Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/0ca44ab0-5375-3c57-9c41-911ee5dde844.roa
File:                     0ca44ab0-5375-3c57-9c41-911ee5dde844.roa (raw, json)
Hash identifier:          hx1Sv/HXmGbgPqhASQIILB3eGef4KeeqJOIUIEHEx90=
Subject key identifier:   A9:9A:69:0B:DE:C0:68:C3:56:47:7E:71:93:65:ED:EF:70:87:35:24
Certificate issuer:       /CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f
Certificate serial:       010D0C9F4328584307144592F065ED1C35B017F0
Authority key identifier: B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/0ca44ab0-5375-3c57-9c41-911ee5dde844.roa
Signing time:             Sun 27 Aug 2023 21:03:42 +0000
ROA not before:           Sun 27 Aug 2023 21:03:42 +0000
ROA not after:            Sat 25 Nov 2023 22:03:42 +0000
asID:                     394915
IP address blocks:        205.220.219.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:07:14:45:92:f0:65:ed:1c:35:b0:17:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c6d301-f2b8-4ca1-a0ee-de814409c55f
        Validity
            Not Before: Aug 27 21:03:42 2023 GMT
            Not After : Nov 25 22:03:42 2023 GMT
        Subject: CN=9201c512-c55a-44a5-85b7-0cc119741972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:bb:da:74:e7:56:d5:9e:dd:e8:44:25:0e:
                    3d:80:e2:fb:07:b4:33:4f:da:ef:93:88:1b:9d:b2:
                    d6:0e:f5:eb:81:84:a8:3d:45:04:ed:ee:a2:23:a4:
                    42:09:78:45:b9:64:a2:dc:42:8c:67:60:22:16:ac:
                    2e:ed:cd:18:7b:c9:a8:bf:bc:31:04:5d:51:29:29:
                    94:d0:8f:fb:a0:8e:06:de:6f:ff:a4:5f:aa:fb:da:
                    61:08:e2:83:16:c6:1a:56:bd:f6:aa:1b:49:9e:e4:
                    2e:f7:8e:23:68:69:eb:a1:5a:e7:be:75:50:9f:ce:
                    c0:ec:5f:19:b9:df:aa:c6:be:9f:e3:bd:00:28:ce:
                    e1:3f:e0:bd:71:29:6b:21:16:1e:66:88:ef:46:a2:
                    33:72:e7:96:45:7b:a7:ec:ed:1e:66:88:e6:22:ba:
                    8f:0d:f0:ba:30:50:9e:e8:7f:26:08:05:13:8b:8b:
                    ed:74:25:86:d4:76:80:3c:a9:9a:39:da:16:87:44:
                    37:be:4b:b6:ce:88:c0:f2:44:da:d8:1c:fb:ec:30:
                    9e:5e:f7:17:79:5f:e4:29:e2:ed:b0:58:56:16:66:
                    bd:97:80:67:83:c6:f2:98:bd:99:41:fa:99:6f:21:
                    bd:44:42:b7:a9:bd:d1:07:28:30:e0:93:84:47:d6:
                    08:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9A:69:0B:DE:C0:68:C3:56:47:7E:71:93:65:ED:EF:70:87:35:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/0ca44ab0-5375-3c57-9c41-911ee5dde844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f/47c6d301-f2b8-4ca1-a0ee-de814409c55f.crl

            X509v3 Authority Key Identifier:
                keyid:B8:9A:36:FC:E5:12:9A:4A:E1:0A:DC:00:86:2C:AD:D5:DC:FF:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47c6d301-f2b8-4ca1-a0ee-de814409c55f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5b:96:e0:c8:b1:ec:9a:44:9d:78:16:f2:50:b4:aa:c4:d1:
         a5:5c:4f:65:a3:61:03:41:73:45:53:28:22:4a:fe:5a:15:e6:
         3c:07:f0:24:78:06:2b:e0:f2:02:5e:2e:3e:7e:e0:0c:b7:0e:
         36:fe:aa:18:8f:fd:1e:c7:be:05:60:02:b5:1a:85:fd:93:7a:
         d3:1b:aa:94:01:76:82:ae:4b:30:3e:0e:06:dc:5b:41:da:37:
         02:e4:44:7e:9d:b3:49:61:99:d1:6f:01:27:02:fe:8d:7e:8c:
         cf:ba:2b:6d:76:f5:f6:02:f4:a1:94:ac:c8:e8:94:d5:57:f9:
         2e:45:6c:1f:01:63:bb:a1:1c:d2:9a:58:5b:9a:ec:3c:7d:3b:
         b4:36:d6:ed:b3:3e:9b:b7:99:28:52:79:da:60:32:fe:6a:42:
         84:06:9a:80:b8:00:0d:33:f7:21:b9:7e:04:24:e7:e4:a7:0c:
         b6:ce:c6:99:b5:d1:d4:d6:dd:20:27:1d:1d:68:b4:0e:50:50:
         06:c1:52:43:ca:c1:d9:b8:a6:b3:8b:49:1b:b9:99:91:4d:96:
         1a:e6:ec:db:5c:ab:5e:c9:e4:d4:71:38:f4:6e:37:94:7a:7e:
         58:b9:14:eb:61:d7:d5:d8:4b:b8:2e:01:e4:47:79:43:c8:47:
         d6:a4:ee:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----