Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/c10d5517-7ada-3dc1-8d3a-551bbda0d3d5.roa
File:                     c10d5517-7ada-3dc1-8d3a-551bbda0d3d5.roa (raw, json)
Hash identifier:          JauaPBRLVVdfoKN5deEQqIOKbFD6uVmj7Yg7vmRAmdk=
Subject key identifier:   D4:DC:86:91:15:1D:D5:B1:C2:00:97:27:16:8F:D4:F2:9A:0F:2D:5E
Certificate issuer:       /CN=25ec66d9-6873-4655-8a15-555b07c2edb4
Certificate serial:       010D0C9F43285842F56452600AB20A3356C31880
Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/c10d5517-7ada-3dc1-8d3a-551bbda0d3d5.roa
Signing time:             Mon 21 Aug 2023 13:00:24 +0000
ROA not before:           Mon 21 Aug 2023 13:00:24 +0000
ROA not after:            Sun 19 Nov 2023 14:00:24 +0000
asID:                     14618
IP address blocks:        203.20.242.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f5:64:52:60:0a:b2:0a:33:56:c3:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4
        Validity
            Not Before: Aug 21 13:00:24 2023 GMT
            Not After : Nov 19 14:00:24 2023 GMT
        Subject: CN=8dbc711d-be54-4a03-aa50-7f97546d278e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9a:ca:b6:11:6c:81:8f:6f:4e:e5:1a:85:37:
                    5a:20:cc:84:f9:2b:11:93:ed:fe:27:81:24:0b:1c:
                    49:09:ac:c2:1a:24:2e:ea:14:37:62:6d:ed:72:d1:
                    5a:c3:0d:54:5a:eb:c8:77:90:1c:8e:8e:da:13:02:
                    16:49:d9:bb:87:09:18:0f:c2:a8:97:7a:28:11:bc:
                    a4:c2:ae:d7:94:d4:df:1c:dc:a3:f4:77:e6:b4:07:
                    1e:d4:44:76:af:aa:19:e5:37:87:8b:cc:c6:6d:1c:
                    08:2d:60:fa:ee:82:7f:f2:d7:e6:18:55:70:d1:dc:
                    35:d4:c0:c9:0b:11:52:e2:6b:fe:00:81:53:6a:99:
                    dd:b0:28:00:82:e0:b7:da:e6:ba:a1:9c:67:a1:d8:
                    d9:5f:83:46:5b:92:1c:ff:08:69:7c:2d:31:15:e2:
                    f3:31:d9:50:ce:a3:39:e2:55:25:85:50:54:48:e3:
                    7b:1f:c7:47:e2:62:61:ac:1b:0a:7a:05:6c:d3:16:
                    1e:2f:34:a7:56:39:7b:1c:45:70:fd:60:73:97:45:
                    ea:58:7f:15:35:ff:f8:df:96:a4:2d:eb:95:36:6a:
                    0e:26:f1:ad:38:01:b4:e9:8d:77:cc:52:7a:f0:f9:
                    0e:79:ad:32:66:c6:a7:5c:9f:fe:58:51:dd:ad:de:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DC:86:91:15:1D:D5:B1:C2:00:97:27:16:8F:D4:F2:9A:0F:2D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/c10d5517-7ada-3dc1-8d3a-551bbda0d3d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl

            X509v3 Authority Key Identifier:
                keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.20.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:52:65:45:8a:3f:42:06:75:ce:4c:1a:ac:a1:d2:68:d3:78:
         b8:55:f4:08:54:c8:39:38:c9:84:50:4d:a1:d6:a6:7c:93:85:
         7d:7d:ba:b5:f6:4f:9a:bc:8f:df:0d:01:dc:8a:fa:9a:92:0c:
         d2:d5:5f:45:a0:19:1c:1c:34:57:41:19:8b:52:90:fb:db:4a:
         be:98:95:ba:f9:92:fa:22:a4:d4:48:c2:ec:0b:9f:81:30:82:
         32:dd:1a:b7:a9:49:58:f3:cc:75:7d:d3:9c:6b:cb:3e:f4:86:
         63:c3:d5:ba:46:28:f5:88:6e:81:f8:88:8e:ff:e8:44:15:e2:
         d5:b5:1d:06:26:4b:f5:8f:7a:5c:e1:5b:27:14:c3:3a:8d:7c:
         87:7e:f4:e9:ca:74:bb:4c:5b:16:71:01:d1:82:c5:de:d1:5f:
         aa:bd:00:11:a0:c7:ea:1e:ce:3f:69:0c:fc:de:85:55:79:5c:
         0a:bb:76:2a:0d:a2:26:c2:26:b9:ba:5a:a5:16:35:3e:56:a2:
         71:44:2c:b2:10:0d:68:38:35:86:ac:d9:36:6c:fc:11:d2:d9:
         64:79:f6:2e:cd:af:ed:fa:d5:da:1f:44:69:b1:49:1a:c4:c9:
         1c:f9:f9:d6:4a:34:cf:f9:56:bb:d8:3f:86:f8:3a:2a:21:2b:
         48:3b:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----