Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d41add4-da97-33a1-8f10-aea36094170a.roa
File:                     0d41add4-da97-33a1-8f10-aea36094170a.roa (raw, json)
Hash identifier:          ifcIPHPJY78K0a+V4+vgZA+iIxTfFW3Fc0jmj7vcy98=
Subject key identifier:   57:AE:7E:1D:AE:DF:CB:3C:1D:FA:DC:E7:9F:02:D3:25:DC:10:CA:3A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449314392B5B5D1912ECB050A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d41add4-da97-33a1-8f10-aea36094170a.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        142.177.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:39:2b:5b:5d:19:12:ec:b0:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=2dbb0022-903f-4944-94bb-184939629e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:38:83:c6:b2:ef:2c:85:dd:2a:fb:07:59:
                    f9:a7:e6:0a:b6:62:f7:1b:f3:80:3d:78:17:cc:b5:
                    a6:be:bb:a1:91:c1:fa:81:18:d2:64:53:36:1e:16:
                    11:56:04:db:3f:6e:91:ec:26:79:1d:db:d2:f8:a9:
                    d2:8f:df:47:8e:6d:04:fb:b6:d2:97:1a:47:57:50:
                    c3:84:5f:01:9d:2d:48:88:a2:8e:ce:63:ee:de:7e:
                    5b:fa:22:d1:2a:dc:a5:12:08:53:6e:d5:3b:a0:e8:
                    27:cb:8f:0e:59:26:b5:93:65:c2:2b:0d:6a:ea:43:
                    e6:43:09:f6:53:fd:c4:83:11:35:60:a9:fa:9c:8d:
                    c4:27:52:c5:bd:3f:b9:ee:e9:50:84:60:8c:aa:29:
                    7b:19:75:79:4e:a4:ae:6f:73:db:a0:4f:4b:ff:14:
                    a2:d2:5e:50:32:ba:6c:7f:81:3f:60:fa:d9:95:fb:
                    6b:34:f8:bb:c2:66:b0:cf:29:5a:f3:53:8c:dc:7c:
                    a3:e7:3f:d4:fc:43:fd:40:4a:9e:cf:2e:f6:49:ef:
                    6d:0f:29:7c:d7:d4:0f:62:f0:03:b4:92:4d:ec:e2:
                    e4:6b:64:e1:1d:5b:cb:88:15:15:0d:ed:2a:73:44:
                    1e:fb:45:19:df:73:99:db:36:dc:b7:2d:c6:76:12:
                    23:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AE:7E:1D:AE:DF:CB:3C:1D:FA:DC:E7:9F:02:D3:25:DC:10:CA:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d41add4-da97-33a1-8f10-aea36094170a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.177.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:ef:99:df:a2:dd:15:da:67:f5:3f:1b:93:01:e5:02:ef:
         ff:6a:a2:c1:cd:6b:50:72:8e:28:7b:67:29:8e:2e:2c:6b:89:
         a0:87:41:6e:2c:12:65:72:64:b2:05:dd:50:69:51:c6:1f:4c:
         70:42:79:0a:e2:2d:08:dd:40:7d:27:3f:91:a3:c8:73:d5:60:
         57:e5:9b:cc:6a:28:55:0e:41:93:24:7e:40:01:b3:3e:fd:16:
         ce:c3:ae:1f:b5:f8:79:4e:18:ec:ed:7e:e0:6f:78:cf:dd:76:
         f3:cd:23:a3:8d:8c:d0:c3:16:c1:23:b6:5e:f2:53:cd:9c:67:
         8b:96:af:a1:2b:fc:7d:35:f2:2d:03:d0:a9:31:e8:7f:b2:a5:
         10:42:db:2f:a2:16:74:27:7d:8a:31:64:2b:75:1d:50:98:7c:
         75:63:1c:c2:d7:67:1e:fe:6d:d1:c2:37:6a:83:59:5a:47:9f:
         5d:c6:2f:bc:3b:9a:2b:be:35:44:17:d6:a8:fc:db:06:e2:c9:
         ee:97:7b:d9:76:fc:9b:c4:ca:c1:b5:ac:c9:d7:60:ce:b0:60:
         b6:c4:87:0e:63:51:77:cd:f5:17:1a:95:c3:b4:e9:2f:0d:d8:
         c5:11:8c:d6:db:75:09:18:79:ff:9a:a5:09:28:9f:1d:4c:cb:
         f9:54:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----