Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/16681339-d653-3006-8cf9-6d563a7b363c.roa
File:                     16681339-d653-3006-8cf9-6d563a7b363c.roa (raw, json)
Hash identifier:          lCkj8DO67R8/Y9H3+G2lwCY/1FynulclfS1tqUedmzk=
Subject key identifier:   E4:B9:5D:E4:3A:7F:5E:D3:65:C1:3F:DF:D4:CC:93:D5:18:74:64:23
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285843601EDA21602FD1E8CF1CB800
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/16681339-d653-3006-8cf9-6d563a7b363c.roa
Signing time:             Thu 28 Sep 2023 18:31:58 +0000
ROA not before:           Thu 28 Sep 2023 18:31:58 +0000
ROA not after:            Wed 27 Dec 2023 19:31:58 +0000
asID:                     6181
IP address blocks:        216.68.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:60:1e:da:21:60:2f:d1:e8:cf:1c:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Sep 28 18:31:58 2023 GMT
            Not After : Dec 27 19:31:58 2023 GMT
        Subject: CN=2e52390f-126a-4967-9391-dc6ed53c8355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:90:6e:db:ba:45:68:2a:ff:a5:45:d4:4f:
                    b1:66:c5:3c:f0:70:ba:97:5b:b6:02:4a:67:8a:21:
                    a2:66:39:5d:b1:0a:fc:cd:93:f2:1f:c3:50:7b:6e:
                    a3:21:2d:2e:e1:03:e8:0b:3e:21:70:22:44:3a:cb:
                    c2:38:28:37:8b:02:5b:0d:cf:d0:4a:ca:ca:1e:4e:
                    6a:37:9a:f6:64:a7:39:d5:61:fc:1f:77:a3:86:9c:
                    1b:b9:a1:f3:30:2d:2a:09:a2:64:72:d6:f4:07:68:
                    00:3d:eb:05:b9:d7:b9:35:ad:96:48:1f:d5:92:90:
                    68:45:de:f9:8a:f3:6c:e7:5b:1a:cc:d0:36:0a:d6:
                    97:02:a0:52:65:b5:1d:b4:e7:98:f9:d6:29:c8:f7:
                    0c:00:5d:fb:71:f8:98:75:5f:4f:9a:55:e0:02:d0:
                    ea:6d:5f:93:97:89:8b:10:ad:f9:d0:47:91:d6:9c:
                    b3:26:a2:12:fd:bf:9e:0e:ac:7d:34:91:6a:10:ee:
                    e6:1b:1a:34:c5:9f:87:06:cd:92:ea:f1:42:63:c2:
                    51:2e:51:70:df:cf:91:34:be:c7:2c:43:3e:2b:7c:
                    97:75:13:4c:66:f6:cb:3c:cd:d2:15:a4:64:86:d3:
                    2a:67:d4:97:a9:ab:ec:95:18:b4:dd:d8:4e:fc:d2:
                    d7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B9:5D:E4:3A:7F:5E:D3:65:C1:3F:DF:D4:CC:93:D5:18:74:64:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/16681339-d653-3006-8cf9-6d563a7b363c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:bd:5b:71:00:e8:8f:33:b5:7e:b2:a0:8b:07:5d:9a:9c:66:
         ee:3b:da:14:bf:9b:74:ef:73:c1:cd:bf:a0:41:4c:7d:61:4e:
         30:04:f2:7a:57:6b:a4:34:5b:10:e2:2a:24:b3:53:2b:45:59:
         20:7f:21:29:4f:1b:2d:15:10:3f:6c:19:09:6d:62:ed:2e:92:
         80:92:77:b5:d2:a1:61:2c:8b:64:b0:ad:ab:b5:b9:62:69:59:
         38:d2:80:56:b7:b8:19:5c:54:ce:89:35:bb:37:a5:bf:c5:57:
         1d:c4:f9:d4:34:51:33:a8:07:b9:f6:7b:52:0f:c4:e2:5f:34:
         bc:d3:8c:38:03:67:00:24:36:28:b8:3f:30:16:63:f1:73:8c:
         7c:27:5f:0a:dc:b4:20:0d:56:2d:4c:95:a8:bd:db:f9:df:ef:
         90:1b:eb:15:c4:e8:90:bd:f1:29:41:27:26:3f:95:9b:3c:fd:
         ce:e0:b9:ae:f5:05:15:9c:45:02:f5:83:8e:3b:6c:f5:c3:a2:
         68:85:ef:f3:62:d9:6f:47:e1:46:b6:72:8e:ee:50:02:3d:ee:
         97:b8:1b:65:66:86:81:50:9b:d8:a6:d8:22:a6:d1:49:7b:8f:
         f9:8a:eb:83:72:54:f0:fb:b1:a8:6f:80:e2:d1:56:b9:9d:20:
         7b:9a:d4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----