Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/fc1b7824-8059-3e1c-ac61-c0e95deb2610.roa
File:                     fc1b7824-8059-3e1c-ac61-c0e95deb2610.roa (raw, json)
Hash identifier:          jOMap3psKyFUzMoBogNWiN6PQ7HZ+OoGbMtelfuTniE=
Subject key identifier:   91:F7:78:46:05:A2:83:7B:CD:69:ED:23:9A:A7:A0:F6:B8:45:2E:03
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285842F6C9B7E1C8A70FC577783480
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/fc1b7824-8059-3e1c-ac61-c0e95deb2610.roa
Signing time:             Tue 22 Aug 2023 01:00:21 +0000
ROA not before:           Tue 22 Aug 2023 01:00:21 +0000
ROA not after:            Mon 20 Nov 2023 02:00:21 +0000
asID:                     3356
IP address blocks:        23.150.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f6:c9:b7:e1:c8:a7:0f:c5:77:78:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Aug 22 01:00:21 2023 GMT
            Not After : Nov 20 02:00:21 2023 GMT
        Subject: CN=50d0b244-0af9-4e9e-a077-bf9716afe5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:b7:0c:58:fe:ab:84:c2:0c:43:4d:3e:b2:
                    6f:bf:d1:c0:4d:f4:1b:62:56:90:e4:0c:6e:a9:49:
                    cd:8b:19:c7:5b:14:58:bc:ec:1f:ee:bf:6b:82:53:
                    ed:f1:f4:c1:4f:7e:74:df:50:5f:de:84:7e:e6:30:
                    2a:46:1f:e7:a4:8c:17:ec:e5:ab:79:d6:fd:8d:5c:
                    15:a1:5c:e1:fa:44:6e:c1:47:fe:03:0d:88:cd:90:
                    d4:88:2d:cf:87:f6:fd:8d:4c:88:eb:a0:e7:8a:66:
                    d7:8d:57:76:a8:5a:69:a1:44:bd:93:cf:e5:0e:13:
                    f7:b7:df:50:b1:83:3f:09:0a:89:84:e4:29:79:88:
                    35:90:42:12:f4:36:19:c3:4e:fe:af:e3:04:3d:9a:
                    7a:90:3f:f9:d2:09:a1:b4:af:98:78:8d:9f:fd:2b:
                    0a:09:28:e2:26:a6:5c:46:9a:8b:ee:7f:56:f9:10:
                    a3:48:97:fd:c8:fe:c2:df:86:37:b8:9d:cc:12:99:
                    6f:11:b8:fa:d3:b0:cf:09:df:9b:c2:ac:4b:bc:bf:
                    4e:39:e6:10:73:82:c0:4b:26:40:0d:cd:f5:60:7d:
                    41:3d:e1:c3:65:3d:1c:fe:ad:14:f5:52:08:b6:7a:
                    18:ff:2b:1d:7a:95:6b:6b:97:91:ec:f7:17:35:7f:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F7:78:46:05:A2:83:7B:CD:69:ED:23:9A:A7:A0:F6:B8:45:2E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/fc1b7824-8059-3e1c-ac61-c0e95deb2610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f6:dc:2b:8d:ef:8b:29:4e:07:79:58:24:38:5d:e5:8f:d5:
         9c:a0:05:d0:50:f1:36:07:dd:36:ca:87:3e:65:a2:ec:c0:dd:
         d2:1c:69:f0:a1:ff:3e:09:af:ac:58:3d:0e:6e:52:52:ae:d4:
         60:7d:44:ac:05:f2:37:0d:2f:c4:01:85:f3:9d:c7:8f:54:c1:
         78:c7:f4:97:e9:da:90:19:ca:8d:30:c1:51:94:66:86:c3:de:
         22:77:f9:25:05:2e:ef:1e:23:4c:f4:6d:9b:6c:82:eb:0c:af:
         60:72:c3:74:6d:ec:7c:f5:66:f3:d1:42:c9:5b:ea:6d:d3:3f:
         4f:3b:33:48:9c:d9:6c:0e:98:05:40:6c:37:6d:e2:37:36:3a:
         30:11:f1:c4:2c:bb:d9:8f:e9:7c:e1:c0:23:73:b6:bf:37:8f:
         76:e6:1e:55:07:04:ea:db:1f:41:5b:15:e2:71:01:96:ed:27:
         96:1b:aa:d0:58:e4:37:b9:36:a5:4b:6c:3e:a3:f4:d1:e7:a6:
         bf:8e:ac:ee:96:99:e6:3e:2b:81:ad:c8:07:86:67:42:ab:06:
         e0:aa:d7:fb:de:40:f1:c7:72:8c:6f:40:fd:a5:68:ec:9d:2f:
         bf:87:58:8f:7f:41:45:f3:6c:dd:b1:5b:6e:a0:e6:f0:2e:f0:
         8d:05:0e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----