Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/1a2cbdb8-3c88-35f3-9f66-5d3340c34606.roa
File:                     1a2cbdb8-3c88-35f3-9f66-5d3340c34606.roa (raw, json)
Hash identifier:          Dtnb8MGxYbAlOOxsahu27S1TTJezVv9s9MpdqaejT4A=
Subject key identifier:   94:48:E0:61:19:73:EC:33:0C:42:71:90:E4:D3:29:46:BF:1C:A5:33
Certificate issuer:       /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial:       010D0C9F4328584490432B39F63F447E611781C0
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/1a2cbdb8-3c88-35f3-9f66-5d3340c34606.roa
Signing time:             Mon 15 Jan 2024 17:10:53 +0000
ROA not before:           Mon 15 Jan 2024 17:10:53 +0000
ROA not after:            Sun 14 Apr 2024 16:10:53 +0000
asID:                     7018
IP address blocks:        199.255.150.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:90:43:2b:39:f6:3f:44:7e:61:17:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
        Validity
            Not Before: Jan 15 17:10:53 2024 GMT
            Not After : Apr 14 16:10:53 2024 GMT
        Subject: CN=7f116ff2-f09b-4a73-a691-4508d2a62dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:56:53:15:b4:2b:95:38:ac:c4:72:8d:ba:
                    65:65:f5:d7:a6:67:0e:69:34:ca:30:4c:53:bd:15:
                    bc:aa:02:d6:a3:d3:f6:9a:55:77:c7:50:9d:8c:01:
                    cb:8a:c9:fe:54:23:ea:8e:70:74:9f:f9:ca:ce:14:
                    08:32:68:11:ac:ea:39:3f:32:18:bb:f9:da:71:30:
                    c6:6c:48:9e:49:8b:b5:f1:d7:81:99:cf:af:d3:3e:
                    18:0b:a4:63:fc:bf:18:78:0a:5a:24:e2:a7:fa:8a:
                    79:90:6b:00:42:1f:e7:fb:c0:d5:5c:1e:58:ff:88:
                    71:5f:17:0c:d9:a1:49:36:72:ce:38:33:58:40:80:
                    5b:31:40:a0:bd:46:5f:fa:e2:13:0c:30:4a:c5:f7:
                    82:6d:6c:5f:42:bf:7e:24:b8:ec:84:c6:8c:a3:e0:
                    bf:93:8b:24:cc:34:32:82:60:94:31:aa:c3:9a:b3:
                    3d:15:b7:31:8b:9f:77:58:d6:ea:02:e9:b4:f9:fb:
                    df:71:6f:e0:11:85:12:b2:fe:7d:9c:c6:b0:b3:6f:
                    ca:a7:36:f5:2c:84:e4:c8:d9:4e:06:b1:df:b7:99:
                    c8:e6:b8:e0:4c:78:f8:44:28:a2:29:d6:bf:1f:2f:
                    d1:1d:78:d0:67:14:5d:50:cf:81:44:77:c0:d0:9f:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:48:E0:61:19:73:EC:33:0C:42:71:90:E4:D3:29:46:BF:1C:A5:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/1a2cbdb8-3c88-35f3-9f66-5d3340c34606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:60:3f:7b:19:14:e8:08:e0:3a:9b:92:2c:21:c4:00:24:e0:
         0c:4d:1c:da:1f:79:eb:40:7f:34:57:df:e4:09:86:da:63:b4:
         4b:0a:c4:c0:7f:7f:b3:eb:02:5d:d7:73:a9:8d:e5:66:a3:77:
         32:b2:a3:9c:23:72:69:ed:94:36:5f:40:0b:16:d0:fe:5b:cf:
         c5:71:c5:29:3a:e2:0e:8b:ee:44:37:b9:0f:71:30:2f:2c:67:
         72:5b:a2:df:0a:1e:b5:e2:df:c3:07:f8:26:d2:86:20:12:b3:
         d6:36:93:57:72:52:e1:87:9f:03:ac:5b:08:3c:0e:a1:37:e6:
         99:1f:88:bd:06:b9:b6:65:e7:17:f1:d3:4d:61:d5:b8:5e:d9:
         6a:9b:f7:c2:16:5b:8f:e3:af:b9:60:b7:55:31:0d:6c:b7:9c:
         81:36:57:5e:9b:47:a3:a7:56:69:a0:6c:ae:d0:2a:d6:94:4b:
         44:52:17:e1:ac:dc:d3:72:1a:37:06:bc:49:0d:9a:d5:9b:10:
         7b:45:18:d2:58:c6:46:9f:86:fd:25:14:27:57:b8:65:da:b9:
         a6:68:bb:ac:47:ed:db:98:49:8b:d6:ab:84:af:96:bd:83:0d:
         bc:85:51:2c:e0:c2:4e:0c:c8:0f:1e:e1:fd:9e:3b:a1:32:c3:
         25:c8:cf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----