Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cfd8a3ad-e7d9-3dc4-8198-f3a314ca280a.roa
File:                     cfd8a3ad-e7d9-3dc4-8198-f3a314ca280a.roa (raw, json)
Hash identifier:          /riklrRiQGL81O7BwRTIf53mitarKvZgz1mKro4fXeU=
Subject key identifier:   DE:4F:BE:CC:A9:14:D8:CD:4D:04:C3:D6:DF:F2:DA:F1:46:3B:86:D2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493141BBA86D34392F990B520
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cfd8a3ad-e7d9-3dc4-8198-f3a314ca280a.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        142.127.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:1b:ba:86:d3:43:92:f9:90:b5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=e67c8bf1-e606-4420-b05a-f6af88dca7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:39:15:ab:b5:ed:b4:b2:8b:19:96:50:f9:
                    9c:52:c8:03:29:39:ac:63:8d:7f:9a:11:1c:10:9c:
                    04:c0:56:d1:19:71:2c:fa:18:51:1e:6e:c8:e4:c9:
                    a3:f1:f3:67:02:10:ba:80:c9:17:d6:d5:64:d7:44:
                    3f:fb:97:82:1c:d0:16:e0:c2:03:88:31:5d:fb:ab:
                    3c:c5:6f:9c:45:c0:7a:f5:1e:54:9d:a4:d9:ee:c7:
                    04:c4:cc:af:1a:a9:23:a2:1c:95:ff:00:40:80:22:
                    23:99:7f:03:4c:08:88:86:eb:f5:d1:36:8b:4c:7d:
                    2f:55:f7:b1:3e:c4:a1:22:86:b4:13:eb:44:c3:9e:
                    bb:4e:2c:8f:63:b5:60:85:1c:3c:ab:a8:3d:80:f5:
                    a5:a7:1a:de:c4:6f:d2:c8:ea:cc:37:35:0d:02:c1:
                    98:09:43:6a:8d:f2:6c:cb:1b:2d:3b:a6:32:3d:be:
                    ab:7e:5f:24:a8:bd:a6:a2:fc:4a:b9:64:6a:d9:3c:
                    f1:49:3e:e8:93:ef:e9:bf:02:84:bf:f1:f8:4a:d2:
                    41:81:cc:42:57:91:a7:f7:91:40:01:67:dc:6e:dd:
                    75:e1:55:bb:85:47:cd:b8:4f:11:e0:c3:d4:11:74:
                    96:8d:f0:f7:45:69:f0:6e:33:b7:bf:9f:f8:bb:31:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4F:BE:CC:A9:14:D8:CD:4D:04:C3:D6:DF:F2:DA:F1:46:3B:86:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cfd8a3ad-e7d9-3dc4-8198-f3a314ca280a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.127.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:ba:96:3a:9b:b2:ac:bc:6f:bf:74:91:ec:b2:85:89:e9:b1:
         56:58:da:c0:25:27:8e:66:16:66:8c:61:f7:4b:22:c4:cb:8a:
         18:57:3e:36:fa:fd:80:91:b0:18:b0:b9:7a:41:57:d2:43:5a:
         f1:73:d3:c6:40:08:6a:9f:4a:6a:ff:d8:31:2d:8d:e9:4f:d7:
         67:c2:72:f6:b6:d7:69:32:77:59:58:21:e6:cb:16:3f:07:09:
         54:3d:8b:11:25:90:ef:fe:7c:f7:50:da:c0:e2:1e:20:7e:b9:
         6a:bc:1d:0b:5b:fa:58:ea:3f:41:ef:fc:be:53:4b:fa:10:ff:
         c9:61:88:cb:e4:58:c8:18:4d:ba:f4:02:da:96:2c:b6:da:64:
         9f:04:c3:27:29:12:1f:be:ca:45:cb:17:59:f2:4a:f5:c0:8b:
         2a:31:47:2a:d9:af:f5:78:32:b5:82:98:e4:a3:5a:f9:af:63:
         1d:19:c2:b1:21:38:46:a5:38:7d:8d:cd:50:8f:a5:48:be:61:
         76:2a:e4:99:a3:49:57:a9:2a:6b:81:07:7a:c3:79:77:57:3e:
         f2:68:c0:fd:7d:f0:3b:51:8b:9f:ae:22:f3:bc:3f:00:7d:e5:
         5f:70:e1:02:c2:b4:fc:14:1a:41:bc:4e:c4:ea:27:5c:6e:88:
         42:8a:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----