Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/fa6fdf2c-80db-3723-abb8-e048a6801afe.roa
File:                     fa6fdf2c-80db-3723-abb8-e048a6801afe.roa (raw, json)
Hash identifier:          rkXlXhmnNQ9epdMuD/K9upqAhlpllZ2Jlncz20uM5H8=
Subject key identifier:   DD:F4:CB:3F:61:10:4E:21:B9:36:D1:AD:4A:85:3A:B8:9D:DE:78:5E
Certificate issuer:       /CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
Certificate serial:       010D0C9F4328584387EE454F66C6B788CCA5A2C8
Authority key identifier: 67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/fa6fdf2c-80db-3723-abb8-e048a6801afe.roa
Signing time:             Fri 13 Oct 2023 00:46:25 +0000
ROA not before:           Fri 13 Oct 2023 00:46:25 +0000
ROA not after:            Thu 11 Jan 2024 01:46:25 +0000
asID:                     399045
IP address blocks:        23.159.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:87:ee:45:4f:66:c6:b7:88:cc:a5:a2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744
        Validity
            Not Before: Oct 13 00:46:25 2023 GMT
            Not After : Jan 11 01:46:25 2024 GMT
        Subject: CN=413ac195-0cdb-4576-9d4d-82ee8a280657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:84:f6:f3:07:27:bb:53:02:3a:0f:54:55:
                    4d:8f:46:77:a9:0e:20:f9:f2:a1:fc:24:01:53:56:
                    2f:05:df:a6:bf:5d:2c:1f:93:7d:a3:fc:15:fc:8d:
                    8e:d4:d9:ea:0b:74:85:51:b6:7c:ef:29:70:03:a6:
                    5c:5b:a9:a5:3e:90:92:cd:4a:51:10:68:09:da:80:
                    ea:12:99:0f:42:8a:94:9f:e9:1a:37:65:1b:68:61:
                    fb:ab:d7:7a:81:5b:88:ac:92:b1:5f:98:15:31:6e:
                    38:86:ab:74:1f:c2:e9:46:c3:c6:e9:ff:0d:a0:ed:
                    90:01:6a:b2:ba:b3:7b:b2:ef:a3:b7:c6:ad:e3:ab:
                    6a:d3:30:cf:6d:4d:c0:e5:d8:d7:e9:bd:20:0f:f0:
                    c0:f4:2e:63:8b:a8:61:56:3c:f6:b9:81:37:b7:20:
                    f5:af:34:9e:d5:8b:1e:1d:d6:82:e9:a3:09:44:25:
                    7a:a0:58:7e:57:67:ae:f7:83:d2:8d:ae:83:97:f0:
                    e9:9e:85:dc:bd:1a:17:f6:f1:70:0e:c1:81:56:17:
                    0c:d9:35:d9:44:ef:9b:fa:89:b6:cd:03:38:24:20:
                    50:c3:d7:cf:69:2d:c6:84:42:c1:13:fd:93:8f:34:
                    d3:cb:ce:63:99:85:3e:99:8d:04:2e:53:0a:c2:50:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F4:CB:3F:61:10:4E:21:B9:36:D1:AD:4A:85:3A:B8:9D:DE:78:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/fa6fdf2c-80db-3723-abb8-e048a6801afe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.crl

            X509v3 Authority Key Identifier:
                keyid:67:2D:2C:24:22:DB:B0:BD:26:41:92:4D:63:A5:B6:C2:B4:EF:0D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f9fad5c-ee1f-44bc-a3b2-fda6f6c0b744.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:b6:86:a9:fa:46:42:b3:a6:5f:50:f6:f8:dc:88:d5:91:f6:
         40:ed:85:f1:44:4e:97:16:eb:d9:02:92:bb:1c:9a:df:36:5e:
         a4:1c:52:39:22:b0:99:d8:9d:2b:4c:ee:8d:c8:b0:ec:c3:b3:
         2e:3d:61:b8:f5:0b:20:b2:d6:67:fb:d1:7d:1a:02:ae:f3:fc:
         b6:6b:b0:7d:ce:28:8b:fe:46:fb:0e:47:44:ac:2c:4f:36:3e:
         81:ef:12:75:27:22:61:d1:6d:da:32:60:1f:b3:19:2d:80:be:
         4a:8e:60:21:52:37:e6:39:92:44:49:a4:53:7b:60:e3:f5:83:
         94:9f:8d:fa:5e:79:13:1a:a9:91:b4:3d:2a:a7:38:e3:ff:83:
         45:52:1a:87:9e:92:54:29:c8:99:4b:3e:ed:21:d4:7d:47:2b:
         4a:22:b0:6a:52:06:80:10:61:2c:ee:ad:78:fa:85:4f:2c:65:
         b8:31:6f:dd:dc:bc:70:fe:99:f7:00:e2:fa:e4:58:27:ab:bb:
         41:d6:f6:86:2b:b0:8e:d7:11:12:e7:43:e1:a2:78:d6:3a:a7:
         3e:89:83:ef:1e:e2:ae:b4:81:89:34:11:c7:fd:cc:ad:05:94:
         2e:d9:dd:09:67:5f:ee:37:05:51:ae:91:12:47:54:5f:ed:80:
         9a:f1:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----