Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/800054cd-cb0d-3cd2-bbe5-51d686e1b0dc.roa
File:                     800054cd-cb0d-3cd2-bbe5-51d686e1b0dc.roa (raw, json)
Hash identifier:          KgzfBNXC3uIXZcFD4qT6QlxSyf2y7FrTvmBXAuO8yuE=
Subject key identifier:   FE:03:07:7A:26:49:60:49:13:95:24:2D:01:69:A6:76:24:F9:FD:54
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493167C866CB87A9A408DE000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/800054cd-cb0d-3cd2-bbe5-51d686e1b0dc.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     29907
IP address blocks:        216.6.192.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:7c:86:6c:b8:7a:9a:40:8d:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=6e41b1ce-58af-4b05-9877-550a92095cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:16:43:fe:1f:50:4b:f2:ed:22:e8:b9:ee:13:
                    7b:1c:73:f0:f6:32:d9:e9:25:d7:56:f4:b0:fd:b1:
                    1a:6e:92:2b:01:6f:90:85:d8:7f:c3:16:4c:eb:f5:
                    7a:fe:4f:46:f6:41:5d:a7:d3:56:3d:df:f7:27:d5:
                    7b:50:ca:66:2f:2a:e2:ad:4a:e3:8d:1e:22:b9:55:
                    cb:41:b7:18:c3:d6:65:18:ed:b6:c3:b8:59:e5:9b:
                    17:a2:2b:72:0a:74:aa:0a:6e:d0:e6:05:44:88:d2:
                    27:c6:40:18:a1:80:af:5c:a0:78:fe:c0:87:4a:6f:
                    51:3c:92:f0:73:9b:38:d9:2a:98:57:7d:c0:cf:44:
                    2f:df:f0:84:32:aa:e0:c7:c8:1e:71:f5:ee:90:3a:
                    bc:51:a0:36:94:70:54:41:97:70:63:b9:d5:c8:8c:
                    14:1b:1f:86:4d:58:f0:60:88:d5:50:16:ee:40:a1:
                    ad:3a:ad:9e:82:82:d8:8b:c5:1a:fc:bc:a4:3d:df:
                    22:4b:e9:af:6a:43:47:2e:46:4d:21:9b:26:a7:00:
                    7e:a8:9f:01:bb:a7:c5:1f:7d:18:b2:0e:71:65:88:
                    a3:fb:f3:70:e3:c2:ed:a4:0f:4e:75:2e:ab:8e:cc:
                    a7:12:96:c7:89:ee:2d:a5:ec:70:6c:bb:6b:52:8a:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:07:7A:26:49:60:49:13:95:24:2D:01:69:A6:76:24:F9:FD:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/800054cd-cb0d-3cd2-bbe5-51d686e1b0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:a9:cf:c4:64:6f:15:40:2b:32:da:26:61:d7:81:e1:2e:
         ef:6c:70:c8:1c:01:d6:c1:06:bf:40:2d:e2:01:84:94:b8:bb:
         c2:ce:fa:b1:f5:47:6f:db:d8:18:39:a5:78:eb:29:27:d9:ee:
         cd:66:99:03:c4:ba:dc:62:25:2d:15:5f:69:c0:45:8e:4f:96:
         f3:cd:9a:02:62:0f:3f:f8:45:1c:28:91:cd:8f:92:12:4e:23:
         34:d6:3d:58:dc:b6:2a:9d:fd:ed:f2:a9:88:9f:09:ab:ac:0f:
         7b:cd:b8:d9:7c:07:dc:85:77:76:c8:c7:7b:84:fc:1f:f3:16:
         5b:94:c9:cb:14:9c:4c:8e:52:5d:d6:49:07:6a:b8:66:b4:9e:
         56:95:5b:86:c5:0b:6f:a5:6f:b0:84:77:e3:1b:59:e5:30:0e:
         07:92:6b:31:23:1a:de:f8:ea:3c:20:3b:12:36:d2:1f:c7:14:
         62:a7:ef:28:41:72:59:08:cf:b5:a5:73:a4:41:1c:ac:60:af:
         4e:b2:18:0e:97:9d:47:88:72:4b:fa:6c:5a:58:5e:68:59:e5:
         32:30:80:28:a8:f3:9a:95:dd:17:bc:3d:3d:45:53:b9:c7:e4:
         23:f7:07:87:83:65:21:84:1a:22:74:ca:34:86:7f:70:5c:f1:
         62:01:64:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----