Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/e8f8828c-2737-3899-8ab1-f67fb170a2f7.roa
File:                     e8f8828c-2737-3899-8ab1-f67fb170a2f7.roa (raw, json)
Hash identifier:          2ZESm2Cz+A3njFbvqO8WJRevRPenKddeIYSss3n0Bso=
Subject key identifier:   9B:CE:D1:57:03:BE:9A:0D:4C:38:C7:8B:7C:28:F3:A1:FF:CE:07:6A
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F432858430405945860D19C856BA303A8
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/e8f8828c-2737-3899-8ab1-f67fb170a2f7.roa
Signing time:             Sat 26 Aug 2023 18:46:40 +0000
ROA not before:           Sat 26 Aug 2023 18:46:40 +0000
ROA not after:            Fri 24 Nov 2023 19:46:40 +0000
asID:                     142632
IP address blocks:        23.247.170.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:04:05:94:58:60:d1:9c:85:6b:a3:03:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: Aug 26 18:46:40 2023 GMT
            Not After : Nov 24 19:46:40 2023 GMT
        Subject: CN=42bd1177-6b53-4e91-ad0d-f1c3f0fcd92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:22:70:8f:40:c9:fe:49:1f:bc:fc:34:3f:
                    d3:2a:4d:3b:89:e1:46:bd:db:fa:19:a2:68:1a:de:
                    22:33:7f:92:b3:80:e1:de:9f:b8:71:69:dd:b4:4e:
                    68:2c:09:6b:be:81:30:1d:2c:93:f4:ff:7a:97:70:
                    5c:8d:df:8a:56:aa:43:c6:a2:fb:47:c5:9d:f9:a3:
                    47:d6:39:5b:78:aa:c7:02:5d:02:17:52:c2:86:36:
                    e9:6b:ae:0f:2a:8e:11:76:6b:3c:08:2d:bc:22:5a:
                    5e:43:ad:1f:ec:a6:94:e3:aa:32:ef:1c:b9:5d:f8:
                    3b:24:9b:8b:bd:ac:cc:98:b3:2a:bb:e0:da:ad:14:
                    8c:97:9f:ba:b2:56:90:2c:0b:08:bd:f6:28:bd:76:
                    7f:66:4b:e2:53:cf:c2:9a:0e:d5:5d:3b:8d:1c:8d:
                    02:af:a8:39:c6:c3:a0:34:84:4f:0f:c1:f0:dc:4f:
                    07:f7:5e:77:32:3b:fb:d1:3e:fb:12:b0:a6:63:6d:
                    17:0e:0e:5e:de:26:0a:75:45:24:8b:4d:9c:39:03:
                    8a:c9:ba:62:c7:61:5c:87:51:75:4f:e5:6b:6b:8f:
                    10:33:cc:fd:49:07:b0:36:9e:35:91:e4:83:cd:e1:
                    12:72:fd:84:0b:02:c6:4c:e0:4c:d7:80:d0:c4:c6:
                    68:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CE:D1:57:03:BE:9A:0D:4C:38:C7:8B:7C:28:F3:A1:FF:CE:07:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/e8f8828c-2737-3899-8ab1-f67fb170a2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:da:79:1a:5f:9b:e0:cb:ba:d2:fc:68:f4:fb:51:90:5f:b6:
         1c:91:4e:13:6c:9a:5e:28:e8:09:5c:f3:36:26:08:02:0f:ce:
         bf:12:c6:3c:0d:5a:ee:d8:46:2d:8a:9f:fb:d4:e9:74:43:89:
         3f:9e:27:ce:30:2a:b2:7e:61:aa:be:d3:29:1f:0e:3c:6e:4e:
         1c:03:d8:fd:89:d9:da:45:63:97:01:76:f6:df:6c:cd:de:18:
         b1:af:8e:50:34:1d:04:f9:8f:55:9f:a5:41:8e:b9:ad:70:de:
         2d:56:18:40:a9:52:fd:31:8f:a8:87:6f:b8:69:99:2a:24:d1:
         1f:96:ed:d2:0f:ab:0d:66:1b:8a:3b:20:79:9f:5b:09:85:7c:
         39:e5:da:fd:cd:4b:5e:3e:bc:ac:b8:9b:27:a8:43:e4:99:7c:
         a9:81:ee:92:f0:4f:06:02:5e:4a:0f:ae:1a:7c:55:2f:8e:a9:
         22:50:6f:69:4b:f7:81:0d:e6:9b:fe:94:cf:62:1c:21:16:fa:
         c8:aa:9c:0a:4d:77:b4:bb:d2:ce:cc:d0:17:5b:27:26:70:ec:
         8b:83:32:05:16:dd:c5:b9:58:7b:d5:7c:f8:f0:20:b2:4b:7b:
         63:cf:32:f9:63:a3:9d:32:fc:4f:33:53:33:c2:51:99:41:f7:
         0c:4a:10:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----