Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a774ad8d-4df1-3dd1-bdee-6609a701bcc3.roa
File:                     a774ad8d-4df1-3dd1-bdee-6609a701bcc3.roa (raw, json)
Hash identifier:          IAx7uqpTKLgwHH6gixDggv4c5pjHoC7BqHFSSUVgl1U=
Subject key identifier:   73:4E:DB:BF:7C:D4:CE:1C:93:B6:C2:4D:99:D9:2F:B0:42:F5:A4:D5
Certificate issuer:       /CN=13fecd24-0da7-4140-9636-71a72de851ec
Certificate serial:       010D0C9F43285843EDF8F369E1F6A460EF054B60
Authority key identifier: 71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a774ad8d-4df1-3dd1-bdee-6609a701bcc3.roa
Signing time:             Sat 18 Nov 2023 14:00:20 +0000
ROA not before:           Sat 18 Nov 2023 14:00:20 +0000
ROA not after:            Fri 16 Feb 2024 14:00:20 +0000
asID:                     396871
IP address blocks:        137.83.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ed:f8:f3:69:e1:f6:a4:60:ef:05:4b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13fecd24-0da7-4140-9636-71a72de851ec
        Validity
            Not Before: Nov 18 14:00:20 2023 GMT
            Not After : Feb 16 14:00:20 2024 GMT
        Subject: CN=fdf3dda4-caf2-46ef-8d10-09842355b608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:20:cf:ae:6b:6f:69:84:6f:78:22:d2:eb:5d:
                    53:6e:66:0f:f9:3a:1a:62:38:a9:61:65:19:44:28:
                    47:e9:a4:60:39:cd:bd:e1:c1:e4:7c:f4:e4:3f:7f:
                    a0:6e:bb:08:5b:46:c4:2d:5c:66:50:e3:3b:85:29:
                    84:d4:28:70:ef:c3:80:3a:b5:b8:83:54:12:f9:0b:
                    3c:c7:f9:3a:72:e0:96:98:60:c5:7e:57:f7:5e:ae:
                    32:1d:b3:f8:70:f0:8a:2c:28:58:44:99:bf:57:05:
                    f9:6a:af:a5:24:6b:95:94:c7:c1:f3:5d:93:26:16:
                    db:20:32:67:7f:0f:2c:b2:c6:5f:26:ff:73:c0:de:
                    85:f8:5e:00:76:92:39:1b:26:2d:a8:49:55:31:f6:
                    7a:a7:06:5b:21:f2:df:6e:f0:06:19:88:15:d5:da:
                    16:f9:76:30:ae:f0:95:fe:69:5e:dc:21:21:7c:59:
                    20:11:79:1b:1c:c7:da:7f:f7:76:fe:24:3d:29:1c:
                    b6:5f:8b:6e:9e:e5:6d:cf:df:80:9a:10:fd:7f:c6:
                    a4:f5:f8:ab:27:da:30:04:0a:42:48:78:98:13:c4:
                    60:ee:cb:d5:39:45:18:97:76:f9:01:b5:9e:ee:fa:
                    59:47:af:5e:c1:8f:2a:3d:37:60:0a:cd:9b:00:9c:
                    5f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4E:DB:BF:7C:D4:CE:1C:93:B6:C2:4D:99:D9:2F:B0:42:F5:A4:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/a774ad8d-4df1-3dd1-bdee-6609a701bcc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec/13fecd24-0da7-4140-9636-71a72de851ec.crl

            X509v3 Authority Key Identifier:
                keyid:71:FB:07:EC:96:DD:BA:1E:51:4A:24:E7:48:C8:35:54:36:D1:14:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/13fecd24-0da7-4140-9636-71a72de851ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ad:4d:bd:20:63:45:73:4d:8d:bb:c2:93:8c:8f:5a:eb:f7:
         bc:41:de:d5:00:8e:45:1e:31:8a:24:a4:80:c3:0d:e1:ce:97:
         1e:c5:84:f5:2a:78:fb:ed:59:6a:2b:a4:40:2e:42:67:67:cc:
         6a:a0:7e:b9:24:48:8f:0e:ce:09:01:bf:4d:a7:99:48:a2:52:
         54:94:c2:62:d6:03:8b:45:22:43:50:85:e9:22:dc:ec:d2:3c:
         69:10:cf:15:41:77:78:c0:fe:80:61:cd:98:15:9f:21:41:3f:
         ae:d1:8d:76:5e:44:67:00:30:43:54:05:1c:94:1b:33:46:36:
         04:93:14:d3:03:ad:b9:1a:4b:85:4d:fc:e2:89:9a:bf:6d:96:
         58:11:3e:49:3b:7f:d0:09:ae:8b:18:8a:ac:89:e8:0c:74:b1:
         0f:86:1d:ee:9e:b3:36:cd:bd:59:ae:42:d7:a4:18:ed:c9:23:
         4a:a1:e7:b8:dd:8f:e8:f8:09:57:e7:81:fa:37:15:00:3d:69:
         6c:b8:9d:94:8f:69:e0:27:ba:8f:92:0b:4d:70:37:2f:e9:34:
         a0:e0:ee:ca:8e:86:66:85:53:62:e9:24:88:7c:58:6c:9b:00:
         35:a2:a8:70:63:74:e6:99:b2:63:e2:67:5e:26:e4:28:99:e5:
         2a:71:86:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----