Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db58a795-bf5d-3577-8d35-6acfd05326a7.roa
File:                     db58a795-bf5d-3577-8d35-6acfd05326a7.roa (raw, json)
Hash identifier:          zmglKOV/U+sEatOpsEt0N4muEXbZMZDI6IF78wXAEgc=
Subject key identifier:   00:58:7D:1E:FE:F3:3D:21:3C:89:AC:44:25:EB:FC:A8:1F:9A:8F:98
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449313B4792B5D93984E252200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db58a795-bf5d-3577-8d35-6acfd05326a7.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        69.158.211.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:b4:79:2b:5d:93:98:4e:25:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=c1213c1d-7c8d-4fca-9868-49bff683ca1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:42:2c:fa:67:fb:b9:85:55:a6:75:68:2d:
                    0b:82:ef:7a:d8:0d:c8:93:1c:38:a1:be:e3:a0:c7:
                    74:b9:e6:12:e7:34:e2:92:74:b2:3c:45:f4:5d:94:
                    c7:0a:0e:a3:18:82:93:22:33:fa:37:e4:47:a6:52:
                    a7:ac:01:f2:d5:99:dd:c2:c2:e3:b9:5a:8b:0d:c9:
                    37:8e:88:41:a8:68:0e:69:b1:bd:c2:8b:73:f5:b8:
                    5f:ea:34:50:f1:67:38:41:98:fb:20:d4:21:c0:06:
                    6e:ba:13:24:45:a2:68:05:81:ae:7b:d2:cf:88:e9:
                    49:9f:10:d1:76:2d:d6:d0:bd:62:39:e4:f5:ee:a2:
                    3c:52:24:f9:1e:d9:52:b6:64:53:fc:94:ac:f6:ae:
                    d9:cf:ee:5f:5e:e6:d0:9a:9b:81:8e:51:c2:15:30:
                    bf:c8:58:aa:01:30:42:b0:96:38:58:04:b8:62:77:
                    f6:37:4e:24:d3:2b:0c:ba:ce:7c:1b:8f:81:aa:52:
                    ae:09:71:5e:0e:b0:d9:c6:d5:cb:92:79:f6:3a:26:
                    d6:13:13:c8:69:2d:a6:b9:37:84:c7:d2:57:5c:50:
                    ca:62:7c:2c:4d:2f:18:96:ad:e3:1e:2f:4e:b5:1c:
                    52:81:ab:88:e9:aa:e5:01:22:c6:4e:08:55:75:2b:
                    0a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:58:7D:1E:FE:F3:3D:21:3C:89:AC:44:25:EB:FC:A8:1F:9A:8F:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/db58a795-bf5d-3577-8d35-6acfd05326a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:26:51:81:99:4a:04:12:00:ff:02:a1:a7:a1:10:2d:48:e4:
         98:1c:46:63:30:65:40:84:6d:8f:54:3b:cf:81:5c:64:b1:c9:
         ef:27:0b:b8:ad:0a:79:ad:42:42:d4:4f:72:cb:bf:93:ad:e9:
         95:9e:18:2d:7c:40:b5:cd:0d:20:64:7e:ca:5c:68:8a:5f:c9:
         6e:bf:71:f1:94:6c:73:f8:6c:0d:34:f9:62:a6:3f:fd:01:83:
         13:fc:71:65:02:bb:fb:8c:06:b4:64:57:e3:e1:f3:42:34:e4:
         66:c0:a3:93:67:30:e2:0d:bc:1b:2d:58:94:bd:cb:00:ec:fa:
         d6:72:d9:a3:a8:44:2b:03:f2:c9:fe:cc:21:18:cb:9a:bb:1e:
         5c:82:21:34:ac:85:f6:12:8b:e9:ce:54:b4:da:06:3e:e8:e8:
         71:9f:6b:6d:eb:b5:72:f6:2a:3f:8d:da:43:7c:51:7a:0d:f1:
         f1:f3:c5:47:7a:50:23:15:53:ed:f5:39:d6:09:6b:52:9c:07:
         ac:e7:87:f5:09:30:e3:f4:8c:38:3f:25:7b:c6:90:2a:71:ad:
         2c:db:cd:ee:7e:5f:05:d0:51:52:5a:a5:ad:00:11:a7:de:04:
         89:87:b9:08:5d:31:f5:ec:29:2c:b1:32:63:af:fa:d0:f7:06:
         15:17:7a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----