Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bedbb27f-99e3-37cd-a8ac-1c0e4ba01a42.roa
File:                     bedbb27f-99e3-37cd-a8ac-1c0e4ba01a42.roa (raw, json)
Hash identifier:          b2QRAL5L5Vnl9peHfMdn7dkoh0VYPBNuAR2FcmB4P2c=
Subject key identifier:   BE:0B:96:30:15:02:A2:26:0F:F8:7A:CB:29:96:4E:D2:6F:24:DA:2D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE63B64C6F5EF108F258380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bedbb27f-99e3-37cd-a8ac-1c0e4ba01a42.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     36522
IP address blocks:        216.208.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e6:3b:64:c6:f5:ef:10:8f:25:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=89c3d28d-51d2-4c55-ab9e-07c004a65384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:41:1c:dc:6e:e8:7a:06:67:0b:5a:a6:db:ee:
                    02:23:ba:48:60:4e:42:f2:5b:33:87:41:23:f5:ea:
                    8b:75:e8:c0:df:31:cb:07:f3:cc:ea:5a:19:1f:db:
                    14:60:8a:51:a4:a7:b6:f8:35:ed:41:69:d2:7c:91:
                    1f:24:de:1a:03:c2:77:3a:f8:12:25:17:f1:bd:8a:
                    18:68:0f:e0:06:28:3e:ac:c9:20:16:c1:01:24:69:
                    36:47:de:49:e6:98:ff:4e:e5:b9:b1:f9:6b:b8:5f:
                    73:02:47:5c:b2:a3:c6:e0:12:a0:6f:92:64:32:21:
                    4b:6d:a6:95:d4:39:5c:a7:f0:5d:fa:7f:f4:5b:69:
                    9d:d9:ee:6a:f6:f0:68:20:d5:8a:21:2a:cc:53:04:
                    7e:a3:f7:82:a5:b8:ed:b7:cd:57:b2:13:10:12:c1:
                    88:f7:37:66:f4:91:19:18:74:f0:16:48:32:f4:46:
                    26:fa:8f:ac:71:28:43:e6:ad:55:ea:7d:cc:c1:c9:
                    7d:d7:14:78:c9:56:fe:42:82:93:8b:48:aa:4e:40:
                    0c:21:ce:0b:94:23:bb:2d:6b:d8:8b:63:c6:5b:2a:
                    91:77:d9:e8:8d:96:25:5e:6f:b0:2b:de:e3:a2:7b:
                    c0:86:df:9c:ba:e2:84:35:3a:48:8b:6b:1e:10:2c:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0B:96:30:15:02:A2:26:0F:F8:7A:CB:29:96:4E:D2:6F:24:DA:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bedbb27f-99e3-37cd-a8ac-1c0e4ba01a42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:53:67:0f:d1:d3:88:d7:2f:c9:b5:22:64:28:5a:16:2f:9e:
         ed:3c:94:f3:d6:ac:a3:f0:e0:7b:be:91:ef:7e:0e:7e:98:04:
         e7:37:17:0d:70:a7:1d:20:e9:85:7d:97:9e:94:c4:33:fa:46:
         60:0f:1f:9c:70:b1:f8:6c:ee:e7:c1:ab:f0:3d:c3:5d:95:be:
         7d:43:cc:58:d7:03:ed:b7:b5:f0:87:ee:5d:44:64:fe:f7:36:
         12:f8:f0:a6:9b:89:73:b9:82:9c:84:83:fe:82:0f:08:73:79:
         ce:93:1a:a5:16:ef:b1:51:c0:19:3e:87:7f:85:e1:0d:7f:8e:
         b3:91:76:b7:1f:12:f8:80:e4:cb:cf:21:8d:b1:4a:27:72:f0:
         e9:a4:50:26:5e:76:75:95:3a:75:70:6a:05:fd:8b:a7:74:d0:
         1b:99:ff:e5:3c:a5:21:29:c1:5e:f4:4a:df:df:7c:fd:09:28:
         63:60:44:b1:4c:27:8a:f4:6a:ea:0c:32:f1:cc:25:ac:85:e9:
         22:10:81:5c:9b:08:cd:87:bc:87:8a:bf:f4:e7:c4:45:5d:b0:
         5d:76:b4:da:7b:cd:fe:29:35:1d:d8:c4:91:0e:19:17:f3:f6:
         09:1b:2a:db:cb:7a:fa:71:ba:65:ea:17:09:f5:dc:67:ec:6a:
         8c:c6:df:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----