Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c0cfe67-a8c8-318f-baf4-90d76d94e50f.roa
File:                     0c0cfe67-a8c8-318f-baf4-90d76d94e50f.roa (raw, json)
Hash identifier:          tw085jkAprmT7YfDNWm6tf/6H0QbXYjOf6PMh6YqmlU=
Subject key identifier:   02:81:E8:7B:F7:17:06:38:C8:CF:08:94:2A:A5:DB:85:B4:59:70:EE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493167B7D5AA65F0ADC273100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c0cfe67-a8c8-318f-baf4-90d76d94e50f.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        216.6.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:7b:7d:5a:a6:5f:0a:dc:27:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=d4981562-741e-458b-b9ab-e0312dba2638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:64:c1:e5:86:f4:bb:2d:d9:81:eb:94:68:
                    24:26:72:6e:39:65:91:49:62:72:09:93:af:c9:ad:
                    e4:9f:0a:df:5a:eb:a2:2d:3a:07:d6:b5:3a:7c:b8:
                    c0:8e:cd:ba:be:d1:70:99:9b:e5:60:14:18:a7:50:
                    80:99:25:05:a3:f6:1b:8c:0a:eb:2c:5b:f8:08:fc:
                    f4:8e:3b:47:8a:5e:b9:da:e2:29:e7:0a:9a:c6:7b:
                    25:35:3a:26:6d:51:a8:4d:0a:6b:a6:60:0e:b6:bf:
                    40:dd:67:ab:69:7b:bd:b9:46:0d:5c:46:55:aa:28:
                    a6:fa:15:2e:92:c5:8e:2b:00:e6:d9:6e:e1:d7:f4:
                    71:fc:24:22:c9:6d:e6:80:16:eb:7b:53:4f:59:3a:
                    9c:89:b0:e4:12:50:f3:11:0c:6e:f7:46:9a:1b:dc:
                    eb:cf:06:00:b2:c5:ab:f0:5f:e7:a8:8f:cb:69:6d:
                    c0:be:f1:7d:1c:6a:39:6b:75:d2:2c:17:71:97:42:
                    df:4b:50:90:f8:fc:ab:8e:55:36:94:5f:43:cb:c9:
                    a0:f9:35:16:bb:0f:d5:5f:7b:36:96:6e:8b:6d:bf:
                    a8:49:bb:ab:95:dc:f7:76:a2:56:f5:da:08:b9:d7:
                    8d:ab:22:b4:90:cf:f5:5b:2a:d9:67:6a:72:6f:ae:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:81:E8:7B:F7:17:06:38:C8:CF:08:94:2A:A5:DB:85:B4:59:70:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0c0cfe67-a8c8-318f-baf4-90d76d94e50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:fc:3c:ee:8b:b6:c3:8f:70:81:f4:ab:40:1d:bb:21:df:2c:
         2e:e2:85:93:97:df:23:da:fe:0f:7d:06:67:bc:19:59:78:1f:
         99:49:5a:d6:9b:65:3c:a2:ee:b2:cd:84:44:14:ec:74:25:bb:
         59:b4:f6:9e:ab:64:f4:0c:b1:7a:27:6d:5f:52:c0:29:a7:fc:
         74:75:8f:3a:85:de:c6:9b:4f:0b:da:89:65:36:80:ff:58:53:
         14:7e:00:ab:48:ca:58:87:fa:20:1a:69:63:96:53:35:2d:91:
         31:82:32:35:7e:b5:31:1e:f8:5c:75:56:ac:a0:30:a8:09:2a:
         5f:0b:1e:16:fa:84:9c:d0:cb:b5:ad:d7:78:32:12:1d:5d:47:
         30:80:37:8c:fd:ed:d0:2a:8a:bc:e6:28:b0:f3:ee:d3:00:17:
         fd:4d:f0:7e:1c:1e:e1:90:e2:05:d5:d4:1a:04:9d:3b:0c:03:
         b4:99:0e:24:b9:30:a7:1d:ae:ad:58:19:3a:87:4a:c3:59:1c:
         2a:5c:f9:63:d5:2f:a7:66:a0:45:1e:9c:0c:ea:5e:c0:59:e0:
         27:c2:da:00:41:ab:9d:ca:3a:01:51:e1:81:df:52:7c:37:54:
         71:3d:c6:58:f2:63:f8:be:27:dc:ab:3a:9e:7c:cf:38:5e:ff:
         41:07:a2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----