Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a53ce757-f1b0-3134-94ed-aed70d38021a.roa
File:                     a53ce757-f1b0-3134-94ed-aed70d38021a.roa (raw, json)
Hash identifier:          BDA87CrmJDo55nIHapNO8c9Ul8VMPJlNGeEex8YkomA=
Subject key identifier:   FF:55:52:7B:23:F5:67:FE:68:B0:C3:62:A0:20:F7:1A:99:3F:F5:54
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493157CED34D29F8E4F471A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a53ce757-f1b0-3134-94ed-aed70d38021a.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        206.47.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:7c:ed:34:d2:9f:8e:4f:47:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=310efb0f-17e3-48bf-ba2d-13b8f0a0eeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:88:e4:b1:e3:de:0a:d1:24:c7:03:da:ad:4f:
                    ff:36:31:d3:98:ec:26:dd:95:a8:55:71:eb:1c:74:
                    db:bc:54:91:4e:45:4b:1c:61:60:a9:f1:ee:92:f3:
                    3b:9b:02:07:a6:0b:06:fd:07:3e:ac:68:34:31:3d:
                    5d:9b:36:67:ed:7a:18:0c:3a:fb:a1:36:7a:3a:69:
                    ec:2d:11:28:7b:ef:c9:77:f9:1b:d4:d2:c3:3e:67:
                    02:c7:b2:62:4d:47:67:22:c0:34:2f:26:b0:7d:7c:
                    72:72:77:a9:73:5c:64:25:b9:d2:f3:18:09:df:48:
                    e0:42:57:df:f5:67:bb:fe:db:a7:ef:a4:28:ff:03:
                    7a:79:0d:3b:d7:37:87:55:b6:ff:33:62:48:b5:62:
                    f5:b0:7c:f1:0a:bc:a0:fa:c4:02:f8:e5:4f:69:82:
                    f7:0b:bf:26:0d:be:d7:fd:b1:3c:12:f8:da:87:2c:
                    36:6e:17:68:55:20:b6:33:2e:3d:4b:4e:dc:1f:c2:
                    74:4c:9d:74:4f:dc:26:08:8c:c5:2e:eb:bf:e9:39:
                    0b:de:af:18:e0:73:72:64:ef:01:76:ab:82:eb:ba:
                    25:a7:6b:02:bd:90:ce:26:81:25:c0:1b:1f:e9:64:
                    c6:6e:31:6e:e3:76:21:cf:69:c8:7e:48:88:1b:93:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:55:52:7B:23:F5:67:FE:68:B0:C3:62:A0:20:F7:1A:99:3F:F5:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a53ce757-f1b0-3134-94ed-aed70d38021a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2c:74:82:9c:19:0f:14:07:a8:75:ba:89:c0:b8:32:f8:c7:
         68:2c:2b:33:0f:71:d7:85:32:2f:c0:21:86:72:c5:17:d0:a0:
         72:94:94:ec:1a:15:84:12:74:57:3a:bd:a3:c6:ca:8e:bb:bd:
         de:c8:3c:6e:5e:8e:d4:fe:af:76:d3:fe:43:47:33:43:de:8b:
         1b:6c:6c:ca:09:92:38:60:ed:04:e4:df:71:45:08:d7:26:10:
         f3:ab:45:a9:a1:5d:a2:01:59:52:cd:2e:b6:ce:78:52:cc:30:
         cc:fd:8b:18:3e:78:47:14:25:80:61:b6:71:20:fa:b5:b1:17:
         40:29:b8:68:c8:8e:44:dd:97:6a:ea:f7:0e:bc:3b:f2:c7:46:
         22:ba:0e:7b:98:16:59:b7:4c:7a:1c:05:00:51:cf:d4:41:f6:
         64:2e:fe:d1:98:4b:45:91:71:c5:bc:2e:02:6f:64:bc:ce:15:
         dc:f2:fa:4c:50:c6:d0:a8:d0:19:7b:6b:fe:49:2c:32:59:97:
         d3:ae:bd:15:f8:07:45:42:7c:10:08:ee:f9:75:96:a8:87:d3:
         8a:ca:42:a2:52:89:a3:06:3e:05:ea:a5:80:0b:ca:85:22:58:
         17:79:18:25:45:57:97:ee:6c:da:ae:37:53:06:74:bf:b8:ad:
         03:5f:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----