Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1c313a7a-1836-38bb-82e6-03b3c319db27.roa
File:                     1c313a7a-1836-38bb-82e6-03b3c319db27.roa (raw, json)
Hash identifier:          TM9IKpmPjqZ+5LMr0DrIYbkEUuaUuTGRkxFLYpX1Ou8=
Subject key identifier:   61:2F:8A:C9:90:B2:BA:13:F0:D8:18:3E:55:C5:F8:50:F3:21:9B:3B
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285843A836F7E073211B4A3E48C440
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1c313a7a-1836-38bb-82e6-03b3c319db27.roa
Signing time:             Tue 24 Oct 2023 14:18:45 +0000
ROA not before:           Tue 24 Oct 2023 14:18:45 +0000
ROA not after:            Mon 22 Jan 2024 15:18:45 +0000
asID:                     212238
IP address blocks:        172.94.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a8:36:f7:e0:73:21:1b:4a:3e:48:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct 24 14:18:45 2023 GMT
            Not After : Jan 22 15:18:45 2024 GMT
        Subject: CN=9f87a0ac-5d64-46d1-86b5-328dcb249709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a6:f8:b3:95:3b:68:00:54:e0:bb:6c:39:c3:
                    00:73:28:76:85:6d:c6:13:0c:ef:04:d8:55:6c:f1:
                    01:c2:67:1c:95:8b:4e:84:aa:c7:cf:eb:87:13:c9:
                    e9:b3:95:4a:3e:a8:95:c3:0e:bf:cc:0e:92:a1:d7:
                    cc:1e:f0:5d:13:97:ec:9e:52:95:fd:21:41:d5:75:
                    a2:12:13:0e:86:cc:34:a1:17:ca:96:d6:99:84:46:
                    b0:d0:b3:81:47:a0:07:ab:89:ae:2a:72:10:11:85:
                    41:19:38:48:94:b0:5a:f7:80:92:0a:9b:55:ce:7d:
                    18:10:79:80:78:ba:63:c1:7c:47:b1:33:65:75:c4:
                    8b:dd:2b:72:b4:1f:c8:fb:db:f8:78:34:df:86:64:
                    5f:f1:47:0e:25:68:ce:3f:82:e4:6e:b5:12:08:d1:
                    78:12:24:74:28:51:0a:69:fb:24:37:57:9f:97:8b:
                    ad:6f:55:0d:96:91:65:a2:0c:23:c8:f5:e4:76:b9:
                    73:54:3f:99:03:f0:ea:e6:52:47:79:b2:8a:58:5e:
                    a6:af:a8:18:5d:ee:44:2e:84:0a:e6:a9:c6:ec:f5:
                    cb:bb:c1:05:e7:de:83:bb:37:09:1f:7e:a3:2c:25:
                    fe:7a:00:0d:17:ad:df:89:56:d8:75:4f:f1:a3:19:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2F:8A:C9:90:B2:BA:13:F0:D8:18:3E:55:C5:F8:50:F3:21:9B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1c313a7a-1836-38bb-82e6-03b3c319db27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f7:0d:e1:f9:ea:ff:74:3e:77:20:69:5f:2f:5b:ec:8f:5c:
         0c:dd:df:b2:f6:22:be:28:6a:bd:59:83:44:46:48:6a:67:e1:
         ee:e6:cb:3f:ca:ea:3f:51:15:62:dc:35:bb:78:ec:a2:5c:49:
         1c:d5:7c:14:62:08:45:43:50:20:7a:61:8c:27:76:33:cf:c8:
         5c:e2:e2:d7:0e:93:12:fb:0b:21:dd:2c:db:9a:b2:59:39:78:
         65:57:dc:86:75:2b:eb:c2:1e:c0:55:5a:90:66:6c:fb:55:c2:
         2d:2f:f8:cd:2c:a4:61:ac:c7:7d:cb:03:f1:06:2c:53:9a:80:
         0c:76:b1:ed:25:3e:04:a4:de:b4:f6:ea:ae:09:fc:a0:4e:4e:
         e6:af:a7:aa:8e:de:21:47:e1:11:7e:ed:bd:ac:e4:9a:1b:07:
         95:cc:23:90:0d:84:57:5a:15:a7:6e:eb:7b:d0:e6:94:dd:fc:
         0c:cb:36:41:04:b3:14:70:42:59:e5:99:78:4f:65:7f:a0:84:
         c1:ae:c0:8a:8d:11:74:97:3e:a7:18:f6:ed:b6:cf:55:a6:ff:
         44:8d:45:1c:5a:0d:da:57:24:76:a7:f6:fb:38:34:39:98:ec:
         91:13:b1:e4:7d:a2:b5:31:d3:bc:ea:47:bd:12:f4:e5:ec:62:
         98:38:c6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----