Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/99c27089-fe6b-36c2-ba42-616e8bad85f8.roa
File:                     99c27089-fe6b-36c2-ba42-616e8bad85f8.roa (raw, json)
Hash identifier:          qHaRQ0cBV9bL2pm8JDwmnGs9iDQfUODxzfNzN7IWXC4=
Subject key identifier:   9F:4B:40:DF:DE:34:59:8A:8C:E0:D7:F4:22:E8:D4:39:B5:C8:A4:57
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328584466734284B4042B727E52C940
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/99c27089-fe6b-36c2-ba42-616e8bad85f8.roa
Signing time:             Sun 31 Dec 2023 17:43:49 +0000
ROA not before:           Sun 31 Dec 2023 17:43:49 +0000
ROA not after:            Sat 30 Mar 2024 16:43:49 +0000
asID:                     834
IP address blocks:        72.14.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:66:73:42:84:b4:04:2b:72:7e:52:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Dec 31 17:43:49 2023 GMT
            Not After : Mar 30 16:43:49 2024 GMT
        Subject: CN=0371bc96-dd7b-4646-b274-750f5c488031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:31:2c:eb:6b:3a:49:19:a4:b5:b9:6c:60:95:
                    0e:f3:5f:0b:06:40:47:6c:53:b3:4f:31:8e:dc:a9:
                    96:fc:02:d1:f5:31:02:98:71:52:6c:ba:da:74:b2:
                    f0:86:f7:25:a2:df:a3:d1:85:d9:dd:f5:bd:e9:5e:
                    87:51:22:d6:66:22:3e:b5:1e:c3:26:16:df:4d:0f:
                    45:da:d4:74:f3:94:d1:5f:d6:95:c4:a1:e4:1f:b0:
                    17:64:2b:ac:b4:8e:7f:41:4f:70:d9:63:80:0e:8f:
                    4c:95:19:c1:c0:30:b9:b0:dc:0f:30:29:7f:ae:a3:
                    67:b3:b5:dd:6b:17:da:ef:c0:fe:72:10:ad:f0:0a:
                    9e:f2:07:13:29:6e:26:49:f1:9c:50:f7:b6:31:fd:
                    ed:e3:9e:ac:db:ae:74:64:20:12:8b:9b:57:a3:8c:
                    ec:4e:bb:ec:db:a4:c5:f3:61:7b:36:93:85:0c:f6:
                    9b:54:ad:2e:0a:de:78:9a:bb:3a:d8:7e:52:f5:38:
                    3b:14:aa:58:bc:f8:0c:15:e3:22:31:77:9f:c3:c2:
                    7f:e0:ed:22:98:35:2b:1b:49:19:4e:08:07:70:8a:
                    ce:c6:28:a1:71:38:5b:e0:7f:7e:92:70:8f:08:ab:
                    fc:dc:0d:22:0f:c8:73:23:e9:6d:fc:e2:87:75:55:
                    bf:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4B:40:DF:DE:34:59:8A:8C:E0:D7:F4:22:E8:D4:39:B5:C8:A4:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/99c27089-fe6b-36c2-ba42-616e8bad85f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:e5:8c:4f:f1:30:fb:60:29:13:06:82:33:ec:ca:3d:95:
         3a:4d:27:b1:04:09:d9:4d:71:b5:61:1a:f4:b9:ee:24:ea:fd:
         7e:54:46:21:43:cc:d3:36:c7:e4:72:8f:65:ea:7b:74:39:d6:
         27:87:fa:6c:5b:38:48:2a:3d:d0:2d:ba:0e:e6:e0:e5:6b:f2:
         e4:ad:0a:77:6c:50:4e:b3:91:54:5c:bb:44:c4:83:10:10:66:
         75:46:17:b1:93:c4:4a:ac:4d:c8:50:d8:e2:0d:b8:a7:09:74:
         98:fd:d9:3d:c0:a7:41:e5:45:7a:31:af:0e:35:b7:1a:79:f9:
         ab:90:c8:d0:99:a4:b7:5e:55:b3:ea:39:d8:90:6b:cc:72:42:
         70:c3:31:c4:4c:71:9b:cf:f6:99:9c:9b:02:88:90:a2:f0:08:
         aa:48:89:7b:63:2d:d2:43:a4:7b:e0:23:70:a3:7b:c1:e6:66:
         f5:4a:8e:a0:a3:fd:cf:1a:d0:9f:9d:cb:85:04:a3:15:8a:96:
         61:06:13:4b:f1:ee:0a:25:38:50:41:77:da:00:13:b3:ec:63:
         19:85:f7:f5:dc:01:d1:65:72:60:e1:38:21:ad:79:cf:15:71:
         de:e7:49:90:9d:23:b6:e7:53:50:be:cc:e8:62:bb:7d:8e:e4:
         aa:c9:64:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----