Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dde9197c-4f20-3ee2-830f-50087fb88e14.roa
File:                     dde9197c-4f20-3ee2-830f-50087fb88e14.roa (raw, json)
Hash identifier:          XSKbFP0gK+7uLUoK9jGyz3A9KgTvtvT5AuBgTlxb9uE=
Subject key identifier:   0C:20:2C:60:1C:BA:34:BF:1E:A6:B4:61:AA:51:E0:BB:EB:92:D5:E4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285844931666F37EAC97C44D2F60E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dde9197c-4f20-3ee2-830f-50087fb88e14.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     397829
IP address blocks:        209.226.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:66:f3:7e:ac:97:c4:4d:2f:60:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=698856a4-3de2-4ecb-be5d-3da584b45816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b0:23:ea:79:64:5b:d2:05:98:88:b9:55:8d:
                    c9:34:61:4a:35:7e:ad:24:0b:0f:ab:04:7b:2c:fc:
                    e0:38:5c:da:b4:d6:51:e9:92:db:4b:e4:22:d5:f5:
                    88:a4:4f:1d:9f:ee:bb:92:0b:33:f2:d2:1c:ea:45:
                    59:78:1c:f5:0e:51:59:56:f3:e7:13:4f:b6:8f:fd:
                    c0:68:c3:cc:dc:05:93:b2:28:23:27:f7:13:0d:d0:
                    7f:4e:53:b1:73:fe:84:98:69:57:d7:cc:1b:6c:17:
                    27:f2:7c:f8:f6:bb:cc:60:8f:75:c5:e8:bb:f7:85:
                    62:89:4d:3a:86:1c:66:32:1d:24:98:68:53:68:ff:
                    0c:e3:b8:c0:88:2b:13:6e:8b:85:d2:de:c0:f7:76:
                    43:50:ff:14:15:70:75:69:c9:58:65:15:e9:b5:d4:
                    50:2b:f2:a0:8f:cc:65:d6:1d:06:14:cc:22:f4:57:
                    63:fe:51:76:51:9d:fc:1a:65:cc:d6:49:c1:a4:b8:
                    9c:78:ac:20:6f:64:ae:d7:30:94:97:47:c1:a8:a2:
                    8e:2c:97:9c:b6:1e:ac:c8:fb:2f:73:e8:ac:46:33:
                    a3:a7:64:75:33:25:10:65:5e:36:c8:75:a1:c0:42:
                    0e:dd:c2:b4:d8:3c:59:5d:35:b1:c1:2a:1e:a7:64:
                    8c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:20:2C:60:1C:BA:34:BF:1E:A6:B4:61:AA:51:E0:BB:EB:92:D5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dde9197c-4f20-3ee2-830f-50087fb88e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:fb:f7:19:17:60:33:e8:b2:be:56:3d:3a:52:3d:92:64:3b:
         b1:6f:fa:ff:98:f2:89:e3:fa:cd:3b:a1:ee:a6:f4:9c:bf:a7:
         46:a2:35:38:ef:7a:b2:e4:1c:c5:f5:37:59:ac:41:8d:21:22:
         7b:e7:39:15:62:ed:71:5c:50:8d:05:d1:be:60:d0:1a:8d:a4:
         cb:27:37:5a:f8:f3:f2:ce:3b:7d:81:1b:aa:df:02:a8:64:2c:
         7f:07:78:5d:94:3f:6e:30:a4:7f:40:42:94:a7:52:d1:6c:ed:
         57:0c:5d:c6:82:26:70:5a:8a:4a:e5:d3:f7:2b:8d:0a:02:12:
         db:88:84:9e:31:65:2e:28:7c:29:4c:e4:66:d2:c9:e1:bc:49:
         98:f8:46:a9:0d:98:c6:85:7c:81:15:6a:8b:af:9a:a1:27:e7:
         a4:e5:fa:88:33:ba:6b:14:68:42:97:8b:2a:3e:2c:13:5f:55:
         e4:4e:69:c1:77:14:22:b3:d7:3a:23:70:9d:58:57:8c:b4:f8:
         05:1f:69:02:6a:5f:30:fd:3c:b1:7b:f3:da:2a:28:ec:71:42:
         2d:51:1d:ae:73:28:41:a2:a0:d3:cd:89:b1:1a:54:2f:ab:26:
         73:a3:18:df:f1:d8:b6:31:37:d4:f5:6b:37:5a:ee:51:a1:48:
         4e:96:15:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----