Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/25feb8f7-3bee-3f9a-8404-d876c23e84b8.roa
File:                     25feb8f7-3bee-3f9a-8404-d876c23e84b8.roa (raw, json)
Hash identifier:          WvnWbis6ayPZXO/7Qq2Ar7YqA2ALtwheS3SN2XE/em0=
Subject key identifier:   A2:29:D8:61:68:7A:4A:D9:4B:1E:0A:EC:99:96:E2:F3:B0:D0:20:D8
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F432858430E3E43CBF546E2D91470C580
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/25feb8f7-3bee-3f9a-8404-d876c23e84b8.roa
Signing time:             Wed 30 Aug 2023 10:38:58 +0000
ROA not before:           Wed 30 Aug 2023 10:38:58 +0000
ROA not after:            Tue 28 Nov 2023 11:38:58 +0000
asID:                     396356
IP address blocks:        45.59.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0e:3e:43:cb:f5:46:e2:d9:14:70:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Aug 30 10:38:58 2023 GMT
            Not After : Nov 28 11:38:58 2023 GMT
        Subject: CN=f7013b3b-2c0b-486d-a3ba-e06b9ea18868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:26:8b:13:eb:d9:1d:c6:32:0d:05:1b:ad:38:
                    32:35:9b:51:35:72:0a:a1:12:f4:06:78:21:03:4b:
                    24:b8:81:a0:d6:5f:5c:f9:5a:a8:d0:e9:25:c4:b8:
                    db:67:15:ea:d4:22:d2:5e:c5:1d:b8:0d:8d:2f:5d:
                    e1:d0:45:47:3a:96:79:61:50:1a:0f:9e:45:90:80:
                    86:f1:f1:4c:0e:75:6b:1d:46:e6:ea:7d:da:a2:8a:
                    40:f7:a6:89:c2:54:51:c1:cb:5b:12:ab:86:4c:08:
                    32:1d:9b:d1:18:3f:50:49:54:74:80:2c:13:ee:f0:
                    85:55:65:a5:fa:05:c2:bd:08:b4:6f:c9:ee:2c:b8:
                    1b:94:c1:69:79:49:bc:b8:f3:62:dd:18:e2:e8:37:
                    fa:dd:c8:25:f7:17:a1:e8:44:87:31:52:cd:3b:d5:
                    32:0c:5d:43:7f:31:30:9f:12:0c:e5:ed:e7:f9:56:
                    41:cc:cd:a9:d7:10:fb:af:4f:fc:89:f5:29:61:94:
                    f2:68:5a:a4:59:52:12:18:5c:2f:f0:dd:97:85:15:
                    5c:03:5e:b0:98:e7:a5:a2:c5:b9:b9:73:48:6d:70:
                    f0:bd:e7:61:bf:99:92:1e:f3:84:d3:b7:d2:ea:9c:
                    8d:4f:65:33:57:8b:51:45:cb:2f:90:ab:6b:00:7c:
                    03:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:29:D8:61:68:7A:4A:D9:4B:1E:0A:EC:99:96:E2:F3:B0:D0:20:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/25feb8f7-3bee-3f9a-8404-d876c23e84b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d7:7b:69:4f:82:80:eb:7f:d9:ac:2d:1a:62:19:96:c2:8d:
         4d:1a:62:19:75:fd:37:bc:03:b5:5e:79:b9:be:94:68:cb:4d:
         d6:6a:85:22:72:0a:c9:0b:ec:8c:a0:05:d9:b4:71:59:ed:74:
         6a:c6:4a:a2:3c:38:0f:4e:6c:e3:af:f9:6f:e9:30:db:f2:fc:
         5d:9b:a0:13:96:97:c5:2d:b8:b1:95:5a:ef:28:0b:d6:6f:3d:
         d1:d4:3d:64:a7:f5:16:ff:9a:02:8a:72:af:10:d8:a9:02:a8:
         b3:ea:a5:ee:7e:15:4b:0b:24:20:b7:08:81:5b:fb:a2:51:a9:
         bd:4f:bd:e5:bf:ea:3c:5e:b0:ce:c6:79:81:ee:9a:73:a4:f1:
         81:69:01:56:4e:4c:66:6a:e8:b3:1c:0f:b4:c3:6b:37:43:3c:
         d2:47:ce:80:e1:53:50:94:b8:39:c5:ca:67:cf:8e:94:e9:23:
         c8:20:ce:ef:9e:d1:b5:ae:7d:e5:0f:e7:f2:b0:97:f9:b1:21:
         1d:46:4e:43:51:d1:a8:aa:9d:2f:fa:22:a5:47:21:1d:ca:ac:
         ab:a1:e1:a5:6b:ec:72:f9:2c:06:49:8d:4a:20:47:31:bf:8a:
         a9:ca:ce:11:f7:12:26:ec:18:5f:cc:12:ac:9c:5f:de:a7:5f:
         77:07:7b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----