Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/ca2441a3-6db7-3e5a-8cff-9e5aa82e2cb8.roa
File:                     ca2441a3-6db7-3e5a-8cff-9e5aa82e2cb8.roa (raw, json)
Hash identifier:          doaapeveEejvSsstq8a2Gzg5ROCqx0VJoBQI+sCYXuk=
Subject key identifier:   97:44:DE:D1:9C:FC:8C:D9:E5:A9:2D:AE:95:62:AF:65:69:72:9A:82
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F43285844F4CD2207D939692E163B8A58
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/ca2441a3-6db7-3e5a-8cff-9e5aa82e2cb8.roa
Signing time:             Tue 20 Feb 2024 17:29:42 +0000
ROA not before:           Tue 20 Feb 2024 17:29:42 +0000
ROA not after:            Mon 20 May 2024 16:29:42 +0000
asID:                     33387
IP address blocks:        103.28.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:cd:22:07:d9:39:69:2e:16:3b:8a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Feb 20 17:29:42 2024 GMT
            Not After : May 20 16:29:42 2024 GMT
        Subject: CN=dfe1a6e4-a600-4ffb-95ab-c35d33d96d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:d9:91:ed:fa:70:4f:62:7c:96:61:fe:74:
                    d0:1d:9d:4e:8a:cd:97:1d:ff:8a:85:db:f0:22:09:
                    76:05:48:1b:40:3f:91:7c:fb:42:d0:4c:43:b5:ed:
                    46:54:88:46:5b:22:ba:4c:45:51:0e:47:1e:a2:e4:
                    e1:6a:5a:95:e5:cd:8a:95:7b:8b:c7:b7:34:c2:cd:
                    cc:9b:82:25:28:bf:a2:46:7e:ee:d6:b9:cc:5b:9f:
                    83:ee:71:ac:e6:df:ae:9e:09:8f:b8:95:24:20:32:
                    f5:1b:80:25:82:fe:df:a5:ad:25:24:51:38:35:98:
                    92:e3:ab:fe:e4:87:8e:ff:01:c6:4a:01:b3:62:6d:
                    b1:24:82:22:4c:e5:c9:ef:03:07:77:f6:d9:07:32:
                    f4:dd:15:1f:13:25:40:eb:53:8b:86:9b:0d:6e:b9:
                    e5:78:44:78:57:77:c2:54:02:b0:8e:01:f3:11:d7:
                    ab:24:68:af:da:6d:90:dc:02:6b:25:24:55:91:dd:
                    48:6b:23:ab:6e:24:74:35:9a:05:13:c0:b4:45:42:
                    3d:cd:ea:84:01:db:7e:51:69:83:8a:46:98:42:93:
                    9d:39:44:99:e1:e9:32:c0:5f:c6:af:d2:27:17:bc:
                    ea:fc:c2:c7:fa:4a:f5:0e:f3:7e:22:c7:4a:70:b6:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:44:DE:D1:9C:FC:8C:D9:E5:A9:2D:AE:95:62:AF:65:69:72:9A:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/ca2441a3-6db7-3e5a-8cff-9e5aa82e2cb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b5:0f:e9:d0:02:69:f7:68:d3:65:cd:4b:04:1e:47:ee:bf:
         ef:12:53:ab:65:16:46:e5:a7:d5:06:6f:88:99:f0:03:bf:95:
         a5:3d:a9:5e:0e:cd:88:e8:58:04:53:6a:40:5f:02:cd:36:bc:
         49:40:65:9b:48:09:e0:cf:d0:9a:ec:d8:f6:8a:3d:b8:4e:1b:
         e0:6d:28:6e:43:ec:58:76:4d:4c:87:67:76:ad:a6:cd:d3:6a:
         38:50:05:5f:d5:47:55:01:76:f5:db:ba:37:57:8a:8d:04:08:
         a9:cf:c6:f4:cf:84:09:b1:66:83:2f:82:fd:5a:45:e1:0a:15:
         ab:a2:52:e8:ba:5a:29:5a:ee:4b:53:8b:b5:eb:7d:9d:cc:5f:
         fb:29:51:0c:bd:75:98:f8:9a:16:25:5d:a8:16:f8:2d:2b:ae:
         ff:51:a2:73:82:7e:38:e5:94:16:9e:0e:a7:f7:30:b4:b4:9a:
         41:87:d1:c1:10:e0:18:ce:1a:c7:1c:c1:ed:a4:69:4a:ea:aa:
         10:ec:e3:c1:69:6c:af:d8:29:42:09:7a:9f:43:63:8f:df:15:
         7f:05:d6:4a:aa:9a:ca:28:28:8f:1f:61:db:8a:9a:51:7c:14:
         b4:45:e2:ab:c4:c6:a8:98:ac:43:16:a1:ee:d3:fb:c3:59:cf:
         ae:50:54:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----