Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e805fd6-1634-3740-8f09-854258a93a46.roa
File:                     6e805fd6-1634-3740-8f09-854258a93a46.roa (raw, json)
Hash identifier:          dmZ8wawzc7OuUF9oMT6k/b+w66CxA4fqHcxRsx0foQM=
Subject key identifier:   20:05:79:0B:DD:F3:4E:3A:0A:FF:7B:97:0C:FB:22:37:E2:02:75:40
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE42C981749ACFA3F71FE60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e805fd6-1634-3740-8f09-854258a93a46.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        69.158.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:2c:98:17:49:ac:fa:3f:71:fe:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=8bdf0508-e404-49e3-88b1-55c45cbca51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:46:73:d6:60:8a:b6:06:c3:4f:47:24:a2:a6:
                    c0:7a:03:24:23:2c:89:f2:8e:6a:b7:b6:d1:81:22:
                    49:2c:0a:e9:a2:34:89:cc:89:7e:a3:36:75:d8:d7:
                    a7:0c:2c:7b:32:dd:06:64:1d:21:01:73:5b:6e:ac:
                    07:5d:13:4d:3b:31:da:10:f4:ea:e1:b5:46:30:c1:
                    2b:98:bf:7c:5f:60:11:0b:c9:10:41:6f:b0:f3:6c:
                    77:f3:15:2f:15:eb:a2:e8:f2:b6:f9:d3:86:94:32:
                    99:4b:33:ce:ca:9b:21:7a:1b:f7:19:52:6e:11:35:
                    a6:c9:07:b8:44:08:b2:7a:4d:e6:96:06:02:c8:e3:
                    e7:53:e2:c7:ad:f7:72:f9:51:15:39:90:b1:bc:ce:
                    65:56:06:58:c7:29:e7:ba:fb:67:d9:d2:68:ab:57:
                    b6:f5:64:8d:4a:74:76:af:4e:78:95:5e:5a:2f:e8:
                    68:70:27:37:37:2c:61:97:34:93:67:33:59:36:27:
                    97:17:54:7b:df:34:a7:96:c9:15:72:36:1c:06:20:
                    51:4f:dd:a1:69:b0:11:20:53:ff:e7:a9:ef:80:fa:
                    1d:ef:4d:3d:1b:ce:24:f8:e5:a7:07:cc:bf:c7:9e:
                    91:68:60:70:5f:ec:1d:c2:a2:ad:fb:f4:f6:5f:2e:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:05:79:0B:DD:F3:4E:3A:0A:FF:7B:97:0C:FB:22:37:E2:02:75:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e805fd6-1634-3740-8f09-854258a93a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:26:6f:d8:68:ac:99:94:b9:2c:00:f5:e2:d8:ba:6a:f4:d9:
         d1:6c:98:31:fa:d9:5f:e7:76:82:2a:46:01:84:4b:90:2d:23:
         54:92:fd:87:94:20:07:79:6b:83:b9:9d:f7:f0:75:9f:a7:80:
         a5:29:a8:e8:a9:ff:74:8e:6e:3d:85:20:aa:84:2f:02:4d:bd:
         18:3e:22:09:7e:ef:79:1c:c7:01:f4:7b:5d:bb:b1:d5:80:07:
         f8:e1:bd:78:b1:d0:d2:32:3d:95:5f:a4:60:0c:9c:e4:dd:77:
         f1:16:aa:c7:4a:4c:bc:30:7e:47:52:cf:f7:5c:06:54:c1:aa:
         66:98:f5:cd:80:01:3d:b2:2a:f0:f8:62:b4:f4:00:cf:a6:89:
         a9:4c:bc:09:0f:8e:bc:0f:aa:93:0d:a5:a0:70:c2:04:28:c3:
         e9:23:0e:fc:4a:cb:e2:22:79:ce:e8:8d:15:37:30:05:23:76:
         80:16:ec:10:9a:7e:52:59:b0:e4:48:32:5c:a9:e9:a2:ad:1f:
         26:7c:a2:c5:24:ae:a2:73:1b:f9:30:98:77:fd:26:46:f1:41:
         8c:7a:89:cb:01:ec:aa:a3:ea:93:e8:ca:05:e0:60:32:5e:29:
         d2:64:bc:23:d7:35:00:8a:fc:3c:a4:eb:80:7f:c2:ed:7d:42:
         df:35:88:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----