Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43c52810-574c-3f37-bc07-e6ae6e9952c4.roa
File:                     43c52810-574c-3f37-bc07-e6ae6e9952c4.roa (raw, json)
Hash identifier:          jG9OXiyI3wI6/YYhBIvdcHN1gj/u8I2D9Uf8vvz6qIg=
Subject key identifier:   85:FB:DB:F4:A9:B2:11:11:18:FE:E3:D1:1D:D9:45:D4:D1:E0:DC:1C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B572B4A3E54800E7C2BC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43c52810-574c-3f37-bc07-e6ae6e9952c4.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     30336
IP address blocks:        209.226.169.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:57:2b:4a:3e:54:80:0e:7c:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=440d605d-fc8e-4d71-a31a-e181602e149d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:49:1c:6c:77:6b:63:b5:60:d1:4e:01:99:2d:
                    c8:20:2c:ba:af:e1:99:21:13:7c:4c:f6:cd:21:7b:
                    8b:e4:69:2a:1d:d6:64:74:12:2c:5f:8a:b8:97:23:
                    a3:ee:3f:de:c0:16:b7:ad:92:75:78:7a:d7:c7:95:
                    76:eb:4a:76:74:4a:2a:fe:1b:e4:c3:01:e4:31:83:
                    ce:4f:fb:8a:bd:9d:08:f6:a7:85:55:86:8c:fc:33:
                    82:70:98:fa:69:61:da:c7:7d:86:0a:5d:47:23:59:
                    3c:e8:b2:06:7a:22:11:ea:b0:66:ca:e4:cf:37:0a:
                    b0:ef:5f:e8:02:8a:3a:ee:13:bf:b2:cd:93:98:d7:
                    d1:db:ad:ea:32:64:a7:4a:95:37:d2:00:35:3b:15:
                    48:4c:71:af:57:5b:6e:9e:2b:27:9a:91:b6:75:61:
                    16:63:3d:cd:f6:0c:43:ff:23:65:22:b0:7f:ae:09:
                    96:79:9c:4a:af:7b:6b:7c:bd:75:4a:d8:ce:92:6f:
                    62:13:6e:70:8d:13:81:9c:93:a4:b0:82:28:44:55:
                    d1:a0:3a:c7:11:2b:9d:5d:14:98:a9:3d:95:83:51:
                    f0:a5:06:3a:06:f7:61:d9:84:63:4b:63:d7:1e:52:
                    12:cd:72:d4:47:6a:e8:a3:74:91:44:3b:f5:8e:6e:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FB:DB:F4:A9:B2:11:11:18:FE:E3:D1:1D:D9:45:D4:D1:E0:DC:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/43c52810-574c-3f37-bc07-e6ae6e9952c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0a:ea:b7:6d:cd:a2:1b:d3:65:26:29:53:05:e3:ff:c8:c2:
         e9:28:7b:70:1e:c9:f3:5a:68:f9:0b:d0:9f:79:f1:e0:36:e1:
         28:2b:6e:64:fd:7b:e4:72:64:d0:bc:17:20:15:78:c0:a1:97:
         4e:9b:d2:7a:37:e4:15:b9:93:07:53:22:a6:aa:d9:ec:77:14:
         c9:2c:03:41:5d:f0:26:f2:20:c7:3a:45:b4:24:d4:57:86:d0:
         72:51:a3:16:be:26:ad:cf:52:01:a7:6a:db:05:d7:68:95:2c:
         17:2d:fc:79:c1:8e:41:ac:21:6d:27:dd:9c:07:ed:af:04:8b:
         5f:8a:71:11:db:da:3e:62:e9:f9:d6:10:2a:79:3a:66:2e:e8:
         c5:47:cf:69:8e:60:a5:ed:19:6a:12:af:1b:a5:40:5d:67:29:
         19:3e:6a:89:84:f6:89:d4:cc:ca:d1:b8:24:92:87:ea:01:1b:
         b8:35:27:55:c0:4f:80:14:71:d6:21:ba:24:d3:a0:74:3c:4f:
         77:5a:23:61:32:9f:f3:95:7e:7a:ff:e3:27:1d:06:30:83:15:
         c8:38:36:0e:84:15:6b:28:4a:61:88:fe:f0:95:49:67:40:0d:
         f6:92:0e:04:eb:18:89:b3:96:51:38:a7:e8:d8:6f:d2:1f:28:
         40:29:61:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----