Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b012ff4-674b-3f2e-8c30-38a84616b26b.roa
File:                     3b012ff4-674b-3f2e-8c30-38a84616b26b.roa (raw, json)
Hash identifier:          PMVboh96fEK6IyHC5ak2kv4yzsfahOWFp86jILVtltc=
Subject key identifier:   FC:D3:F8:2B:33:EA:5E:4D:F4:56:9B:D2:C6:6B:EA:1F:E9:AB:E7:E9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D293BF2228945BD7717BB80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b012ff4-674b-3f2e-8c30-38a84616b26b.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        142.198.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:3b:f2:22:89:45:bd:77:17:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=58424ad9-391c-4251-a6b7-9f8c522897b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:84:09:d3:7c:18:de:9f:fc:5a:74:5a:2d:
                    0c:29:e1:ca:65:5a:c6:ff:e9:73:4f:bd:f3:42:ab:
                    9a:f3:2c:67:c1:a7:c4:2e:6c:c0:4e:4b:b6:ec:6f:
                    1d:99:81:20:bf:66:dc:63:ff:d2:23:11:0b:0f:b6:
                    46:fd:64:f3:7d:ba:1e:bc:fe:f7:9d:56:98:d4:f9:
                    44:7a:98:d1:3a:8a:c4:01:a4:ad:35:2e:4e:29:60:
                    ea:20:3b:37:28:c0:cb:e7:ce:42:03:a2:71:74:a7:
                    09:f2:cd:ed:35:6e:f9:19:62:cf:96:17:0c:68:86:
                    dc:43:c5:26:f9:78:e5:a7:2b:ef:97:27:db:49:b7:
                    e0:6b:51:66:6e:98:02:0a:7a:a6:19:7a:50:2a:87:
                    20:ac:3d:92:24:76:aa:bf:ba:81:41:ef:6c:ad:66:
                    77:ea:55:2e:e9:3e:cb:a4:db:fd:21:04:83:b0:58:
                    92:df:53:a9:76:5d:35:78:a3:b6:f6:e0:6f:5d:2e:
                    ba:a5:f7:36:09:85:51:a0:33:25:05:64:c4:31:fa:
                    2f:52:50:04:e9:30:80:11:02:9d:8a:e7:32:d3:0d:
                    03:c6:b7:fc:7e:d3:67:dd:d3:c5:92:98:a4:50:2b:
                    2d:c2:c3:f6:29:98:c5:e1:a0:93:18:86:3c:84:29:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D3:F8:2B:33:EA:5E:4D:F4:56:9B:D2:C6:6B:EA:1F:E9:AB:E7:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3b012ff4-674b-3f2e-8c30-38a84616b26b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.198.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:27:82:3b:50:23:de:0f:94:bc:69:37:e2:79:78:c5:62:96:
         aa:4f:87:94:1b:5f:2a:69:1d:46:fb:99:88:f9:0a:7f:c7:29:
         a3:9a:28:c2:fd:23:86:98:f1:f0:32:cb:bc:bd:d0:26:d7:79:
         e8:90:4c:15:74:0b:ec:b9:4a:30:e5:d1:82:30:54:17:6b:40:
         92:d6:cc:40:2b:c7:af:1b:77:82:fd:f1:30:a4:17:a8:dc:f1:
         89:80:40:15:99:90:07:8c:04:83:e8:42:0c:71:e4:61:39:17:
         01:a1:72:58:3e:19:a4:a1:45:a1:15:d7:49:c1:09:7b:a8:be:
         9f:85:a5:fb:b6:12:fb:85:6d:65:80:a5:76:a6:5e:a5:ba:05:
         3a:5d:df:ae:98:78:9b:22:99:b0:c2:3a:fb:8b:39:8c:62:26:
         7e:91:ed:e5:2a:55:ff:3b:e3:00:37:da:27:fe:3a:7c:24:56:
         a8:a7:5d:e1:bb:a3:5c:9e:48:22:e3:1f:ee:f3:33:e6:bd:cd:
         79:ab:75:8e:82:be:e9:2a:36:73:05:ae:83:dd:d9:dd:68:cf:
         39:2a:d7:50:5f:48:ce:5f:92:fa:fa:b0:26:15:b6:05:23:ac:
         0c:3e:5b:cd:7f:8d:cd:5b:9d:66:00:c3:66:45:42:7a:56:53:
         27:f6:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----