Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/223a2958-f336-3d38-a9ae-eb55c83578f2.roa
File:                     223a2958-f336-3d38-a9ae-eb55c83578f2.roa (raw, json)
Hash identifier:          iCbAUCI5GV+h/1EuKpPqLRfj+iYwEVKtKvAUejPyrwM=
Subject key identifier:   B4:84:E6:DC:BC:0F:3E:95:93:EA:35:B7:74:FE:32:F0:B4:31:2D:D7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449315E73B3A0AFCC04D8B6440
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/223a2958-f336-3d38-a9ae-eb55c83578f2.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        207.164.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:e7:3b:3a:0a:fc:c0:4d:8b:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=daf7ba59-73d8-47c6-a079-68b475532874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:18:56:0d:60:9d:1b:40:a6:61:e7:a8:63:
                    8f:ce:7e:d3:bf:cc:9d:63:be:3c:ca:33:75:25:97:
                    0b:f6:64:77:44:37:d5:a9:75:1f:93:8c:77:4f:c1:
                    ba:60:21:1c:f0:e2:e7:b0:d1:05:ed:1a:e8:7b:cf:
                    9b:5f:27:52:f8:57:5e:fd:c3:67:90:4b:5c:86:93:
                    c8:9d:2b:0c:1d:ee:93:5f:52:17:41:15:f8:93:be:
                    d3:7e:4f:d1:ec:a3:64:c2:fb:d6:e9:0d:74:44:89:
                    78:ad:de:33:e8:27:98:7d:f8:ba:a1:be:89:d1:5e:
                    34:16:7b:b2:2d:c1:18:e4:05:1d:5d:bc:06:97:02:
                    1c:ed:1a:c1:6a:8d:45:6d:2f:ee:e8:5f:34:a5:a3:
                    20:e1:e7:b4:06:37:92:d1:2e:30:eb:14:04:8c:df:
                    4d:41:44:cc:30:cf:2d:35:b1:23:6c:8f:59:3a:5d:
                    3f:07:a2:8d:87:0f:3c:bb:44:41:b2:a1:a6:80:e1:
                    fc:c5:9b:ff:5e:0d:01:35:04:ca:33:00:21:c9:84:
                    1e:7f:d1:ee:be:ad:94:9e:b9:1f:c7:d5:91:0b:0a:
                    0f:11:cb:b4:4f:d3:a1:18:67:fc:54:4b:e2:3f:3c:
                    b6:84:e9:73:c9:77:7d:4c:4f:5e:bd:54:65:64:76:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:84:E6:DC:BC:0F:3E:95:93:EA:35:B7:74:FE:32:F0:B4:31:2D:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/223a2958-f336-3d38-a9ae-eb55c83578f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:16:7a:af:d2:13:9c:3c:31:42:ff:77:8b:8f:90:24:21:07:
         9e:fd:4d:24:6e:68:db:d8:e4:17:b0:8d:66:a4:a8:f5:ee:19:
         0d:74:c1:36:59:fb:0a:cd:69:2c:6c:1b:67:6f:e2:1e:43:68:
         fe:27:8f:ae:d3:27:eb:ce:3f:1d:d6:c8:4b:b2:0a:c4:46:5b:
         cc:ce:32:ad:2f:d5:35:8e:e3:75:88:24:45:30:de:df:a1:00:
         13:02:12:08:34:5f:7e:52:4d:68:7c:29:fa:95:ae:2b:04:8f:
         97:b0:ac:68:ba:d0:cb:87:10:8d:52:ad:1c:86:0b:a9:48:aa:
         a0:84:7e:dd:68:0c:43:5c:02:91:13:6e:bd:36:de:bb:95:23:
         70:29:2e:4b:6e:84:fe:3e:c6:4a:a5:5c:2a:67:8c:03:13:57:
         73:4e:a7:cd:a6:24:42:a1:b8:aa:c9:be:ad:0d:19:76:09:9f:
         71:6f:56:c4:28:ce:57:00:09:4d:f3:e6:27:29:e9:d7:93:50:
         ce:c4:ff:d6:4f:d4:1e:2e:82:5b:aa:98:a1:f7:09:10:38:83:
         2c:64:8f:8a:38:0b:ed:92:b4:6e:de:40:01:b4:fd:65:05:5b:
         bd:ea:0b:4e:90:be:d0:fe:fd:14:9f:0f:ac:67:96:2f:f7:06:
         ec:e6:35:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----