Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/4bb5014f-03b4-36bf-8039-503cc8ac92b2.roa
File:                     4bb5014f-03b4-36bf-8039-503cc8ac92b2.roa (raw, json)
Hash identifier:          JTnsx0OenQObyBsgBbyk5W4ZTapaEvidhOlHTWLlrUo=
Subject key identifier:   C9:32:E8:56:37:0D:E3:B2:75:9E:33:CB:3D:D5:CF:1B:BD:69:52:EB
Certificate issuer:       /CN=7d31536a-f667-4473-abbf-040b249fa39f
Certificate serial:       010D0C9F43285842F82F09B5396A39B7A49BF440
Authority key identifier: D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/4bb5014f-03b4-36bf-8039-503cc8ac92b2.roa
Signing time:             Tue 22 Aug 2023 13:00:25 +0000
ROA not before:           Tue 22 Aug 2023 13:00:25 +0000
ROA not after:            Mon 20 Nov 2023 14:00:25 +0000
asID:                     16509
IP address blocks:        216.73.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f8:2f:09:b5:39:6a:39:b7:a4:9b:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d31536a-f667-4473-abbf-040b249fa39f
        Validity
            Not Before: Aug 22 13:00:25 2023 GMT
            Not After : Nov 20 14:00:25 2023 GMT
        Subject: CN=908495c3-8826-4df8-a5d2-08d81949ceec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:82:cf:86:66:d0:45:a2:34:b2:18:09:8c:e2:
                    7d:a6:99:bf:14:65:5e:96:e4:ad:06:ed:43:77:c0:
                    30:43:0c:a2:96:97:1b:98:77:3d:bb:f6:87:61:d9:
                    bd:5e:8c:cd:f4:55:3e:59:ac:b2:47:ce:eb:71:7e:
                    88:e6:21:d3:b0:75:88:db:bd:f8:68:10:9d:37:0a:
                    0c:31:91:62:be:a9:cf:bf:b4:47:d8:a4:2c:b6:fa:
                    fb:0b:ed:96:af:b8:f4:cf:af:e5:e6:cd:1a:0c:ef:
                    cc:8d:ec:25:14:28:af:bf:c2:d2:8a:54:18:f1:64:
                    43:11:3e:7d:76:e5:61:41:33:a8:af:23:31:93:21:
                    db:67:05:bc:d5:05:79:e4:af:e1:67:8e:8e:23:2d:
                    21:c3:01:8b:a6:a6:1d:35:23:37:93:3d:2b:cd:8c:
                    ac:6f:67:1d:c5:5d:e0:0f:7e:64:63:27:c2:2a:9d:
                    13:ff:a2:89:8e:53:9a:5f:08:23:2d:54:a3:18:bd:
                    2b:6f:12:96:e1:64:b3:30:23:d1:2b:c7:e2:3d:1a:
                    55:18:4f:23:92:1a:35:7a:23:e7:ab:c3:69:c6:3b:
                    0b:21:a5:cf:0a:cd:b7:63:31:bb:83:14:b8:e0:ce:
                    3f:a6:a5:30:ea:f2:d0:d0:95:83:1e:6e:c8:0b:69:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:32:E8:56:37:0D:E3:B2:75:9E:33:CB:3D:D5:CF:1B:BD:69:52:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/4bb5014f-03b4-36bf-8039-503cc8ac92b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.crl

            X509v3 Authority Key Identifier:
                keyid:D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:6c:31:fb:5e:2a:a5:6c:c6:60:5e:e9:a1:10:84:c9:18:39:
         71:81:2b:cb:da:3a:9e:5c:1c:03:87:2e:5d:7d:16:b4:9e:d2:
         74:20:40:cb:16:22:71:64:7f:fa:73:a6:62:1a:48:dc:4c:29:
         20:ea:8f:29:08:de:87:c0:39:51:8f:2f:2a:1b:57:9f:f3:f9:
         3e:5c:3d:8a:99:70:b4:c6:57:24:d2:a5:52:11:ec:07:dd:79:
         59:6b:e1:37:38:22:e5:14:74:f3:3e:ea:81:d7:7f:63:9f:a9:
         25:db:e8:b5:1c:a7:7a:58:a0:3a:87:cc:cb:78:2d:0f:16:09:
         4a:b1:0d:ea:d6:db:3b:a1:d1:91:b0:31:a3:2a:7b:5c:12:41:
         42:c2:47:80:74:6f:df:50:18:a9:f9:75:10:b9:29:98:17:e3:
         0a:e6:6c:57:07:3f:d7:86:f2:65:2c:fd:55:49:8d:d8:30:5e:
         24:85:bb:6e:66:f5:3e:2f:7e:86:fa:22:1f:51:81:8e:80:a6:
         ba:88:31:c4:8d:bb:9c:d2:fe:61:be:25:cc:3f:86:b3:fb:50:
         24:af:6e:14:df:5d:71:41:50:12:02:1c:5a:9c:f8:b0:23:9a:
         7e:43:e7:bf:71:f0:d5:a3:aa:4d:2f:68:75:23:1b:86:04:3a:
         be:24:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----