Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb874a12-0068-3aa4-9b1f-29ae81b0bdb5.roa
File:                     fb874a12-0068-3aa4-9b1f-29ae81b0bdb5.roa (raw, json)
Hash identifier:          /fwz2EAL/UfooTVOR3WzTuGF/kN+LJvl5X4N4LOmiYU=
Subject key identifier:   11:56:98:97:CE:71:32:AC:9D:FF:DD:AD:AB:A6:04:34:B3:A0:A2:99
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584348F61B804B1674DB8B8DDBC0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb874a12-0068-3aa4-9b1f-29ae81b0bdb5.roa
Signing time:             Wed 20 Sep 2023 11:26:17 +0000
ROA not before:           Wed 20 Sep 2023 11:26:17 +0000
ROA not after:            Tue 19 Dec 2023 12:26:17 +0000
asID:                     36351
IP address blocks:        172.94.70.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:48:f6:1b:80:4b:16:74:db:8b:8d:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep 20 11:26:17 2023 GMT
            Not After : Dec 19 12:26:17 2023 GMT
        Subject: CN=46d4caa5-347c-4e78-9ab9-f0585468ed94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:f0:eb:9f:9e:42:cb:6a:d8:a1:99:fa:34:
                    13:af:67:c0:f2:2f:db:13:93:bf:d8:d7:31:e1:b2:
                    1d:38:ce:41:ab:58:f9:bd:15:a8:3f:49:c2:61:4e:
                    fb:b4:f0:e2:dd:05:2b:90:6a:bd:7a:dd:1d:c5:40:
                    bf:9b:f2:14:6c:43:3b:f1:2d:f8:53:c8:40:0d:c0:
                    53:e3:9c:5f:7d:d6:12:13:d0:f4:6a:18:b6:fb:3c:
                    6e:ce:b7:1b:e8:38:ab:c9:f5:01:6c:0c:79:82:d6:
                    a7:31:a5:71:8a:b7:e7:97:e4:81:3b:b8:c7:3d:4d:
                    93:28:28:02:2d:ad:93:54:a4:61:51:ba:3a:9b:66:
                    5c:3c:ae:3b:84:7f:b2:a9:a6:e7:14:62:3d:e0:ac:
                    75:05:52:69:a7:7b:be:83:05:19:f3:0c:b0:0f:52:
                    97:f8:4b:5b:26:1f:3c:7a:e6:1e:a1:a7:94:c5:c5:
                    36:c9:f0:59:b1:f0:41:54:e6:cb:6d:4c:08:f2:ad:
                    07:c2:2b:7a:92:7d:8b:b0:29:26:fc:48:19:f7:34:
                    2d:66:6d:ea:7d:9e:fd:f3:f3:20:70:9f:bb:43:18:
                    2d:c2:33:be:91:f5:2c:7f:51:38:f9:bd:d5:fa:b0:
                    4c:b3:bf:bb:3d:85:9c:80:13:d3:ff:9d:ff:4d:85:
                    b5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:56:98:97:CE:71:32:AC:9D:FF:DD:AD:AB:A6:04:34:B3:A0:A2:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb874a12-0068-3aa4-9b1f-29ae81b0bdb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:9b:c4:9b:5e:03:83:b5:03:b1:78:5a:78:2b:40:c8:df:af:
         6e:93:df:18:19:f0:46:49:91:1f:d5:93:03:e6:c9:f3:eb:e5:
         14:3a:26:77:db:2c:cf:c1:02:f9:8a:44:6e:e2:04:56:41:f0:
         02:c2:d9:e2:af:fb:00:1e:c2:1d:a9:0c:59:13:0f:ef:af:8c:
         d1:11:8d:c6:93:37:24:52:f2:44:6f:17:cc:28:97:1c:34:29:
         1b:ca:e2:03:de:a7:1c:ec:97:38:5b:02:f5:30:a2:dd:69:04:
         73:a6:54:10:bd:03:06:7b:95:24:c4:ad:e4:c1:52:b1:2f:18:
         94:45:05:d1:c3:e7:35:4e:8d:65:d7:16:49:66:e1:f1:f8:56:
         a6:2a:d1:b3:11:5d:05:0c:dd:a7:6e:dc:31:c3:e6:9e:9e:fd:
         36:d9:5c:f3:15:67:3f:53:c1:a4:44:21:12:7b:dd:aa:f0:1d:
         dc:dc:75:c9:a9:8d:cf:3d:31:a5:13:a3:33:a9:4f:30:03:65:
         55:40:7c:b8:4f:67:6d:3b:aa:58:57:13:f5:34:20:38:9d:62:
         a4:e4:62:85:40:d7:c7:9f:37:5d:92:2c:c5:89:45:cc:f5:64:
         06:c1:b6:c6:fe:ca:2f:97:ee:01:0d:25:19:63:bf:c9:04:34:
         13:75:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----