Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85e003f2-c94d-3bad-9077-9de485b564ef.roa
File:                     85e003f2-c94d-3bad-9077-9de485b564ef.roa (raw, json)
Hash identifier:          8feYcYFjL7gCNGeeSidWpQTDF3zZLN9LWK+UPKKXzTQ=
Subject key identifier:   D0:F8:84:E9:4C:FE:65:8F:07:DE:C4:0D:43:B8:73:61:5E:78:2D:CB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4ABC7261B57007159B950
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85e003f2-c94d-3bad-9077-9de485b564ef.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     30048
IP address blocks:        206.47.167.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:ab:c7:26:1b:57:00:71:59:b9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=f5852046-a765-478f-abcb-447431b4e66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3d:41:bb:59:b9:4b:7a:8e:02:10:8e:38:85:
                    64:55:c3:97:c1:ca:81:5d:f6:9c:c1:aa:bd:fe:a7:
                    71:f3:b3:63:6c:6c:f0:ab:69:c6:97:75:53:f6:f3:
                    a1:6b:4f:4d:11:f7:f4:e8:9d:71:28:ca:1a:89:6a:
                    09:de:56:dd:0c:31:e0:43:7c:38:b3:e9:ec:2f:0d:
                    f9:f4:6a:68:4f:f5:64:f5:39:74:27:0e:e3:69:fe:
                    f5:49:a0:22:b9:f2:e0:0a:04:42:c8:e7:cd:13:c8:
                    4f:4f:ed:ce:51:02:f1:36:c5:88:c7:a1:10:f1:f1:
                    f7:88:4f:c2:79:b6:c2:df:41:42:7a:be:18:d3:03:
                    a4:67:02:8c:3c:02:cf:0b:db:44:c2:49:9b:b1:db:
                    7e:22:40:2f:c8:f7:50:cd:01:2c:f7:36:04:5e:92:
                    41:94:06:70:30:ae:9d:10:87:99:d6:70:08:ad:44:
                    ab:50:40:f7:68:59:81:c5:76:6e:0c:52:c3:c9:e5:
                    18:4d:55:da:d7:cf:8c:db:ea:38:3f:e1:da:db:a7:
                    cc:fa:af:9e:59:be:3e:9f:ad:09:26:fe:97:2f:43:
                    82:08:23:ed:b8:ca:8a:31:6d:be:b9:5a:46:f1:55:
                    60:f8:9f:9a:d1:fc:54:73:53:e9:34:a4:69:7f:0f:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F8:84:E9:4C:FE:65:8F:07:DE:C4:0D:43:B8:73:61:5E:78:2D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/85e003f2-c94d-3bad-9077-9de485b564ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:20:3c:77:5f:b4:9d:5c:3e:22:8c:f9:c1:15:71:f7:ac:07:
         34:a6:ee:15:93:de:98:a9:60:79:de:b1:0c:c5:18:76:d8:a0:
         f0:87:f1:c6:e5:bd:a3:d0:b9:06:33:9b:9a:18:a6:aa:7f:b5:
         a6:20:9d:20:d4:91:bc:70:03:6a:f1:af:2f:1f:b1:6d:33:3b:
         99:83:f6:3d:a2:ba:cb:48:c6:bd:30:a8:66:c8:6b:4b:16:2c:
         f8:f7:48:72:89:40:31:6e:54:b5:58:f4:6b:c9:1a:e0:38:38:
         3e:34:b1:cd:89:e4:e3:b1:3f:00:35:f7:2a:f9:0a:62:87:5c:
         1e:91:48:0f:57:5d:82:2a:d4:b7:15:34:b3:61:ed:be:19:77:
         63:6f:a0:fc:22:7f:2b:fa:a1:92:d1:e4:ad:98:46:97:7d:90:
         7a:c5:38:05:b3:ac:21:9d:cf:2a:73:11:60:d4:89:86:27:22:
         c9:df:7b:f6:13:f4:56:bc:fd:d1:16:3d:65:92:0f:7c:04:a6:
         1d:76:53:1c:41:b0:ff:d6:10:07:65:48:6e:80:34:6c:0a:46:
         f7:ed:e0:b4:09:88:f6:a4:65:46:5e:ea:6d:79:16:ed:d4:4c:
         bb:96:32:ad:fb:c1:0d:86:e3:3f:f7:c8:1a:0b:2f:cc:68:1c:
         2e:8d:43:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----