Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5ca899-accf-39d9-8471-848c2dea5d3f.roa
File:                     0c5ca899-accf-39d9-8471-848c2dea5d3f.roa (raw, json)
Hash identifier:          OY/9ev9g/JMkiP8vDJ5D2Scpk/d7k+jqbuWP3jnGXE8=
Subject key identifier:   39:C3:AC:31:DA:80:A1:72:BE:F2:96:98:37:6C:60:85:6A:FE:79:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A74058EBDB369801052F880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5ca899-accf-39d9-8471-848c2dea5d3f.roa
Signing time:             Fri 29 Nov 2024 13:58:44 +0000
ROA not before:           Fri 29 Nov 2024 13:58:44 +0000
ROA not after:            Thu 27 Feb 2025 13:58:44 +0000
asID:                     396612
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:74:05:8e:bd:b3:69:80:10:52:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:44 2024 GMT
            Not After : Feb 27 13:58:44 2025 GMT
        Subject: CN=15b217e9-84e1-4a6d-97d6-26a109a5d04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:00:f2:a1:3d:1c:12:d4:70:cf:f8:42:93:
                    89:80:8e:84:1a:2d:9d:b3:5a:f6:9e:12:31:c6:cf:
                    f4:af:23:0f:ab:8d:47:bd:ba:8c:93:70:f1:49:ea:
                    09:32:a6:17:3d:84:e8:e3:15:aa:d1:ed:a3:f4:cc:
                    4b:6a:51:38:31:06:cd:b9:00:ab:0f:52:81:ab:e8:
                    81:13:73:a1:d4:69:f2:b4:c1:14:51:27:b7:d1:1e:
                    c2:b4:0a:27:68:b1:bb:a7:ab:8b:2d:ee:d5:dc:cf:
                    ea:5d:55:1a:22:97:e2:87:b6:82:5d:98:70:36:7c:
                    e2:36:4f:63:4c:75:e0:33:f2:95:88:04:55:e3:1e:
                    80:82:3c:b9:7e:18:26:26:fb:64:4f:52:0d:3c:8e:
                    6c:c5:ee:78:12:dc:71:04:4c:ec:83:24:55:b8:5b:
                    1e:bf:df:d3:93:4f:f7:86:eb:02:c6:5d:1a:47:32:
                    2f:cf:31:66:c2:8b:ee:81:92:c9:0f:72:35:2a:12:
                    8b:38:09:bc:2a:81:84:2b:61:7d:48:47:d6:c3:0b:
                    e7:67:74:ae:9a:d3:6d:37:d4:63:b9:22:bf:5b:9d:
                    b4:4c:47:07:45:31:26:12:72:c0:0e:6d:4f:b3:d9:
                    b6:84:8b:09:9b:b2:56:b1:4c:9e:fd:23:96:00:b7:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C3:AC:31:DA:80:A1:72:BE:F2:96:98:37:6C:60:85:6A:FE:79:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5ca899-accf-39d9-8471-848c2dea5d3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:73:f2:c9:3e:13:59:6f:d3:5b:0a:b4:13:ce:11:d8:38:
         83:b7:dd:f5:cd:86:a5:b9:49:0c:0a:25:fe:54:8b:62:a2:6c:
         fb:04:67:ab:07:68:ef:66:cb:08:a6:5f:76:c0:a5:3b:53:7a:
         f5:d9:4b:ff:27:b2:67:35:fe:04:cb:5f:1d:07:ba:2b:75:c9:
         7f:b0:88:2e:7a:89:d0:e4:d0:0e:22:a8:c0:13:6f:5d:60:91:
         52:11:34:0e:36:4f:82:68:d0:97:47:a0:32:c8:7b:34:bb:89:
         80:34:fb:6f:4a:33:1f:98:b0:36:bb:36:ea:f9:ee:83:76:05:
         89:b8:67:fb:7e:c0:01:ac:04:cb:20:f5:14:7e:0e:d4:67:8e:
         a0:cc:5f:9a:61:e1:83:f8:d5:fe:74:ac:7a:0a:fd:48:b0:60:
         f8:93:98:6f:d5:fa:64:af:a4:00:92:56:bf:74:52:ab:76:97:
         f6:89:eb:3f:31:4c:0a:45:bd:c5:53:d5:5f:d1:26:d0:a9:a5:
         a0:56:96:98:98:fe:9f:54:41:bc:00:70:c8:1c:be:dc:ba:eb:
         bb:9a:41:33:96:ac:05:03:bd:26:c9:a7:8b:a5:f9:a0:3c:59:
         cf:09:66:c4:4f:b0:95:97:66:a4:e7:0e:86:7e:53:f6:e5:ef:
         b5:76:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----