Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/7dedaa93-691e-3cfb-9d84-ab5a1852d640.roa
File:                     7dedaa93-691e-3cfb-9d84-ab5a1852d640.roa (raw, json)
Hash identifier:          w1vjLoU56bX6MAEGUBDUKsmet7S6uGbm7lb+geuOVI4=
Subject key identifier:   E9:69:BD:85:30:59:2E:5A:D3:31:3B:44:1D:C5:AE:E6:ED:EE:9C:BF
Certificate issuer:       /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial:       010D0C9F432858439FB0031605EBA104FFEB8F40
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/7dedaa93-691e-3cfb-9d84-ab5a1852d640.roa
Signing time:             Sat 21 Oct 2023 13:00:20 +0000
ROA not before:           Sat 21 Oct 2023 13:00:20 +0000
ROA not after:            Fri 19 Jan 2024 14:00:20 +0000
asID:                     834
IP address blocks:        199.7.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9f:b0:03:16:05:eb:a1:04:ff:eb:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
        Validity
            Not Before: Oct 21 13:00:20 2023 GMT
            Not After : Jan 19 14:00:20 2024 GMT
        Subject: CN=c3c3081f-bfad-48a7-a343-371454cebc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:77:30:ba:b8:f7:2e:60:fd:bc:00:5c:a4:ec:
                    dc:2d:c9:46:88:3c:9b:c0:c8:e2:5b:d6:f8:a5:72:
                    6f:00:84:79:59:5e:5c:09:60:44:17:f0:35:1a:92:
                    e2:f3:7f:d5:dc:9c:c9:ba:38:31:8d:e2:1d:44:7c:
                    ed:f3:55:ce:66:f9:a4:9b:bd:ce:87:f1:08:6f:63:
                    15:2a:13:4d:43:54:7f:e3:63:df:6e:dc:0d:b2:31:
                    03:3e:0c:98:48:b3:c4:bf:c7:b8:c8:da:8a:df:bb:
                    cf:5c:59:c7:13:21:a0:e5:79:58:88:fc:cf:b0:b6:
                    ac:35:4f:f7:6e:ba:af:88:e2:37:56:67:6a:9b:6b:
                    85:74:5f:60:f3:af:54:41:a8:2d:fa:08:cc:c7:5e:
                    cc:75:57:e9:8e:ad:3c:e6:c4:59:3a:2d:6f:2a:33:
                    54:f9:a4:94:41:bc:38:8d:df:b3:1a:08:6a:e6:2f:
                    41:34:8e:9c:64:72:f8:16:78:b8:ea:fd:c1:4a:87:
                    2e:75:fb:bf:5f:2e:8f:58:21:29:27:f4:19:55:d4:
                    10:5a:03:d7:19:28:61:8c:76:49:bc:c6:8f:85:8f:
                    90:f5:13:13:3c:21:e5:97:3b:83:4f:c1:37:31:5c:
                    10:3e:8b:b0:46:79:4e:66:2a:aa:36:1c:32:41:de:
                    46:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:69:BD:85:30:59:2E:5A:D3:31:3B:44:1D:C5:AE:E6:ED:EE:9C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/7dedaa93-691e-3cfb-9d84-ab5a1852d640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl

            X509v3 Authority Key Identifier:
                keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:43:5c:0f:2e:35:77:67:3a:6f:9e:7f:81:ae:1a:6f:b9:b7:
         e4:30:82:a7:5d:1b:25:78:60:79:c5:32:3c:33:3e:2a:0c:c4:
         26:3f:75:ee:ce:5b:a9:be:2f:b5:94:dc:c9:28:bf:93:41:47:
         a5:69:48:c7:20:99:8a:00:98:57:2d:89:95:1b:7f:c7:bd:09:
         2a:b3:aa:0a:b4:e5:08:48:7d:b7:9f:d5:ed:26:54:b0:dd:25:
         45:44:72:e2:d5:e7:d1:df:cd:4a:25:b1:f3:c1:b5:6c:28:c5:
         2c:6d:12:67:98:78:8a:9b:df:f7:2f:f3:f3:a8:61:15:b5:75:
         89:85:50:61:da:bc:3e:d0:62:9c:09:e3:c3:f7:47:38:07:0a:
         ff:23:de:8b:a7:50:cb:f3:75:5d:6e:5e:30:e6:28:6f:c8:21:
         25:88:03:8a:29:f4:0a:b8:c4:d1:86:80:26:ef:d8:b9:36:aa:
         27:2b:0a:47:3a:91:d7:11:59:be:5a:c9:d4:7b:d6:5c:45:04:
         b7:ab:f0:32:55:e3:b6:c1:f4:4d:83:e8:a6:8e:97:53:64:97:
         15:ee:44:e0:e5:e4:ee:b6:b4:6f:11:79:3d:90:92:fc:47:81:
         63:57:14:bf:12:50:ae:50:da:4d:09:ae:e7:e4:c9:cd:98:65:
         cf:0a:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----