Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/84a408ea-7423-3ccc-868a-2816725a4694.roa
File:                     84a408ea-7423-3ccc-868a-2816725a4694.roa (raw, json)
Hash identifier:          Xu2p93VftuuThlcpwgsOY1FEOU8nflp8H8pB691sH58=
Subject key identifier:   C5:B8:AB:80:C3:CB:04:71:93:AE:07:08:CD:40:45:65:65:92:23:C4
Certificate issuer:       /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
Certificate serial:       010D0C9F43285844FCCB8472B4D0E2A37B391460
Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/84a408ea-7423-3ccc-868a-2816725a4694.roa
Signing time:             Fri 23 Feb 2024 14:12:54 +0000
ROA not before:           Fri 23 Feb 2024 14:12:54 +0000
ROA not after:            Thu 23 May 2024 13:12:54 +0000
asID:                     834
IP address blocks:        216.170.96.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:cb:84:72:b4:d0:e2:a3:7b:39:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8
        Validity
            Not Before: Feb 23 14:12:54 2024 GMT
            Not After : May 23 13:12:54 2024 GMT
        Subject: CN=0e0f8ae0-861f-4b7a-8d13-a45239992de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:63:da:cb:51:ac:5b:5c:92:0b:06:c2:b2:
                    09:1d:2f:e1:ed:e5:ef:fc:6d:2b:ed:e6:6e:8e:da:
                    62:65:62:e3:94:be:c4:1d:64:19:97:33:df:d4:02:
                    03:61:4e:79:98:cf:02:c0:a0:39:1a:3b:54:b0:4c:
                    4b:46:a4:9c:98:e8:43:84:1e:07:3c:d8:64:13:aa:
                    1c:39:2e:9a:e2:fb:2c:94:db:d4:02:66:bb:6a:c4:
                    e3:6c:b8:3e:ee:95:21:68:04:22:26:fd:1f:61:33:
                    20:07:69:c7:3f:01:8f:76:00:df:15:a9:76:4d:4d:
                    6d:5f:52:51:b4:86:d5:ec:c9:b7:f3:d2:b5:ad:53:
                    78:09:b0:36:80:58:a2:91:14:28:7c:99:ce:41:38:
                    bb:e9:85:8e:b1:18:0b:74:66:bd:43:47:3f:3d:9d:
                    1d:ab:30:64:28:b0:25:d8:f4:5c:e3:0c:82:8d:1b:
                    e9:a0:42:3f:07:5b:19:d8:a3:e0:17:2d:a8:05:0f:
                    e2:7d:2e:5a:99:cd:26:b6:52:af:a9:10:63:bc:95:
                    50:c5:c7:d5:71:0f:4c:7b:84:c3:6f:98:59:fe:de:
                    4e:20:bb:fe:7c:5a:6b:24:1a:6c:50:ea:3f:a7:84:
                    2b:fa:14:47:71:0d:f5:27:d9:51:6d:0c:e8:66:f3:
                    30:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B8:AB:80:C3:CB:04:71:93:AE:07:08:CD:40:45:65:65:92:23:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/84a408ea-7423-3ccc-868a-2816725a4694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl

            X509v3 Authority Key Identifier:
                keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4e:25:ad:79:58:28:92:0a:9d:06:34:22:6c:0a:c6:40:67:
         32:49:d2:90:05:3c:73:5e:a2:13:c0:b2:1d:79:ad:34:f6:60:
         0f:48:57:89:a6:97:53:19:8a:ec:e5:86:de:27:0d:81:8e:65:
         02:c9:fa:d1:e2:cb:cb:ad:bd:d9:64:e7:b9:d2:a4:05:65:b2:
         99:20:f4:2e:5e:85:93:76:52:0b:2a:27:f6:f0:61:5a:50:f1:
         3e:09:20:37:bc:58:59:65:21:b4:92:e6:e3:1e:56:58:b5:e9:
         bb:34:84:54:da:08:e8:7a:51:58:e4:b2:f1:c2:35:99:f3:28:
         87:7c:4f:79:f1:1a:61:c3:d8:da:c7:a8:e2:56:dd:ca:db:aa:
         95:8d:df:17:60:40:2c:69:dd:dc:4e:2b:e1:fc:e7:65:5d:67:
         43:94:00:b0:96:83:31:74:9c:da:21:b0:f5:64:a1:95:1a:9f:
         12:2a:d3:b4:69:97:84:2e:f4:49:4c:ba:b9:c4:d5:e5:ba:58:
         14:8c:30:a4:59:b1:ee:a0:af:4f:c0:af:a1:5a:ec:17:df:6b:
         14:02:0a:78:6d:4d:ed:96:d7:7a:1e:9c:a3:dd:26:c5:82:72:
         43:d9:e8:f2:e7:85:3c:b5:2d:8a:0b:e4:cc:40:4b:ba:02:51:
         7d:d1:bc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----