Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bce7d4ac-7232-3795-abea-37798c9b862f.roa
File:                     bce7d4ac-7232-3795-abea-37798c9b862f.roa (raw, json)
Hash identifier:          5exO+GcJusl7uU1QjfmaEl67zOCw0S2yYA0RqEOX4pg=
Subject key identifier:   E7:8C:09:31:8B:FE:F3:CA:81:7F:26:53:7F:67:B4:DC:BD:0D:76:90
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285844931655AAE5F9C4544BC46E00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bce7d4ac-7232-3795-abea-37798c9b862f.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     21552
IP address blocks:        209.226.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:55:aa:e5:f9:c4:54:4b:c4:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=41435728-cf72-4256-b94d-5bb49aed1008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:71:3c:c2:74:91:bf:38:de:94:cb:49:dd:
                    75:fa:b0:1b:d3:0f:b8:d4:de:02:9b:4d:47:0c:81:
                    75:3e:78:21:e9:1d:66:2f:9a:59:63:4e:3e:cc:e2:
                    37:05:05:13:7a:dd:28:0c:14:54:a6:50:da:f0:7a:
                    c5:e3:3e:48:7d:71:83:75:75:78:90:b6:ef:2a:a1:
                    b3:d1:54:34:e9:88:b6:04:50:55:f9:a8:d4:61:b2:
                    40:bd:c7:b1:fd:c5:28:e9:a2:9b:1b:fe:a7:6a:0c:
                    69:e6:51:f1:a8:21:33:9e:61:bf:bb:b8:bb:da:b6:
                    34:71:0c:0c:c0:0b:d3:59:b2:ff:8d:13:78:99:5c:
                    cc:5d:ae:74:39:a2:6e:64:21:c3:6b:0d:d2:09:58:
                    d3:86:68:a6:07:4e:01:cb:1d:af:b6:27:0d:75:86:
                    48:e9:21:a0:1c:51:62:92:ec:f4:ec:65:4f:07:bd:
                    7c:23:3a:58:e7:cf:55:94:a4:80:6a:7d:cb:d0:3a:
                    8a:68:14:81:99:2a:f9:bd:cc:62:3e:cb:74:07:76:
                    0d:3b:42:8a:0b:85:58:3f:b6:2d:37:be:fd:f7:a8:
                    48:c1:3f:a6:71:2d:2b:dd:96:59:4c:cf:36:b1:3f:
                    ce:b5:7c:ed:d1:13:b2:ee:c9:4e:5a:a1:a7:f4:34:
                    b7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8C:09:31:8B:FE:F3:CA:81:7F:26:53:7F:67:B4:DC:BD:0D:76:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bce7d4ac-7232-3795-abea-37798c9b862f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:36:f2:d6:bc:d0:1e:58:01:de:7f:14:c4:45:22:62:4b:b8:
         94:a5:ec:6d:81:fe:9d:20:56:a3:56:ed:ab:08:60:2a:22:4d:
         ae:2f:2c:5b:69:97:c0:be:32:96:88:52:4c:e7:f7:24:57:43:
         95:e9:75:06:dd:04:e5:53:86:3f:29:83:22:74:45:6c:a2:b1:
         41:89:f1:90:98:2d:01:df:90:7b:b4:87:75:42:04:14:0a:3d:
         7a:21:f0:de:60:61:22:75:ad:4f:d4:82:f5:7d:ef:aa:3c:26:
         ef:e1:29:4a:90:21:a0:3d:f2:ee:96:82:1f:9b:fe:84:46:74:
         0b:b7:5b:16:82:74:19:cf:5a:80:a3:8c:3a:3e:a2:79:db:b3:
         b6:0e:a3:af:04:84:35:d3:cd:0c:67:c1:72:79:64:06:2f:14:
         79:5e:4a:55:a6:88:90:df:53:53:7b:35:bf:78:d7:40:29:d3:
         91:fa:d4:08:7e:29:f1:b7:af:dd:61:e4:be:ff:b9:de:e5:f2:
         76:b2:b5:75:39:07:34:20:07:ef:19:5c:2f:66:12:9f:b9:17:
         cd:50:7d:b7:96:e0:2e:07:37:d9:9f:92:b5:02:19:b5:17:0b:
         81:53:c8:fe:5b:ce:28:3d:83:9c:02:15:06:25:c6:d4:22:ee:
         2e:ee:3f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----