Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c22c35d-7ce8-36a7-bad3-633aa940fef0.roa
File:                     9c22c35d-7ce8-36a7-bad3-633aa940fef0.roa (raw, json)
Hash identifier:          VD3hOA++l5fSaq6p/+4RLPufDdSQilJV4V9afxaV5lU=
Subject key identifier:   73:F4:B9:5A:BF:2D:1C:0B:EC:D5:FD:9B:36:96:A5:65:5E:4E:F3:C8
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449316160F4459A0B58902D700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c22c35d-7ce8-36a7-bad3-633aa940fef0.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        207.236.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:16:0f:44:59:a0:b5:89:02:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=c24d1ddc-6233-4e32-a0ee-05ed3a7e89c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fc:4b:f7:b2:1a:e0:d4:dc:f5:73:f3:93:32:
                    63:d2:16:da:6f:33:c7:f6:e1:f9:a3:0f:d9:92:9a:
                    43:07:81:12:38:d8:ec:ac:5a:29:72:26:41:b6:12:
                    b7:b0:e3:f0:32:7b:aa:59:f7:d1:16:3f:63:2f:d2:
                    d5:f7:77:8c:d0:7f:d0:d0:fb:0d:f7:c0:08:9b:db:
                    7b:49:ce:fc:04:99:0d:0b:41:5c:b4:5d:0f:f6:fe:
                    13:d6:06:f9:e2:10:3f:36:1a:40:7b:63:6e:8c:9f:
                    c2:05:df:06:8d:9a:18:89:44:6f:0b:e5:d7:85:7b:
                    20:35:dc:5c:21:84:a1:a7:48:b1:a1:11:d6:80:1f:
                    ac:d0:20:a9:e4:85:04:1c:62:c8:13:1d:10:44:9e:
                    6b:7a:ae:32:30:3e:8b:97:22:c0:ed:e0:23:1b:ad:
                    88:5e:ba:89:a8:60:c9:00:30:ec:6b:f1:80:7b:84:
                    6b:a6:bf:72:b1:f1:16:9e:5f:d1:a1:c8:ad:75:fa:
                    5c:9a:bc:ee:57:3d:57:54:36:51:d1:95:b4:5a:c1:
                    67:d4:cb:36:0a:b3:b0:95:48:4c:a6:48:8a:c1:38:
                    5f:79:f7:6f:8c:ed:f7:9a:26:82:20:c2:2a:27:0b:
                    6a:c5:fc:20:92:a2:55:b6:0c:2f:3b:6e:71:fb:ba:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F4:B9:5A:BF:2D:1C:0B:EC:D5:FD:9B:36:96:A5:65:5E:4E:F3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/9c22c35d-7ce8-36a7-bad3-633aa940fef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.236.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:a7:23:14:18:92:ef:04:45:f9:7d:96:86:fe:65:00:a0:e7:
         06:77:af:db:43:e2:89:52:e9:1b:58:84:cb:fd:a4:78:61:5d:
         92:bf:d9:7b:4c:80:22:51:3e:c5:ec:b1:e7:35:dd:f3:c6:f3:
         ee:f6:7e:ee:1d:af:a8:47:76:eb:da:3f:2b:36:e8:e4:90:d7:
         ef:ad:76:93:06:b6:80:dc:12:f0:83:3e:9e:45:96:ec:20:4d:
         af:8b:41:ce:e9:a6:64:33:9a:84:03:27:d3:3c:b9:66:24:68:
         aa:09:ca:f7:44:97:69:ca:b8:2e:82:99:5a:59:0c:82:97:16:
         38:47:23:fc:c6:f8:d7:18:36:e4:e3:22:82:4c:18:85:67:94:
         80:f0:c1:17:75:33:48:32:c9:c0:d4:b3:b5:e2:41:48:36:5b:
         e8:42:6f:6e:f6:c2:cf:2f:02:a3:72:28:8c:8b:af:f0:de:3a:
         73:71:90:ea:95:38:58:d4:89:f3:99:c5:c0:b9:69:65:d6:77:
         ee:3c:84:c0:88:a0:53:cf:fc:ef:06:3d:ed:13:1a:a6:70:14:
         03:d2:5a:22:b1:3c:73:f3:95:8a:33:be:43:6d:5d:c8:3e:c9:
         64:36:5e:c0:81:97:54:e4:44:0d:28:7f:42:f1:bc:c6:60:69:
         10:8d:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----