Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5759125c-bf60-39e5-a263-3e81d2c5364b.roa
File:                     5759125c-bf60-39e5-a263-3e81d2c5364b.roa (raw, json)
Hash identifier:          NK8BD7DynRQZb1Dm7QDklI9Sc3bUmPBIZAEvUjbszi4=
Subject key identifier:   33:9F:67:21:1C:E4:CB:D0:8A:8C:66:03:1A:BB:00:13:A1:6C:A1:E0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285844931422884CAE45AC0073A560
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5759125c-bf60-39e5-a263-3e81d2c5364b.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     855
IP address blocks:        142.134.192.0/20 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:22:88:4c:ae:45:ac:00:73:a5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=218bfd3c-7bdc-400b-aa9e-bb7a804f8e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:d9:40:d3:15:8f:a3:1e:da:8e:98:81:4c:
                    da:34:f1:f6:06:80:5a:81:4b:c9:48:10:bf:22:05:
                    23:a8:a1:d8:6a:53:d7:37:e6:b2:a9:cf:64:1b:8f:
                    64:6b:74:1c:70:ad:b9:ef:3c:3a:04:84:df:0d:fb:
                    7e:b0:d7:28:d2:80:4e:23:c7:0b:69:53:2a:25:54:
                    21:b7:49:1e:5f:57:02:0b:b7:54:52:89:80:2d:67:
                    28:19:6e:63:44:3d:c6:14:76:1f:bd:19:38:21:4a:
                    e7:ff:6c:33:86:cb:ae:e6:33:98:73:29:5a:aa:1a:
                    28:86:0b:0e:f3:7c:d5:05:55:31:71:5c:f9:7f:13:
                    40:95:61:76:a6:41:8f:29:63:99:60:54:f0:96:d4:
                    45:6d:bf:a1:79:43:8d:1e:20:69:10:a6:8b:d7:eb:
                    a6:0c:69:7a:ac:4d:8b:84:fe:54:de:6d:db:e9:7f:
                    3d:55:54:f8:b6:e5:c9:e7:3d:b2:41:ed:e6:4f:28:
                    13:f1:c3:ff:97:62:73:7e:10:68:c0:5a:14:be:c8:
                    29:1c:61:53:f0:72:a3:f8:ae:09:95:27:a6:38:5b:
                    fb:e6:94:3d:f5:39:0c:f6:0f:f3:52:e1:92:6b:4b:
                    19:c0:f9:7c:52:01:02:26:4d:f3:c9:5d:bf:07:f3:
                    05:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9F:67:21:1C:E4:CB:D0:8A:8C:66:03:1A:BB:00:13:A1:6C:A1:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5759125c-bf60-39e5-a263-3e81d2c5364b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6e:ae:49:26:7f:d5:1e:67:a3:25:4e:88:7f:0e:38:d8:2c:
         af:d6:e0:b5:e4:ed:6d:d3:b3:1c:a7:6b:ff:31:01:51:cb:c1:
         3c:17:0d:ee:f2:dc:42:d8:ae:5b:bc:94:55:3e:2b:f0:17:e8:
         2b:8d:6f:0e:0a:9c:9a:92:43:ec:1f:76:e8:3e:16:f3:4c:a7:
         49:95:17:02:30:83:91:ee:37:30:55:ed:c0:d9:a4:95:4f:51:
         07:28:89:45:5c:3d:08:a2:fc:40:ab:28:c4:43:04:c1:e3:49:
         74:e7:60:91:d7:1a:49:88:92:9d:cd:8b:1c:c9:de:ec:ac:76:
         a1:38:8f:44:47:7a:1b:58:df:06:62:47:d1:53:f1:54:e3:ed:
         76:25:c5:39:2f:05:02:89:65:96:13:d4:4b:72:60:d7:94:93:
         84:2c:24:fa:9a:f4:7e:87:c8:78:06:f7:47:eb:3d:d3:75:cb:
         a4:3a:31:91:da:1d:62:f2:2d:db:77:c0:30:6f:d7:4b:72:8d:
         07:98:53:60:59:7e:28:31:e0:02:70:fa:46:7b:e8:84:05:42:
         66:99:9a:d8:54:7e:1c:39:83:62:d9:84:9c:75:0a:e7:36:5c:
         13:b4:9a:b3:ec:55:16:f8:88:9b:20:34:0f:9a:e7:eb:96:98:
         d5:0b:d5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----