Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2ecb34b-7f3d-3983-9509-e83adf9b5fe0.roa
File:                     a2ecb34b-7f3d-3983-9509-e83adf9b5fe0.roa (raw, json)
Hash identifier:          O7CTten5ngUvs0z/S3wu3+cW/kNvsUXrtbU+wqvvykM=
Subject key identifier:   C5:5C:AB:0F:4C:2A:54:B1:CA:EB:DB:B1:51:4C:70:26:E8:8C:EF:4A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449315F28A9634B1F9A73779C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2ecb34b-7f3d-3983-9509-e83adf9b5fe0.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     15321
IP address blocks:        207.164.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:f2:8a:96:34:b1:f9:a7:37:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=817026b9-482d-431b-a241-073c0ba04d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:78:3e:a7:0a:59:7f:4e:80:23:d9:ad:3c:28:
                    58:8d:13:3c:75:7b:23:f2:32:38:8b:15:4e:4c:5f:
                    63:37:54:22:c1:d9:7d:90:c0:a2:13:d5:9b:eb:ec:
                    11:64:f7:31:54:d7:01:36:1e:16:70:cc:19:e4:2e:
                    97:0d:a0:e6:1b:86:7a:d1:97:24:23:bf:e7:5d:3e:
                    83:d9:99:f8:ce:f9:c8:c9:7f:6a:4c:0a:85:9d:31:
                    92:83:ee:15:14:22:7d:4e:dd:77:02:bf:ec:86:a8:
                    72:cc:27:83:2a:19:15:01:20:6d:81:03:be:43:16:
                    5b:70:57:b1:78:68:50:b3:fb:9e:6d:61:24:1b:a1:
                    81:7a:25:22:7b:8d:fe:d2:fd:f3:49:75:c8:1e:f3:
                    24:13:99:4d:1f:fe:ca:dc:8b:f6:2b:59:12:c6:46:
                    e0:a5:3f:83:99:63:76:8a:75:bd:77:e1:17:97:19:
                    de:2c:59:f6:82:47:4d:ec:4d:4b:91:aa:9e:ad:a9:
                    39:b9:0d:c9:da:3d:dc:db:93:4c:a3:97:68:8a:69:
                    bd:50:4b:0f:59:d4:aa:77:7a:83:7a:c7:15:ba:bd:
                    7a:b4:ad:20:26:b1:87:97:fb:3c:e4:36:88:7e:0f:
                    4f:cb:09:e6:59:89:66:ef:4b:35:9a:31:cf:6c:e8:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:AB:0F:4C:2A:54:B1:CA:EB:DB:B1:51:4C:70:26:E8:8C:EF:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2ecb34b-7f3d-3983-9509-e83adf9b5fe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e5:2b:a9:b5:ec:7c:3d:64:c1:c6:b1:1d:1f:78:25:35:18:
         41:7b:6f:ff:9e:e8:11:8f:f8:87:79:ba:ef:7b:7a:21:8b:b9:
         b2:cc:fb:95:a9:af:f7:e2:2a:a5:e4:eb:8f:3f:76:89:f7:c4:
         5b:a4:2f:de:74:a6:e3:70:41:20:4a:61:63:9f:fb:01:b3:29:
         11:01:ef:f6:24:8e:b7:49:13:77:8e:ce:3a:67:eb:56:52:d3:
         1a:11:02:25:dd:93:ec:a0:ae:b8:e2:83:ed:35:ff:08:9b:07:
         62:59:20:07:dd:e1:0c:06:06:4b:82:4c:6a:1a:70:c8:15:4a:
         db:1f:dc:b9:74:54:8e:50:a7:53:b4:03:23:27:ae:76:b1:ce:
         ed:7d:c3:79:6b:aa:f7:df:55:ea:2a:dc:36:ab:f5:70:46:87:
         63:db:e4:83:fe:60:2b:56:b8:60:51:3a:e2:14:47:15:67:34:
         f3:ce:12:2f:0b:ec:16:30:ff:35:d8:86:ca:65:87:45:0f:37:
         48:b8:e6:f6:26:93:be:54:87:b8:3d:f7:e1:ab:4e:f2:e7:a7:
         9b:ce:c4:3a:de:7e:a1:03:da:65:67:65:ee:eb:91:53:70:21:
         f4:d1:8b:93:72:17:33:20:66:49:2e:7d:cb:b7:62:3a:a4:92:
         a5:cf:8e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----