Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e85b583f-385f-3cbc-b4de-f11515f5ad73.roa
File:                     e85b583f-385f-3cbc-b4de-f11515f5ad73.roa (raw, json)
Hash identifier:          +D7Bgs8WfZrzlIWFetktWo6s5tg5aO2phOtCr8PbR+4=
Subject key identifier:   E2:B3:C5:C8:8D:3E:D9:D4:DC:75:C0:67:C0:6C:9C:AE:C3:17:9E:93
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F432858435D66737A8BE310D0ACBC8200
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e85b583f-385f-3cbc-b4de-f11515f5ad73.roa
Signing time:             Wed 27 Sep 2023 19:08:48 +0000
ROA not before:           Wed 27 Sep 2023 19:08:48 +0000
ROA not after:            Tue 26 Dec 2023 20:08:48 +0000
asID:                     9009
IP address blocks:        216.158.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5d:66:73:7a:8b:e3:10:d0:ac:bc:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Sep 27 19:08:48 2023 GMT
            Not After : Dec 26 20:08:48 2023 GMT
        Subject: CN=107acedb-f942-42f4-a1e8-8f5b2dbcfd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fb:29:5a:b0:ae:65:c6:aa:6b:3a:a7:7f:b8:
                    2b:38:9c:62:26:4d:0c:4e:5c:11:3b:69:19:af:5b:
                    dc:42:0c:db:23:ae:b9:06:6f:01:91:45:77:51:8a:
                    e4:63:23:5b:53:b2:0b:f6:6d:6d:5a:41:6c:10:96:
                    0e:2d:98:7a:d5:f5:17:f4:14:cc:cf:ad:59:b4:98:
                    a6:68:84:36:16:81:f9:76:c6:92:96:cb:d3:17:ee:
                    d8:c1:28:14:0d:ca:25:3b:c0:0c:33:11:e4:2e:d9:
                    c5:2b:7a:3a:f2:b0:1f:87:6a:27:9d:81:22:18:02:
                    4f:30:96:a2:f7:3c:30:2b:78:85:0b:c4:b1:fb:48:
                    13:9b:54:27:04:42:8d:41:77:32:9d:8b:b9:24:69:
                    d0:60:c0:bc:89:f4:8a:62:f6:44:76:af:21:ed:cb:
                    a0:46:62:a1:b9:52:d5:18:84:2d:b1:b8:48:c4:96:
                    49:d1:cd:17:46:29:52:c8:cf:90:5f:86:9b:3d:1d:
                    17:51:04:1b:01:db:53:c9:f9:80:df:15:26:b2:f2:
                    91:b1:11:c4:25:95:d0:12:b0:f2:7e:3f:91:b6:57:
                    d3:50:a9:5a:b1:6d:e8:67:77:22:75:5b:e3:84:f0:
                    80:e1:f8:a2:81:84:73:b3:ef:53:89:9c:86:ef:94:
                    1e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B3:C5:C8:8D:3E:D9:D4:DC:75:C0:67:C0:6C:9C:AE:C3:17:9E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e85b583f-385f-3cbc-b4de-f11515f5ad73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:75:38:8e:29:b1:ef:70:4d:11:08:bf:ba:75:9f:0e:88:ed:
         09:54:73:80:c2:1b:98:ce:62:2e:3e:05:2b:74:49:51:60:17:
         3c:7e:f6:3d:d2:e9:e3:54:27:16:b4:9f:56:3d:71:8c:74:8d:
         27:43:5b:3a:38:b0:f6:89:b1:fb:48:5a:b2:82:7a:97:44:bd:
         82:ac:40:fc:33:e9:b6:5a:43:f1:dc:8e:62:49:54:98:15:e4:
         4b:1a:47:4e:a9:bf:88:af:6a:5f:d8:2e:bf:53:1d:52:21:6d:
         a3:99:26:e5:14:73:8c:21:94:2a:f2:30:13:e4:77:70:f6:0a:
         a7:68:d7:35:2e:04:84:18:4c:db:6c:f7:9d:d3:88:82:08:8b:
         f2:37:38:06:c8:9f:70:a7:a4:e1:af:3b:b8:8f:fa:7f:d4:32:
         34:3c:49:2b:da:05:61:0e:3b:84:2f:33:d1:bc:77:75:db:fd:
         48:f5:e3:a9:48:80:0d:61:20:d7:b4:99:8d:89:59:88:58:e6:
         d3:dc:e0:c2:3c:56:23:c8:7c:64:7d:7a:96:6d:be:02:c7:05:
         ad:a7:c8:64:96:a4:79:60:ca:0d:2f:47:e9:8c:01:75:95:e3:
         fb:d0:66:e7:7b:1a:b2:34:8e:4f:0f:ef:c1:a9:e4:2e:3c:82:
         a6:8b:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----