Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/cfd361e4-799a-3bd6-8167-939086dd5c9d.roa
File:                     cfd361e4-799a-3bd6-8167-939086dd5c9d.roa (raw, json)
Hash identifier:          eLsupFpwoW06n4mI8wRDrheJMjfKDB5FalsTjVoad4s=
Subject key identifier:   8B:06:CC:6C:AE:BC:12:02:1A:06:7A:EA:CC:B4:F1:88:9E:C9:45:E2
Certificate issuer:       /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial:       010D0C9F43285843890572DA2D69BC3480DDACE0
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/cfd361e4-799a-3bd6-8167-939086dd5c9d.roa
Signing time:             Fri 13 Oct 2023 10:08:55 +0000
ROA not before:           Fri 13 Oct 2023 10:08:55 +0000
ROA not after:            Thu 11 Jan 2024 11:08:55 +0000
asID:                     834
IP address blocks:        208.99.8.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:89:05:72:da:2d:69:bc:34:80:dd:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
        Validity
            Not Before: Oct 13 10:08:55 2023 GMT
            Not After : Jan 11 11:08:55 2024 GMT
        Subject: CN=eeff0d6c-b8a1-40eb-b4ca-63144fdd6ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:99:4a:a3:4c:d3:41:0e:1e:ab:76:f6:c5:
                    71:9d:84:82:8a:f8:97:e9:29:dd:c4:a0:a1:d5:c5:
                    09:00:0a:f5:46:00:d0:b4:e0:ad:23:77:52:6b:dd:
                    15:79:12:a4:56:a7:0b:f3:ec:ef:db:5f:71:b6:c8:
                    34:9b:c8:b1:50:bd:e7:d0:04:41:d5:31:94:dc:8e:
                    27:e3:11:e2:f1:90:16:9a:6f:57:77:57:b9:9f:d6:
                    7d:00:a7:f6:7b:89:d1:9b:bd:6d:62:a7:33:2d:51:
                    77:ff:be:08:9d:b5:5d:38:e7:93:65:b9:a6:c0:d7:
                    b9:df:d5:11:02:30:a7:df:d3:26:da:ec:95:2f:11:
                    79:90:4b:f2:aa:b0:c9:2e:9b:ee:e8:63:f0:f6:c2:
                    d5:ad:2a:aa:1c:86:1a:4d:38:64:31:9b:67:87:ea:
                    a8:bc:fc:96:8b:a1:99:67:cd:02:b8:4b:f6:e8:76:
                    31:56:c5:e5:36:0f:23:d2:17:dd:97:ac:7e:96:55:
                    c8:04:ff:8c:82:42:4e:82:fb:29:c2:3d:48:18:00:
                    15:7e:9e:35:e3:6c:2d:a5:0c:3d:07:38:d8:97:b5:
                    2e:79:0f:f6:06:b7:94:16:24:7f:c8:03:aa:6b:8c:
                    e2:fe:87:37:4c:36:e3:f0:20:c2:8f:d2:28:8d:62:
                    fc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:06:CC:6C:AE:BC:12:02:1A:06:7A:EA:CC:B4:F1:88:9E:C9:45:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/cfd361e4-799a-3bd6-8167-939086dd5c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:e6:b0:75:b7:1d:af:c8:c4:25:19:82:2d:37:68:d6:8b:fd:
         9b:4b:3c:57:4e:b4:a1:96:f4:04:0a:c8:73:53:b5:54:66:b2:
         b0:d9:33:40:91:48:61:99:3e:7c:9f:21:7e:34:b9:51:1e:0c:
         38:da:fa:23:37:89:f7:48:fb:c8:b8:73:c6:46:fe:18:99:db:
         4b:c6:d7:59:b0:15:96:03:74:ba:93:04:54:b3:ad:0c:93:1b:
         e3:b1:47:95:6b:b9:de:3c:fc:e8:61:3b:e8:be:68:e7:35:fd:
         80:5a:99:23:ab:8a:5d:d8:1b:3e:71:a4:c0:38:5e:67:07:de:
         cd:a1:5d:aa:fe:b2:83:f9:76:58:45:8f:a3:0d:f1:fe:27:fe:
         e9:a7:3b:6b:f1:90:79:3b:8f:b2:55:37:4e:60:e2:49:a7:1f:
         26:e6:e9:f9:16:49:6a:b0:5f:44:46:19:ff:de:cb:83:6f:84:
         65:a7:26:6c:17:33:c8:db:1f:22:5f:61:fd:57:c3:fa:44:cb:
         36:3e:79:f5:5a:1b:92:9d:b8:17:62:a7:13:0d:b8:03:54:48:
         f0:b3:81:af:ae:78:ba:6c:00:42:06:aa:f3:84:10:56:cb:33:
         cc:ec:b1:66:ce:bd:80:7d:12:d0:6b:bd:a7:07:2d:fe:36:6c:
         db:10:cd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----