Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4079fa4-1110-3d85-a97c-e3668089f2bb.roa
File:                     c4079fa4-1110-3d85-a97c-e3668089f2bb.roa (raw, json)
Hash identifier:          EJ6TQ9ZHWyogtFXAsscvMbwnC4RkpRWiOzM3jtdkMb4=
Subject key identifier:   70:27:1A:74:E5:86:68:37:9E:A0:A4:A7:12:FD:5F:64:A9:0B:58:34
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE634C7CA92CB2D2B320A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4079fa4-1110-3d85-a97c-e3668089f2bb.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     3848
IP address blocks:        216.208.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e6:34:c7:ca:92:cb:2d:2b:32:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=ff7777b7-90df-41f2-af2f-4b5eeb2e44da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:39:ba:cc:e8:53:b9:2f:6e:4c:ea:6b:bd:
                    c6:9b:f0:90:17:f8:7a:25:94:ee:63:ba:5b:89:f3:
                    ca:00:29:d2:40:a9:2a:25:26:0e:df:0b:92:f3:b7:
                    0b:fb:69:d3:b0:11:c4:58:71:c8:15:34:9f:6f:14:
                    41:b5:58:04:58:34:63:3a:59:16:a0:16:ca:99:c7:
                    81:fb:38:dd:d2:c6:44:0d:54:79:db:14:49:fd:ca:
                    9c:e0:40:54:cf:53:a2:63:43:d2:31:1a:cd:78:ab:
                    7a:c5:c0:e7:88:33:18:bb:4b:5f:25:0b:78:08:5c:
                    31:5e:1e:10:ed:d6:74:50:ef:40:cc:34:b6:df:43:
                    29:bb:f0:82:94:d7:c9:d2:31:fd:60:84:62:dd:91:
                    2a:39:7d:46:84:a5:2e:90:83:5f:3e:d4:8c:ad:6e:
                    57:83:93:5b:eb:d3:d0:28:35:17:3e:3a:a6:eb:a8:
                    3c:98:71:e9:fa:d7:5b:8a:33:fc:51:12:5b:e3:5e:
                    4e:c0:0e:dc:d1:2c:c0:3d:e1:3b:cf:a9:d9:72:3a:
                    41:0c:81:85:08:ce:5c:ec:6d:b5:8c:14:46:be:3c:
                    ed:7d:c9:f4:41:2f:4c:cd:0b:86:18:34:eb:55:6c:
                    42:e1:04:e2:e9:94:bf:ac:fd:5b:c1:47:ef:d8:6c:
                    60:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:27:1A:74:E5:86:68:37:9E:A0:A4:A7:12:FD:5F:64:A9:0B:58:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c4079fa4-1110-3d85-a97c-e3668089f2bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e7:a1:55:7a:91:a4:b5:85:e5:a9:84:b1:b7:48:7e:05:38:
         c5:70:27:a6:ec:0f:02:55:a2:bd:9b:58:b6:17:a0:38:11:6d:
         46:43:77:3a:7d:30:58:11:b3:fa:45:a4:39:ac:af:9a:dc:dd:
         2d:70:c1:53:3e:bd:62:e2:8c:96:af:8c:66:4a:78:10:96:c2:
         cd:57:03:dc:4a:46:4c:4c:ac:14:72:2d:44:c1:2f:8c:97:33:
         d7:a3:53:2c:05:a5:a3:c8:cb:95:ec:54:ca:cd:5a:ec:36:c6:
         d2:e2:d7:31:4d:19:4b:51:90:36:24:8c:59:7c:41:7a:ce:32:
         56:e4:5a:bb:b3:03:6a:f4:6d:a4:2c:90:3c:e9:85:51:03:68:
         b3:01:0d:c8:20:aa:f0:66:65:d8:e6:cd:96:d0:5a:77:fc:f9:
         5d:c1:9d:5e:0b:68:d3:8a:15:cc:a9:c9:8c:3e:de:1f:50:99:
         cf:4e:7e:87:3a:a8:23:17:bd:55:c9:e2:ff:2d:e8:9e:76:6a:
         01:9f:39:3a:8b:31:d7:c9:8c:0e:1c:f1:db:59:50:c2:44:98:
         f8:92:6b:01:fa:48:0a:de:5f:5f:88:eb:98:60:a3:dd:7e:38:
         4e:f3:56:e1:11:9e:6c:47:c9:f4:74:47:c7:99:74:19:c5:35:
         bd:9f:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----