Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/321c2277-1bb0-3a91-8706-aa573e2b9d49.roa
File:                     321c2277-1bb0-3a91-8706-aa573e2b9d49.roa (raw, json)
Hash identifier:          9ZeKQYUw0cG4FzLX9QLDgutWldkx35QRzUHns1Gmff8=
Subject key identifier:   94:1C:6E:B5:65:30:72:4D:9F:C8:1B:CB:5E:C5:F8:61:0F:BD:F9:F0
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F432858430B74C48B773466A08F219A00
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/321c2277-1bb0-3a91-8706-aa573e2b9d49.roa
Signing time:             Tue 29 Aug 2023 10:41:22 +0000
ROA not before:           Tue 29 Aug 2023 10:41:22 +0000
ROA not after:            Mon 27 Nov 2023 11:41:22 +0000
asID:                     21082
IP address blocks:        165.140.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0b:74:c4:8b:77:34:66:a0:8f:21:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Aug 29 10:41:22 2023 GMT
            Not After : Nov 27 11:41:22 2023 GMT
        Subject: CN=ff90889e-f058-408c-be16-d86133e52ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:a3:f3:8c:4f:5c:f0:1f:cf:d7:1f:85:e4:
                    d9:0b:88:28:aa:73:67:f6:5a:50:ce:15:77:e7:a1:
                    26:60:80:89:ad:f0:8b:34:07:57:bf:d0:8b:59:cb:
                    c7:69:a9:bd:67:35:0c:0c:80:4e:57:80:fe:1e:56:
                    4c:36:13:a5:b5:17:e9:4c:70:fc:67:d3:ce:80:c2:
                    3c:4f:39:d8:d7:8e:9b:9b:d7:38:56:c3:bb:f0:54:
                    2e:10:f9:fb:17:9f:59:d4:6f:b2:d9:aa:ce:16:fd:
                    c4:e7:44:1c:63:57:e6:3a:ca:ad:0c:35:55:52:b0:
                    bb:b3:32:fa:16:96:08:d2:fc:16:86:b1:28:da:90:
                    6d:a8:3a:d0:16:21:e9:72:70:b3:09:f0:53:55:ab:
                    de:c2:93:4f:46:96:63:97:f9:6a:1a:bf:47:fb:5d:
                    c5:41:87:4d:ff:5d:6f:a4:b4:62:7e:4f:3d:ea:fc:
                    69:f7:cd:73:c6:37:ab:67:7b:0c:61:de:90:19:3a:
                    ea:dc:54:e6:22:3d:87:aa:57:ba:59:25:f1:db:2d:
                    ab:e2:cf:ec:ee:b4:c0:35:80:2a:cb:7a:34:fe:f2:
                    5b:29:30:6b:d3:b9:6a:cb:15:97:13:b4:e5:e1:c6:
                    fe:ce:f4:e7:e8:aa:03:18:f9:e8:f5:80:2a:6f:0b:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1C:6E:B5:65:30:72:4D:9F:C8:1B:CB:5E:C5:F8:61:0F:BD:F9:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/321c2277-1bb0-3a91-8706-aa573e2b9d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:f9:28:dc:40:15:63:bc:85:78:80:aa:c1:26:e8:79:0c:97:
         da:65:95:92:4d:ff:6b:f1:af:8e:f4:bd:e4:49:76:d7:67:21:
         a4:a5:40:b9:0a:8e:40:ff:1c:cc:4e:c1:3d:51:b2:34:fa:4b:
         8b:3b:ed:a0:11:8a:dd:73:54:2f:36:0e:ed:f1:1f:78:b7:ea:
         88:a1:48:76:c4:81:a1:ba:84:d0:74:98:6a:85:78:a3:9d:8e:
         01:0b:77:40:32:7d:c9:d8:4e:c4:0a:49:10:1f:ce:33:fa:b1:
         a0:df:59:41:7c:25:12:fb:30:f1:74:bf:c4:4c:6b:4f:9d:42:
         0e:1d:f7:20:09:b5:89:3f:2d:47:aa:35:41:f5:c8:3d:28:ad:
         b5:f5:9a:7d:b8:54:20:48:6c:de:04:33:85:84:00:8a:7f:4b:
         10:f7:30:cc:3e:c9:d1:7b:3f:b0:a3:9c:17:24:61:09:b8:d1:
         0f:c7:0e:ef:63:9d:25:c0:52:c9:13:0d:50:c9:3f:1c:2d:3f:
         ee:ca:d4:fb:71:16:f6:f1:1b:2e:d8:6e:5a:f4:c5:e2:0d:36:
         87:8f:70:bb:8a:c1:a7:97:84:7c:c1:96:56:88:63:29:99:ef:
         71:85:a8:3e:d1:c9:31:5c:cb:6d:01:5b:40:9f:1c:19:4e:07:
         7a:ef:e0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----