Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/ec59222c-e97e-3c2e-bcaf-b94c4d4c1c4c.roa
File:                     ec59222c-e97e-3c2e-bcaf-b94c4d4c1c4c.roa (raw, json)
Hash identifier:          iExHYBsNg8pfHtQaf4kETExr37Vfpg64XhGpBPfTK00=
Subject key identifier:   50:80:2F:1F:2D:43:C1:65:79:DF:DA:2C:19:22:C8:B6:B6:2B:48:4A
Certificate issuer:       /CN=7d31536a-f667-4473-abbf-040b249fa39f
Certificate serial:       010D0C9F43285842F82F09DBB87179D2AD9DD500
Authority key identifier: D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/ec59222c-e97e-3c2e-bcaf-b94c4d4c1c4c.roa
Signing time:             Tue 22 Aug 2023 13:00:25 +0000
ROA not before:           Tue 22 Aug 2023 13:00:25 +0000
ROA not after:            Mon 20 Nov 2023 14:00:25 +0000
asID:                     16509
IP address blocks:        216.73.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f8:2f:09:db:b8:71:79:d2:ad:9d:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d31536a-f667-4473-abbf-040b249fa39f
        Validity
            Not Before: Aug 22 13:00:25 2023 GMT
            Not After : Nov 20 14:00:25 2023 GMT
        Subject: CN=309ecd39-940e-40f2-bafd-bd134d4de44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3c:45:ae:a6:b5:46:c2:4b:a4:fb:cd:8e:7e:
                    99:f0:c0:bf:ee:61:ba:39:6b:35:49:65:aa:a9:f5:
                    fc:af:81:f4:03:b4:30:a1:95:93:db:1d:7d:6d:78:
                    a8:03:2d:b0:dc:4d:fe:46:b7:f3:50:8d:c4:3a:3e:
                    c6:c4:64:a8:f2:49:71:fb:d2:4c:e8:4c:c6:7c:97:
                    9b:bd:fd:e8:10:27:09:f4:30:9f:af:84:02:25:2b:
                    39:65:fa:0b:d8:43:cb:21:df:a8:1f:fc:39:14:51:
                    e1:bb:cd:cc:a9:e0:8c:bd:8e:6d:1a:62:ad:b7:50:
                    b7:b4:50:ca:c2:e4:ec:2d:19:fe:f1:aa:9f:1d:a3:
                    d0:bc:61:47:9b:28:0e:a8:cc:42:0d:52:6b:73:b6:
                    d2:ba:d9:f7:d0:b4:76:7c:99:de:90:39:19:af:07:
                    5a:81:e7:c4:67:3a:f8:7c:73:ba:ea:54:04:2b:74:
                    37:32:d8:41:da:58:3e:1f:4d:74:b0:25:38:6c:7e:
                    ac:88:9b:ac:b4:24:a3:ea:40:90:cc:0d:98:3a:0e:
                    9a:1f:79:e1:3a:02:d0:4f:e6:8a:58:df:61:ca:0e:
                    90:62:da:3f:a4:7f:ef:ed:f9:5b:bf:da:d4:f9:48:
                    31:b6:f4:72:b8:5a:df:d4:b2:f5:ae:2e:73:a7:f8:
                    98:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:80:2F:1F:2D:43:C1:65:79:DF:DA:2C:19:22:C8:B6:B6:2B:48:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/ec59222c-e97e-3c2e-bcaf-b94c4d4c1c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.crl

            X509v3 Authority Key Identifier:
                keyid:D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:df:57:ad:3c:99:9a:14:6b:de:b4:d6:7f:2c:2d:75:34:9e:
         0d:27:3e:45:04:77:44:06:40:7b:d3:c1:17:e2:45:5c:07:f0:
         59:b9:e3:12:a1:6e:13:0d:db:0e:57:0d:98:cd:40:22:14:bd:
         9b:6f:c2:e8:c4:1f:2d:e0:6d:f4:f2:e2:9a:12:fe:6c:e7:3d:
         86:80:bb:b3:a8:0c:1d:66:69:82:f6:44:40:07:5b:69:e4:a7:
         15:ca:32:b0:3c:7f:bd:83:d1:8c:87:8c:f9:da:85:0f:5a:1f:
         2f:29:cf:2c:f3:b6:84:0e:93:19:0f:33:9a:3a:e9:08:2b:b3:
         c1:3f:9a:7a:3b:d5:bc:d7:c3:17:f5:bf:30:e1:14:db:06:40:
         42:9e:a1:ef:e7:8c:e0:4a:30:37:cc:7a:29:82:7e:2e:a9:ff:
         6f:ad:15:d8:9d:0c:07:a2:60:22:1f:00:fa:ff:5f:0a:62:52:
         6b:12:f5:f0:a0:3d:26:cb:5d:12:b3:c2:b2:9c:7c:60:c0:b5:
         92:ae:68:0d:35:97:07:b1:5d:11:18:88:f8:df:9d:e2:1c:21:
         3f:aa:6c:ca:e5:ff:ad:cb:39:0c:c0:db:41:44:33:ba:40:07:
         9c:f0:05:ca:33:34:0b:0a:13:a1:a9:54:cc:5e:21:65:85:fc:
         d3:57:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----