2:41:7f:
                    10:1c:3a:17:ae:50:52:66:c3:6d:e0:02:22:09:f2:
                    79:03:06:98:0e:c5:8c:07:d3:92:bb:18:75:c2:b9:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:33:D7:FF:1C:4E:A1:D2:49:B0:2F:AC:71:B3:D1:6A:AD:49:6F:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/f94e29c9-6694-350d-a66b-212c77dae415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/7838225a-28c8-4c97-8ba3-272c018c5ee5.crl

            X509v3 Authority Key Identifier:
                keyid:14:4C:2B:DD:17:84:8D:53:A6:6E:0A:BC:7F:21:DB:78:B4:31:03:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:88:93:36:d5:0b:28:6c:10:eb:5f:40:01:0e:d9:2c:61:31:
         8c:ec:47:4c:6e:4f:f0:9f:72:39:48:41:bf:06:ed:e8:c0:40:
         de:bd:50:63:c9:a8:ac:98:fe:2c:85:ed:19:6b:9e:54:c7:46:
         0e:09:32:ae:b3:25:9c:92:52:b4:db:96:19:39:78:fe:f6:93:
         63:04:4d:36:f3:19:c0:cc:b9:fd:eb:9f:15:03:de:d0:32:75:
         81:94:ae:d4:60:00:20:5c:bd:fe:63:45:17:08:3d:d0:00:95:
         83:a6:a9:cf:de:41:e9:0c:17:b4:33:9c:16:8a:a3:bf:d5:1a:
         1b:e5:0e:1f:be:42:ee:f9:6a:ef:e8:44:07:76:fd:3b:5c:cd:
         3b:bf:3f:79:ca:3e:3a:4c:13:0b:ef:8e:37:a9:73:e3:c6:f2:
         13:98:a7:54:3b:f5:9a:dc:4f:49:d7:a0:11:0a:40:24:65:ae:
         68:80:bd:97:1e:02:d8:2b:e3:85:63:a3:87:3b:0a:27:e7:11:
         0b:00:35:1e:8c:a0:8b:aa:8b:b6:af:d7:df:93:88:c1:5f:7f:
         59:a6:2b:18:be:54:78:9a:15:30:d5:73:6b:92:70:db:be:45:
         fb:37:f9:f8:14:91:87:ec:c3:1d:49:b6:cb:55:62:27:41:b5:
         fa:51:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----