Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/58ce5b88-d58e-30cf-8ed2-5088b1fd17f3.roa
File:                     58ce5b88-d58e-30cf-8ed2-5088b1fd17f3.roa (raw, json)
Hash identifier:          OarAYN55VZ+a+CYRbY3K9Awin4hhG8RDze7K9mSvtAw=
Subject key identifier:   0E:35:BD:21:D4:2D:E0:AA:D1:72:0D:0F:07:9F:80:9E:60:91:98:C8
Certificate issuer:       /CN=fd61a214-d867-444e-b2f4-ca291d4c4419
Certificate serial:       010D0C9F43285844851CAD5692757BCF40CD2E00
Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/58ce5b88-d58e-30cf-8ed2-5088b1fd17f3.roa
Signing time:             Thu 11 Jan 2024 17:19:26 +0000
ROA not before:           Thu 11 Jan 2024 17:19:26 +0000
ROA not after:            Wed 10 Apr 2024 16:19:26 +0000
asID:                     834
IP address blocks:        207.167.84.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:85:1c:ad:56:92:75:7b:cf:40:cd:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419
        Validity
            Not Before: Jan 11 17:19:26 2024 GMT
            Not After : Apr 10 16:19:26 2024 GMT
        Subject: CN=b6e13ced-254e-474e-a4c5-9c0d4d732677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8e:0a:84:98:59:b5:e1:0d:cd:29:bb:c8:0f:
                    88:64:3f:f8:aa:a5:3a:70:df:7c:c9:09:d4:67:4e:
                    57:79:ae:a9:6d:40:63:95:fc:6c:6f:1d:90:c2:31:
                    da:4b:f6:ba:c2:aa:62:6f:fc:2b:70:35:af:31:74:
                    2a:ce:77:5c:16:16:72:f6:d3:14:ab:81:73:7e:6a:
                    4b:20:db:c8:89:a1:e2:34:26:66:5b:42:e2:1a:28:
                    9d:82:5c:8a:ce:5c:63:52:03:0d:67:81:0b:7b:aa:
                    8b:20:b5:67:88:6b:b1:ad:3c:91:06:7f:7d:e8:71:
                    07:c6:57:4a:3a:90:c2:c6:bb:c7:8a:15:8a:fd:61:
                    e0:de:80:ec:86:01:59:95:ea:06:25:e1:b5:98:dd:
                    ce:72:b3:0f:10:d0:b7:75:8c:ec:93:4c:65:27:00:
                    3c:5a:1c:75:f8:b3:2f:81:0c:cb:e7:18:27:fa:34:
                    b7:32:4c:07:61:f7:b9:47:35:cd:2b:10:d4:61:a3:
                    a6:11:09:81:b8:a8:4e:fd:75:71:13:7c:e8:3a:25:
                    7a:1e:98:fe:c4:27:43:a8:70:66:4e:91:0f:af:11:
                    9b:11:6c:97:ce:8c:6a:2d:29:a3:96:51:4f:59:ee:
                    67:42:1f:90:a0:48:2d:6a:72:ab:03:c9:a3:a7:16:
                    c3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:35:BD:21:D4:2D:E0:AA:D1:72:0D:0F:07:9F:80:9E:60:91:98:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/58ce5b88-d58e-30cf-8ed2-5088b1fd17f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl

            X509v3 Authority Key Identifier:
                keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:bf:ed:91:20:30:14:86:43:f1:ec:cb:e2:53:6c:e8:01:d1:
         8d:57:47:c0:76:bd:4b:71:a4:61:6c:56:d5:e0:96:0b:b0:29:
         25:44:ca:0b:97:5c:5f:03:55:4b:08:92:24:4c:8c:39:8f:93:
         f6:6f:db:ea:46:84:e1:8b:41:0b:44:9f:db:41:12:b4:2a:c6:
         e6:3e:ef:70:d1:13:d2:3a:ee:87:ad:34:3f:8e:8d:64:c4:6a:
         26:eb:35:24:67:df:db:03:6d:e7:db:55:8c:2d:64:42:b9:53:
         11:66:b7:fd:d9:bc:e2:eb:82:60:cd:d4:0e:55:6e:5d:3f:d4:
         07:ec:9f:8a:fd:43:e5:e8:d7:1c:f0:e4:d2:00:ca:5c:03:73:
         46:a3:32:41:51:0d:20:3e:2e:62:16:50:67:70:a2:b4:c2:5e:
         fc:8b:e6:8c:b2:f4:33:f3:d2:23:27:55:7f:ea:59:58:cf:7b:
         a2:38:f5:41:1e:96:64:60:6b:58:4f:e4:10:73:c4:6f:42:b4:
         7b:08:75:f7:02:1e:54:34:c5:41:f0:45:7c:b3:45:9b:32:ea:
         8e:22:a8:82:44:56:24:d9:8d:7a:17:3c:e2:09:c2:8d:6f:56:
         e5:05:80:2f:d6:5c:6b:4b:5c:e8:8b:e4:04:c7:72:ea:3e:8c:
         46:dc:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----