Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65ea4730-7cd2-36d1-88e8-6261b56094b6.roa
File:                     65ea4730-7cd2-36d1-88e8-6261b56094b6.roa (raw, json)
Hash identifier:          Jlvd4SIwdeR0IiFacf4tA/ALINtouXyowKffnbf6EiU=
Subject key identifier:   6E:96:51:B1:E9:D1:D4:6B:B9:51:E9:97:70:7A:E1:11:86:3B:D2:57
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449315854036C21AB913AA5200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65ea4730-7cd2-36d1-88e8-6261b56094b6.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        206.172.10.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:85:40:36:c2:1a:b9:13:aa:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=5ef07078-202e-41ee-b6f8-e1f529a19e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:af:88:71:3f:91:6e:08:12:52:e8:b9:9a:10:
                    ab:f9:f8:a3:1d:4b:c5:95:4b:8d:3a:8b:1a:eb:46:
                    3b:4e:34:7f:69:1e:b5:0d:9e:2d:4f:4c:ea:88:9a:
                    f9:8a:c8:fd:35:ad:71:03:ad:4b:d2:8d:9c:19:4f:
                    90:18:72:04:0e:98:50:7c:e3:b7:94:8a:ca:db:20:
                    5e:fe:e4:77:97:22:04:ae:0d:c6:13:4e:6c:8e:14:
                    e1:f8:1b:d4:cf:e8:24:d7:28:4c:ee:d4:10:7e:f3:
                    e8:3d:6e:15:a0:0f:11:f5:cd:a1:1c:86:e8:ae:8d:
                    6f:a2:12:7c:3e:29:39:6b:88:ba:7f:c1:7d:d3:18:
                    e2:b4:67:88:51:ae:50:86:3a:69:f7:3b:f8:41:a5:
                    07:46:1d:e8:c5:22:42:4a:ab:f9:6b:d3:4a:12:2c:
                    c4:e3:78:89:a8:e6:39:b0:df:83:2e:92:eb:9f:09:
                    c9:56:f4:73:70:8b:e7:d6:33:10:1e:e4:89:e6:49:
                    a6:ad:5d:49:f0:49:d7:5e:82:b3:6f:72:b1:e0:80:
                    71:58:f6:29:55:24:3b:8f:f8:d1:b4:05:b9:33:09:
                    12:ab:f5:98:36:e5:0e:f0:4c:c2:59:2c:7c:ca:ad:
                    9c:66:5b:ea:01:1e:a7:e7:ac:08:93:40:da:e9:20:
                    ac:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:96:51:B1:E9:D1:D4:6B:B9:51:E9:97:70:7A:E1:11:86:3B:D2:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/65ea4730-7cd2-36d1-88e8-6261b56094b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.172.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:14:d2:52:a0:93:7d:90:91:60:10:d7:ce:dd:5b:e5:8a:25:
         2c:f2:61:80:62:9f:db:f7:3e:7c:62:ed:bf:d3:38:ad:a5:4e:
         96:b8:3d:cc:d1:56:da:e3:b1:c8:80:4d:29:32:45:49:90:ec:
         16:c1:07:db:c3:e3:e6:83:50:f0:80:d5:2a:c3:45:94:a4:00:
         25:3c:a3:1e:35:4d:b6:5a:83:08:15:7c:e2:3d:16:3e:92:55:
         29:fe:2f:08:f4:d3:cc:7a:c5:db:c8:9c:2c:a8:01:cb:e9:b8:
         12:f4:5d:f1:65:a3:cb:c0:c7:f1:63:87:b6:1e:41:1b:46:1d:
         4c:f5:4f:f2:56:45:16:5f:f1:4a:16:58:57:92:db:a5:bb:77:
         98:c5:1c:ba:2e:ab:07:f4:29:99:fc:e0:8a:18:74:6a:6c:9a:
         58:a6:ca:68:61:c8:58:2a:fd:7d:cb:b9:ae:06:21:26:b2:ea:
         d5:15:c2:9b:ac:db:ee:08:47:51:b0:77:80:6b:d7:41:28:08:
         99:a6:70:d4:c5:fb:b6:01:e0:ba:84:0f:89:1f:a8:34:bc:c8:
         68:3b:0b:b7:4b:1a:b6:af:94:3f:bd:2a:8b:ab:30:c7:d2:cb:
         77:0b:ab:79:62:88:26:26:c4:73:9d:59:c7:a8:48:2a:09:20:
         39:68:ed:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----