Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/e751371b-f582-3067-812c-83cfc98b6c22.roa
File:                     e751371b-f582-3067-812c-83cfc98b6c22.roa (raw, json)
Hash identifier:          qt7AdU3o3cmGMWDJdSqxSXoj18L88qrG6ys16RTgw8w=
Subject key identifier:   0E:CC:27:B8:A9:3B:E3:AE:09:70:5E:88:07:B8:EC:13:9F:BD:F7:84
Certificate issuer:       /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial:       010D0C9F43285842E29D78FE12FA739BCB453380
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/e751371b-f582-3067-812c-83cfc98b6c22.roa
Signing time:             Mon 14 Aug 2023 19:35:14 +0000
ROA not before:           Mon 14 Aug 2023 19:35:14 +0000
ROA not after:            Sun 12 Nov 2023 20:35:14 +0000
asID:                     14103
IP address blocks:        199.21.130.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e2:9d:78:fe:12:fa:73:9b:cb:45:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
        Validity
            Not Before: Aug 14 19:35:14 2023 GMT
            Not After : Nov 12 20:35:14 2023 GMT
        Subject: CN=4b36932b-dfff-4931-a938-8dc7386461cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d1:3c:5d:c2:bb:14:69:2a:c0:7b:50:b3:33:
                    65:1b:3e:83:2c:e5:3f:d5:95:36:ac:63:f0:42:34:
                    cb:3c:0e:ff:95:d2:01:b4:4c:da:cb:b7:da:91:b5:
                    33:0c:33:0a:9c:fc:54:47:a7:b7:b0:ed:a0:06:6f:
                    a3:ed:07:c6:95:b7:3f:08:42:45:8a:35:ea:a1:03:
                    14:3a:71:c2:c5:8f:1b:6e:a9:66:a5:13:26:eb:53:
                    b0:3f:dc:af:99:8f:86:e8:1a:75:f3:e8:d3:71:72:
                    ed:37:94:1f:fe:86:ee:93:eb:0c:ba:9d:28:39:32:
                    25:da:c2:8d:cc:e8:c6:96:81:6a:ea:e9:76:ff:33:
                    6e:36:aa:28:67:31:df:ca:7a:37:a4:3e:6f:68:0a:
                    46:a3:23:15:85:1c:5b:f1:80:2e:a1:6f:5b:04:52:
                    e7:0b:30:3c:76:29:02:ac:83:7f:1b:b1:5b:24:0a:
                    85:88:58:3e:ea:19:55:eb:6a:00:0e:37:04:b6:a9:
                    0c:31:95:c4:53:d4:a5:57:bd:8a:ad:dd:b0:5d:8d:
                    dc:97:b6:21:79:73:e6:fb:fe:85:b0:b8:d7:83:b0:
                    df:9c:a9:36:b2:b0:94:10:d9:ed:89:bd:f0:ba:4d:
                    25:68:80:83:64:ec:63:49:b1:21:11:8e:a0:2b:a4:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CC:27:B8:A9:3B:E3:AE:09:70:5E:88:07:B8:EC:13:9F:BD:F7:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/e751371b-f582-3067-812c-83cfc98b6c22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:55:14:41:2e:76:ea:52:8b:87:c0:1f:1a:f1:40:3d:70:3e:
         31:05:e4:b6:33:9f:95:7d:25:ec:1e:8b:90:88:33:61:9e:44:
         e5:93:9b:40:ce:54:40:d5:5e:ca:c2:f8:d8:49:e4:dd:56:3a:
         0b:86:72:32:53:52:64:88:7c:3d:26:90:f3:1a:90:3b:fa:e0:
         34:25:e7:5a:5e:b2:f6:bf:c3:be:6e:5d:cf:bf:d6:9f:dd:4e:
         21:0d:dd:7c:15:18:2c:46:4d:18:67:3a:38:c3:a0:fe:e7:ed:
         e3:d0:43:82:98:b7:8e:15:bf:7f:01:0f:6d:fa:53:fc:cc:48:
         13:a5:b7:d4:2c:3f:5f:e4:c7:df:9d:9a:a0:c0:fd:66:b0:2a:
         30:5e:a1:33:39:38:7f:28:24:40:f6:12:58:c0:20:16:d0:bd:
         64:39:8c:8c:b2:da:29:8b:27:6b:c0:4c:89:d9:16:06:46:1a:
         44:dc:84:b1:1b:ec:86:48:4c:32:d5:ee:b2:bf:68:57:c2:94:
         5a:f3:f9:49:21:a2:60:9d:17:a1:6a:57:79:b9:13:d9:99:16:
         fa:4c:19:43:f4:d3:39:1b:68:4d:cf:e7:43:7c:ef:46:60:dd:
         89:ed:f2:dc:35:95:43:78:c6:84:84:09:5d:c0:78:79:f6:ce:
         28:5c:a6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----