Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a497f93-7e9b-3b16-819f-3264dcf69904.roa
File:                     5a497f93-7e9b-3b16-819f-3264dcf69904.roa (raw, json)
Hash identifier:          ++Tm60tfVAtFJwYe1hYiIhVJqziyL07A+ATjxnPQTKo=
Subject key identifier:   C0:78:6D:CA:A7:CB:25:E4:61:8C:03:63:71:3F:30:BD:53:41:99:B0
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285842F82C1852293D4F924BBD1E00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a497f93-7e9b-3b16-819f-3264dcf69904.roa
Signing time:             Tue 22 Aug 2023 12:54:35 +0000
ROA not before:           Tue 22 Aug 2023 12:54:35 +0000
ROA not after:            Mon 20 Nov 2023 13:54:35 +0000
asID:                     9009
IP address blocks:        104.250.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f8:2c:18:52:29:3d:4f:92:4b:bd:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 22 12:54:35 2023 GMT
            Not After : Nov 20 13:54:35 2023 GMT
        Subject: CN=05398ad5-d113-4e96-b491-5bb5ed298c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2c:8b:8a:6a:44:33:c8:33:19:0b:db:2e:f2:
                    7c:79:9d:64:0b:27:a9:02:4e:18:a3:9f:f2:df:a7:
                    7b:fe:4c:46:0a:84:63:63:b4:37:0b:4b:8c:89:a3:
                    f7:2f:61:82:ec:78:00:3b:f9:e7:fe:d5:38:b2:47:
                    01:a6:b8:00:65:fc:71:95:ce:3b:32:e3:9c:b1:39:
                    99:f5:2d:86:9d:95:52:7f:db:3a:d3:e3:35:15:90:
                    f3:35:a3:39:5b:7b:bf:5c:f6:78:a6:f8:83:27:fe:
                    6f:9f:d0:65:46:87:d7:4f:8e:eb:82:f4:f9:dd:1f:
                    2c:e1:d2:8e:71:5a:c0:59:94:31:ce:b6:6b:aa:e7:
                    0f:39:5b:9d:cf:dc:a6:b5:ad:03:fd:03:f0:a0:e2:
                    91:1c:c7:fb:48:24:67:59:98:aa:36:5f:0d:f8:18:
                    db:52:2f:9d:96:2a:ea:07:92:ab:92:1e:8a:2c:23:
                    38:4b:44:25:7e:d3:95:f8:66:95:8e:0f:82:c9:8b:
                    68:a3:95:70:f8:7a:80:ec:8e:42:e8:11:a4:17:93:
                    0f:1c:d6:50:5b:25:7c:6c:22:9c:2d:72:16:0a:bf:
                    2f:30:69:70:e1:82:90:74:5f:c7:bc:9f:c8:6e:72:
                    0f:a3:65:37:c2:6a:65:99:aa:eb:c9:a9:6a:67:fc:
                    d1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:78:6D:CA:A7:CB:25:E4:61:8C:03:63:71:3F:30:BD:53:41:99:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5a497f93-7e9b-3b16-819f-3264dcf69904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:05:b5:ed:45:35:85:b3:a2:ba:8f:6e:3f:35:5f:e4:8c:8e:
         84:43:3a:e2:2d:41:2c:84:19:05:d1:f1:d7:9a:f0:5e:0c:0c:
         39:8f:2f:a7:a0:ea:b4:3a:f4:87:0e:d3:8e:9d:56:be:fb:7c:
         b8:65:4b:6c:65:32:a6:1a:ff:3a:10:20:87:bb:c6:8a:d1:16:
         df:35:f8:4a:59:6b:77:0f:34:91:f9:b6:e0:2a:79:ed:48:1f:
         4a:e1:63:2a:83:b1:a6:b8:8c:78:bd:66:9f:60:d2:54:7a:aa:
         1e:91:a4:03:3b:a7:d8:ff:63:c0:db:cc:a1:60:3d:58:30:9f:
         07:29:71:01:7a:3a:5e:b1:30:3b:7a:7c:9d:ce:16:e9:c2:7c:
         d6:bc:be:1b:7c:3b:66:24:b0:05:e9:7f:bb:d8:09:3b:77:b4:
         5b:8a:88:b0:6d:96:86:cd:6e:0e:e3:c8:1b:d3:7c:e9:c4:4e:
         53:f5:1e:14:66:aa:85:b2:18:b3:18:7a:63:c7:83:25:0d:33:
         c0:66:d9:0c:2c:d4:1b:da:cc:6f:f0:95:ae:ab:50:08:4c:34:
         4f:b7:57:62:72:55:bf:1a:dd:eb:12:f9:a3:02:a6:6d:7a:cb:
         04:a2:a8:a8:b4:ac:8b:9e:7d:c9:16:2d:da:d4:ef:bd:37:5b:
         8a:1c:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----