Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/fc15ff6d-b3de-305e-ba73-c38f69085dff.roa
File:                     fc15ff6d-b3de-305e-ba73-c38f69085dff.roa (raw, json)
Hash identifier:          YiQ9k5ZO8dsURUAgPQWzvCMKGZYpnE1ni7CZqZeA8Ug=
Subject key identifier:   E9:B6:0D:E5:44:F8:51:30:B0:F7:A4:63:E7:FE:25:37:0C:00:8E:3F
Certificate issuer:       /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial:       010D0C9F4328584435296200C48AA3A0196B2880
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/fc15ff6d-b3de-305e-ba73-c38f69085dff.roa
Signing time:             Thu 14 Dec 2023 02:00:17 +0000
ROA not before:           Thu 14 Dec 2023 02:00:17 +0000
ROA not after:            Wed 13 Mar 2024 01:00:17 +0000
asID:                     205848
IP address blocks:        170.205.58.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:35:29:62:00:c4:8a:a3:a0:19:6b:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
        Validity
            Not Before: Dec 14 02:00:17 2023 GMT
            Not After : Mar 13 01:00:17 2024 GMT
        Subject: CN=a316d22e-c99e-440f-aece-75c16c8eb209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8f:cd:f0:b0:d3:7c:6a:b4:aa:d9:83:d4:35:
                    99:33:e2:cd:28:51:1c:60:9e:c1:9c:44:f2:7c:13:
                    23:ce:e9:49:9d:de:b1:6f:2f:7e:cb:1e:4a:51:e6:
                    e4:a7:d9:24:fc:d9:b3:5d:d5:79:d6:1b:65:ba:e8:
                    95:ad:fa:e2:7a:44:39:76:10:bf:ce:ae:06:c2:7d:
                    8a:f7:71:6c:30:5b:1a:ab:ae:33:db:6e:70:6c:19:
                    73:f9:2e:ab:1b:29:8b:e1:a5:b0:e7:47:ba:7d:ab:
                    1e:93:d9:ce:e6:71:c4:15:22:d9:ae:69:19:b0:b0:
                    8d:4f:51:29:63:7c:68:46:ef:f2:a9:ea:9f:cc:47:
                    49:da:11:09:d9:02:1f:6b:78:e7:66:8e:43:78:68:
                    70:fc:67:eb:e2:0f:2b:f5:fd:b9:cb:bf:24:98:1f:
                    87:42:f3:72:ba:f1:88:77:3b:be:06:5d:99:8a:77:
                    aa:e0:84:9d:00:d2:dd:43:0f:d3:43:1a:c7:cf:f2:
                    76:73:05:0d:dc:68:fb:bc:ae:67:04:76:61:9a:87:
                    7d:9d:a8:77:fc:b9:d9:ee:01:69:22:3a:71:b9:d7:
                    85:0e:6b:8e:93:c9:db:cc:92:27:05:34:78:6e:e6:
                    72:3d:bb:c6:6b:14:f8:6b:2c:78:f0:18:2c:cf:d9:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B6:0D:E5:44:F8:51:30:B0:F7:A4:63:E7:FE:25:37:0C:00:8E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/fc15ff6d-b3de-305e-ba73-c38f69085dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl

            X509v3 Authority Key Identifier:
                keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:2b:65:70:c5:ab:b5:a7:c8:db:f9:f2:4a:41:db:cc:80:d5:
         37:c8:fd:63:92:d8:ce:7a:bd:bd:da:ab:e1:d8:db:50:c6:e0:
         5e:6c:2e:d8:38:85:52:4a:38:10:ab:39:03:c8:2e:4a:3c:68:
         62:eb:d4:b0:7f:b3:6d:45:70:53:9c:4f:50:ca:d3:d8:b7:3e:
         db:70:07:9d:28:d9:41:02:c5:05:18:b5:36:7a:26:e2:01:e9:
         2c:38:a3:83:d2:a5:45:f6:e1:e7:c5:30:e0:a5:ad:64:ea:fc:
         8a:0f:94:c2:13:04:19:4e:04:9d:47:ed:96:d2:4d:1f:02:45:
         ef:eb:94:da:ff:7f:b1:10:d6:83:32:53:25:85:cf:e9:fb:c1:
         90:d8:18:35:26:f8:bc:b0:35:a6:b6:83:ea:84:f9:b8:15:07:
         19:ab:e6:ac:36:29:bb:04:fa:b6:59:35:ae:96:11:b5:4a:cb:
         08:c7:d9:b9:23:60:7f:fe:2d:2b:d4:99:04:02:ab:ae:c9:0d:
         03:e9:ee:7d:97:c2:fa:1d:ae:08:fe:c5:e5:d9:08:10:51:b4:
         4c:08:7b:9e:27:4d:ba:dd:63:66:a3:25:e3:2f:39:82:a2:52:
         c7:ce:c6:bc:84:a7:54:a5:a4:2c:9d:bb:d0:91:73:b6:fd:56:
         40:9f:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----