Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/e77d3a15-2817-3a2e-9b14-f8341a890efd.roa
File:                     e77d3a15-2817-3a2e-9b14-f8341a890efd.roa (raw, json)
Hash identifier:          l2Fw1JSAUff6vn0RWXKSX2v8yACMCrVqvrcrestJmTY=
Subject key identifier:   F4:A6:C3:E7:67:5F:2D:3F:6C:BE:5D:C2:E2:49:8B:62:D9:21:D8:4B
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F432858430B7545CA1082E6E3A8CD4880
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/e77d3a15-2817-3a2e-9b14-f8341a890efd.roa
Signing time:             Tue 29 Aug 2023 10:42:23 +0000
ROA not before:           Tue 29 Aug 2023 10:42:23 +0000
ROA not after:            Mon 27 Nov 2023 11:42:23 +0000
asID:                     400384
IP address blocks:        165.140.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0b:75:45:ca:10:82:e6:e3:a8:cd:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Aug 29 10:42:23 2023 GMT
            Not After : Nov 27 11:42:23 2023 GMT
        Subject: CN=126ccf7e-d49c-471a-b59b-370dfa349074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d0:35:c4:3e:cd:46:04:52:8e:0e:91:d1:90:
                    e4:cb:9f:70:e7:0f:40:c1:6a:c2:34:55:7b:d5:09:
                    33:52:1b:50:b0:66:59:86:c9:92:27:5e:a5:7b:12:
                    f9:82:87:53:5b:d4:68:e8:20:97:de:b2:ab:dd:a3:
                    67:7b:c6:10:7c:b1:86:5c:77:24:df:3e:4f:6c:e9:
                    7f:b9:61:cc:04:16:ca:32:87:1f:2d:25:bd:20:75:
                    ff:4f:ab:30:5e:e5:3f:d3:44:a8:c5:a5:86:9b:ea:
                    89:64:45:cd:25:9f:a4:8a:e9:aa:4f:b3:21:14:af:
                    3f:b4:cb:38:e6:25:24:78:8f:3c:4c:11:c7:ea:57:
                    81:a0:7a:39:6c:e5:48:11:64:07:a8:95:94:1e:43:
                    81:1d:92:70:16:16:4c:8d:49:ad:67:98:6e:39:21:
                    8e:bf:12:98:7d:26:6f:92:2e:97:20:70:b2:b1:e8:
                    eb:86:19:48:08:77:ca:60:cc:6d:a4:df:16:d5:97:
                    63:3a:0c:f8:a4:44:b2:bc:dc:7c:ce:47:5d:79:4c:
                    2f:87:f7:ad:dd:88:38:37:e4:ff:ab:ac:37:47:24:
                    65:f6:71:08:0c:f9:0e:4e:76:a0:77:e4:65:73:c3:
                    40:23:c7:96:42:7e:6e:74:c6:de:14:37:96:fc:e6:
                    e8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A6:C3:E7:67:5F:2D:3F:6C:BE:5D:C2:E2:49:8B:62:D9:21:D8:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/e77d3a15-2817-3a2e-9b14-f8341a890efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:26:f3:2d:49:6f:51:82:b6:2b:93:e6:f2:65:df:0e:b7:a7:
         fc:9f:8d:4a:d3:ea:0e:9b:d3:9c:3c:84:29:33:99:5a:6b:83:
         67:e0:f2:42:6a:5d:71:ae:34:0f:ea:06:2d:47:e9:c6:4a:31:
         96:43:74:0c:b9:f5:61:6f:b6:b3:1c:50:df:31:18:ba:3f:d2:
         b5:ed:7b:0c:6b:e8:84:3a:0f:f4:68:49:d7:08:3a:67:b7:7b:
         7c:9d:53:0a:63:9b:5d:b0:d3:f1:96:1d:38:23:cd:51:c1:31:
         53:1e:a7:f0:62:33:85:3a:e9:e7:0a:07:cc:5d:3c:5f:db:ed:
         c0:fc:3b:23:97:79:80:66:b6:7d:f8:e8:7c:89:34:bc:3b:70:
         00:31:1f:9d:88:30:95:3e:16:d7:90:1e:ba:34:e5:df:e7:3d:
         d9:b4:87:a1:85:6b:9c:5e:fa:e0:80:5b:86:50:8d:79:32:fa:
         ed:f6:b5:ee:92:70:f4:37:6e:cc:63:46:1d:b3:41:c8:54:74:
         b8:38:cf:6f:80:2c:18:08:20:0d:91:e8:d1:ce:a0:28:2b:69:
         f2:89:3f:3b:e8:90:a6:f7:47:28:7b:3a:ec:20:f1:fc:bf:42:
         83:ef:8c:ae:8e:cd:c5:8f:25:6d:7c:39:b2:51:d8:69:0a:57:
         1b:4d:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----