Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/142f6264-76b5-3787-be3d-349932d6df8a.roa
File:                     142f6264-76b5-3787-be3d-349932d6df8a.roa (raw, json)
Hash identifier:          gYQqKAaWZc7kXoV6vZskG1U38sXzo1P2V+2onpOKN9I=
Subject key identifier:   0F:60:E3:0C:CE:81:45:2A:20:74:02:C1:CC:32:E7:94:2C:2B:EB:16
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE5FA542AD6496F8360F600
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/142f6264-76b5-3787-be3d-349932d6df8a.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     29907
IP address blocks:        216.6.192.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:fa:54:2a:d6:49:6f:83:60:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=fc1ef339-95a2-4fba-9f66-c4082ff39c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:8e:9c:3f:57:dd:ac:45:b7:5d:e4:f5:f5:
                    ab:25:3d:fe:78:26:7f:c1:56:3a:51:54:73:65:47:
                    e9:86:73:ad:17:04:d5:8e:06:f2:5c:0a:a6:0c:aa:
                    13:24:18:21:01:bc:8e:4d:e8:a4:e4:dd:6d:4f:c9:
                    08:ef:6f:e9:c7:f7:41:12:49:e4:3b:4d:71:c4:ba:
                    dd:d2:8a:35:f3:a8:e1:f1:07:0e:be:9c:0e:13:23:
                    82:15:0a:a1:8e:eb:73:44:e3:6e:b7:a3:d6:2e:e7:
                    70:45:7b:3e:42:76:46:a0:36:39:6f:98:0e:20:ab:
                    ac:ad:2d:29:23:7c:41:a9:0a:25:45:e1:55:cc:a5:
                    7a:c7:dd:9d:95:c5:91:94:e0:5f:d1:90:f9:08:e3:
                    81:a5:ee:4b:30:a9:35:ea:ca:b0:a1:db:42:35:9e:
                    17:54:2d:74:14:94:30:05:cc:26:85:05:59:0b:d5:
                    65:32:d0:64:89:88:64:89:4e:c9:ad:28:cd:67:5c:
                    87:d0:5b:c3:23:c0:bf:d2:33:79:2c:0e:94:4f:4c:
                    e8:f2:e5:f9:c2:f2:fb:30:d4:5d:4b:72:b7:a5:f4:
                    c5:6a:e1:f6:45:57:b0:7f:44:b8:d6:34:e0:f6:c0:
                    3f:13:ce:8f:0b:06:c1:80:53:14:24:6a:68:84:36:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:60:E3:0C:CE:81:45:2A:20:74:02:C1:CC:32:E7:94:2C:2B:EB:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/142f6264-76b5-3787-be3d-349932d6df8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0b:4f:30:c9:00:49:66:4c:4f:09:0c:0d:68:db:de:22:dc:
         0a:41:fa:be:56:b6:09:fe:ed:84:79:3b:33:29:22:fb:11:0e:
         da:8a:d4:50:ff:8f:6d:fb:77:c2:6b:5b:23:52:a7:bf:b5:3e:
         d1:25:af:0d:a7:64:86:55:e2:c7:89:16:21:ad:61:7d:69:e7:
         6d:e7:63:d8:a3:20:cb:b0:57:1b:50:10:fb:47:79:93:88:df:
         98:70:3e:3c:48:3a:93:0c:28:c5:77:82:e3:b7:7c:a6:c5:bb:
         bd:fb:46:51:9f:85:6a:89:f4:89:51:16:e7:64:98:fb:9e:de:
         30:e0:86:36:36:bc:17:9b:85:ea:da:4c:28:02:61:32:ae:d9:
         36:24:ee:46:a2:ed:74:d5:29:a9:a8:9f:21:4e:b4:e1:69:96:
         cf:10:2a:d4:64:6b:36:cf:26:1a:f9:c3:76:3b:1a:e0:a7:59:
         a3:27:e2:d2:ba:05:ae:7d:18:69:4b:e6:f0:a1:41:30:46:13:
         7a:28:74:61:bf:78:b4:ef:ff:74:ac:20:99:7f:a8:2d:d9:88:
         c7:64:a9:4b:28:52:72:3f:cb:72:b8:c9:fa:ec:51:0f:d4:13:
         74:07:0b:8c:f2:f3:dc:bd:5f:f2:9b:e9:d9:41:9a:a6:36:99:
         fd:29:00:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----