Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8faad874-a849-3996-a606-ac33744f8474.roa
File:                     8faad874-a849-3996-a606-ac33744f8474.roa (raw, json)
Hash identifier:          bJUvFmRHlcsZKpY2yIHVaftTCtBYseyZ/wzXo3FABto=
Subject key identifier:   65:36:5D:41:31:3A:26:DF:DD:56:69:4F:A0:6A:D3:F0:4E:A3:84:3D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493167DC870D265D37158CC00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8faad874-a849-3996-a606-ac33744f8474.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     32856
IP address blocks:        216.6.201.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:7d:c8:70:d2:65:d3:71:58:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=1f5a502f-06e2-4a5b-8c0d-d6ebd02666a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:d5:83:3e:38:d2:8e:7f:24:ec:54:ee:d0:
                    47:5a:a4:af:de:e5:35:3f:24:62:2a:95:04:64:87:
                    29:ad:d5:55:d1:fd:12:39:9c:10:5a:4a:ff:88:7e:
                    44:58:68:25:13:6e:43:13:2d:d2:97:9a:ff:69:02:
                    c2:08:99:ad:e3:c3:49:c5:cf:43:51:83:34:2c:7f:
                    d2:e6:b7:84:47:a8:9a:0f:0a:5e:05:a0:52:db:e2:
                    40:e8:b2:d7:0e:96:8c:4d:d0:5a:f4:f6:97:e2:d7:
                    50:2b:13:8e:d6:98:00:4d:31:4a:ec:61:da:fe:d8:
                    1f:fe:9b:db:0a:73:45:05:16:c5:a4:55:ab:bf:44:
                    a6:7c:07:2d:0a:e6:1e:a3:de:a2:cb:d2:27:b5:38:
                    7f:01:52:02:05:c0:75:b4:5b:9a:7c:1f:ea:09:eb:
                    28:bc:17:d0:be:7a:46:80:6c:fe:a2:4f:7b:85:36:
                    97:ff:b7:85:45:7f:8f:35:f4:01:6f:09:1c:dd:bb:
                    b3:95:09:2e:f9:30:46:c2:57:bc:45:e0:93:3f:22:
                    41:f2:be:f8:f4:72:c8:ce:35:63:4f:73:16:01:90:
                    38:b4:4c:75:0b:d5:00:d7:18:57:d4:e3:fd:96:56:
                    80:e7:57:90:fa:27:09:11:2b:6b:11:75:ef:64:88:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:36:5D:41:31:3A:26:DF:DD:56:69:4F:A0:6A:D3:F0:4E:A3:84:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8faad874-a849-3996-a606-ac33744f8474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4b:7c:f8:12:27:81:70:fb:78:e8:1b:3e:15:31:6b:b5:17:
         d5:4f:77:54:50:25:80:d9:a8:c9:8e:24:eb:39:a0:26:5d:ca:
         34:d4:68:37:0b:0e:71:44:ff:b9:f8:5b:10:d6:9d:36:b0:a2:
         dc:dd:0d:ad:98:17:7e:4b:a6:7e:dd:84:d1:c1:8e:03:a7:6a:
         6d:a5:e0:de:e1:f8:e7:46:9d:49:72:54:63:f4:9f:f4:88:a8:
         91:f0:90:6d:c7:86:af:9d:03:0c:5d:a6:c4:43:39:70:98:a4:
         1a:b7:d5:67:65:d2:56:8a:72:8e:80:35:b8:c3:3e:cd:0d:bb:
         c1:82:29:fb:57:89:3e:4f:e4:19:41:f1:05:bd:17:71:30:49:
         44:01:b0:e0:d5:52:4f:47:40:49:82:fb:14:8a:85:68:b5:86:
         2b:fa:9d:89:b8:ca:16:31:1c:a9:27:5e:2c:53:49:a5:11:4a:
         da:85:4d:65:fb:96:34:01:a3:13:d9:e8:b4:69:9a:bb:97:3c:
         16:84:b4:f2:a4:cc:0a:0f:11:fd:9b:33:67:75:df:b5:6f:91:
         28:d5:bd:72:d3:2a:8a:73:76:b3:64:e3:1d:48:db:75:6d:43:
         76:d6:4d:44:e2:b7:9d:46:0f:7c:e2:3e:e1:2e:82:b0:39:b0:
         27:b1:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----