Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/cd9f9ad1-dcdb-341e-a697-b23eaac15d55.roa
File:                     cd9f9ad1-dcdb-341e-a697-b23eaac15d55.roa (raw, json)
Hash identifier:          5d5hDx2O6b1o2KWHAmzPbne0jtYrAd9hLG4hwgMsISU=
Subject key identifier:   D1:50:6C:9C:3B:31:1B:C3:AB:7C:E6:51:FA:8C:1C:54:03:B2:1A:99
Certificate issuer:       /CN=e699b02b-ca04-4557-94f4-189989d49ccd
Certificate serial:       010D0C9F4328583FEABAFE977D258DAA85FE2180
Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/cd9f9ad1-dcdb-341e-a697-b23eaac15d55.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        23.180.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ea:ba:fe:97:7d:25:8d:aa:85:fe:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=b8d8c62c-7869-4d71-a521-34ef84ffd1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2a:5e:1b:f6:c4:7f:4e:c3:d6:20:bf:5b:40:
                    0d:71:28:50:05:cf:2a:ff:00:4a:b0:c4:6c:53:e8:
                    a6:15:48:dc:62:ec:6b:6f:ff:83:7f:b1:f3:95:eb:
                    f7:bc:53:d8:42:94:55:a6:eb:28:ce:11:c9:12:29:
                    87:c1:84:fb:7d:d4:29:18:f5:46:13:f4:4d:16:ef:
                    8d:bd:84:1d:28:50:d1:da:b6:a7:7a:1b:26:30:7d:
                    72:2b:7c:20:b1:6c:b8:73:03:a0:b7:53:2c:7f:bc:
                    b0:6b:3b:ea:c3:d1:b5:47:c0:15:38:02:46:72:ff:
                    53:49:d2:42:31:96:a5:44:79:2b:b5:97:d8:35:e6:
                    ef:b4:db:a2:31:83:47:09:09:5c:57:70:d8:a6:a9:
                    81:a2:fb:e2:ff:b9:28:48:52:7b:89:34:b5:57:a0:
                    01:b1:2a:50:e4:cf:a8:51:c5:14:99:1c:30:3e:86:
                    18:da:f7:ef:c9:6b:54:0b:74:7d:f2:f2:5f:26:7a:
                    c5:62:18:ba:5f:65:23:5e:16:85:bb:a9:37:12:eb:
                    d7:01:b6:52:43:d4:3e:8f:f9:50:1b:cd:ac:17:24:
                    5b:41:30:27:c0:01:32:e3:c5:1c:65:53:e8:2a:c1:
                    f1:56:9b:3c:f3:ad:19:83:38:b3:31:46:76:96:0d:
                    c9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:50:6C:9C:3B:31:1B:C3:AB:7C:E6:51:FA:8C:1C:54:03:B2:1A:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/cd9f9ad1-dcdb-341e-a697-b23eaac15d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl

            X509v3 Authority Key Identifier:
                keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:52:01:84:4f:7a:6e:bb:20:93:4c:bf:d2:5d:75:f4:7e:9d:
         5c:cf:22:e0:99:33:f3:21:f4:98:01:90:ca:72:e6:2b:4d:f4:
         21:c6:6f:1f:27:e3:ce:ff:f8:32:79:3f:9b:57:a5:13:ec:45:
         7d:97:5c:5f:06:c9:03:92:52:d6:da:0c:0a:08:56:83:3f:15:
         25:18:34:9a:0d:5c:60:85:e0:b6:ea:df:44:d5:f6:83:0d:62:
         a5:17:1e:4c:10:bd:a5:96:c9:e2:36:aa:56:c2:f2:e6:5d:8e:
         92:89:6e:ae:25:b3:2e:0a:81:7e:ff:b5:d8:e8:19:eb:3a:bb:
         b9:65:91:be:55:d5:a1:fd:a6:f6:57:52:46:f3:1c:71:a2:40:
         a3:56:cf:a8:9e:e7:36:d6:62:0e:2a:83:f8:df:5e:75:70:53:
         b7:99:a6:e2:46:e0:c8:4a:bc:f9:d1:73:8f:b5:c2:58:2a:38:
         26:0e:34:52:e7:c8:b5:a0:3c:aa:4b:10:e8:41:ed:50:d8:02:
         fa:e4:88:ed:29:43:41:e3:07:02:c4:d3:17:ac:57:fb:b8:5a:
         c5:e3:68:98:ec:d7:5e:7d:3c:1a:2b:27:af:12:89:0d:c7:fd:
         fb:25:3a:ec:8d:39:44:8f:5e:53:1c:a2:32:ee:17:84:01:d7:
         7a:7b:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----