Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/4a252bc5-711c-3661-a4ac-4a3c9b4e9fb9.roa
File:                     4a252bc5-711c-3661-a4ac-4a3c9b4e9fb9.roa (raw, json)
Hash identifier:          p4VZRxZde8kLhxeVuqNZfZRCTYbcHD2UiBqCaL657lo=
Subject key identifier:   B7:E4:F1:7F:EB:12:7E:F8:93:4D:AE:32:1C:BF:45:2D:D0:6C:D5:93
Certificate issuer:       /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial:       010D0C9F43285844AB975270E3229618D153FC38
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/4a252bc5-711c-3661-a4ac-4a3c9b4e9fb9.roa
Signing time:             Thu 25 Jan 2024 12:07:16 +0000
ROA not before:           Thu 25 Jan 2024 12:07:16 +0000
ROA not after:            Wed 24 Apr 2024 11:07:16 +0000
asID:                     400917
IP address blocks:        170.205.59.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ab:97:52:70:e3:22:96:18:d1:53:fc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
        Validity
            Not Before: Jan 25 12:07:16 2024 GMT
            Not After : Apr 24 11:07:16 2024 GMT
        Subject: CN=a3c76c30-5c1b-4e9f-87a6-af32db862169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:b0:a5:48:9f:97:0f:16:bf:8d:0d:c9:71:
                    b6:3c:15:13:fa:29:bf:d2:6f:95:78:01:1f:bc:23:
                    04:04:c4:10:04:f5:0f:44:fd:68:48:07:ab:18:ec:
                    7f:6f:87:10:47:c9:66:f5:b7:8d:96:34:cb:e5:f8:
                    61:94:3a:c0:fc:d0:19:46:de:a3:07:ec:fb:c1:84:
                    1c:3d:39:9e:ca:37:cc:ee:21:0b:08:84:52:32:db:
                    87:84:c3:e5:13:9f:96:5e:ae:7a:4b:d8:40:e2:48:
                    86:f9:0d:a8:24:c6:f5:22:89:43:14:49:d0:1f:6f:
                    52:4d:fb:a7:38:2d:c3:cc:ad:88:2c:67:52:e3:09:
                    03:b3:e1:a5:63:4e:23:b4:d3:58:bc:60:e6:35:fa:
                    c1:b1:7f:85:89:ec:60:ef:7c:05:d1:a1:7e:07:1d:
                    f9:39:0a:37:55:57:ad:99:66:98:a4:21:6a:75:c3:
                    c0:ff:35:f7:45:bb:a9:23:3a:60:62:3b:6b:ff:6c:
                    bb:60:98:f1:cb:47:fa:0e:47:7a:4b:a8:df:ba:a4:
                    44:d8:09:41:40:ae:0d:0a:52:af:d0:3b:fd:60:fb:
                    58:02:ef:41:77:05:50:76:25:fd:8c:51:1e:51:24:
                    41:2b:22:70:7a:e9:0c:d4:c0:71:62:c7:32:8f:d0:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E4:F1:7F:EB:12:7E:F8:93:4D:AE:32:1C:BF:45:2D:D0:6C:D5:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/4a252bc5-711c-3661-a4ac-4a3c9b4e9fb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl

            X509v3 Authority Key Identifier:
                keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:05:8c:9b:ac:8e:f4:e1:60:b1:c5:69:c1:74:26:a1:b6:a8:
         da:9b:37:38:77:c6:00:21:96:46:ad:b4:af:71:24:ae:f9:5c:
         52:99:01:f9:f4:06:58:8b:c8:4f:de:d7:44:d5:ce:ec:f7:60:
         84:d2:13:cc:7e:02:f5:c3:0e:a0:cb:90:be:b5:e2:68:e4:52:
         36:ee:29:12:9e:60:7f:10:0c:5c:29:6f:75:b3:a7:03:9e:5e:
         c5:c6:13:71:94:d5:b8:16:8e:e3:06:1d:20:a1:01:91:67:be:
         22:22:89:bf:00:b2:c2:bf:3d:be:99:59:47:d0:da:76:3b:2a:
         27:54:e3:88:d9:9f:02:2b:07:ba:77:49:53:b6:56:e1:f9:56:
         43:d1:31:fe:ac:0e:5e:2a:e6:dd:36:3a:2f:00:c3:3c:b8:ff:
         0d:51:af:25:62:93:91:0e:e5:6b:ea:21:d5:16:89:23:dd:5c:
         23:8d:88:9f:ff:9e:dd:93:44:d2:2e:28:ef:45:63:27:40:24:
         b6:15:e4:05:1e:4d:bd:f5:26:17:7d:d1:8f:ab:7b:c6:d8:bc:
         4b:a2:30:d2:d9:32:35:a6:3d:07:c2:c6:d0:54:ad:13:59:55:
         24:b3:25:6e:9b:61:0f:f8:c7:b9:fe:12:2f:71:d3:28:30:74:
         51:b8:7b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----