Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6ebd6bb4-ea92-3c6f-8477-09bf92ed5bdc.roa
File:                     6ebd6bb4-ea92-3c6f-8477-09bf92ed5bdc.roa (raw, json)
Hash identifier:          h3PsQthO4YhOiYo634SwlPJ/+II9tXzbhSyXRsb3hts=
Subject key identifier:   EC:3E:CC:54:A8:C0:01:4B:B2:2B:B4:64:A9:1D:56:D9:46:B4:D9:5D
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F43285845056F506EF4A9FDACE09B2100
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6ebd6bb4-ea92-3c6f-8477-09bf92ed5bdc.roa
Signing time:             Mon 26 Feb 2024 16:29:24 +0000
ROA not before:           Mon 26 Feb 2024 16:29:24 +0000
ROA not after:            Sun 26 May 2024 15:29:24 +0000
asID:                     27539
IP address blocks:        69.26.5.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:6f:50:6e:f4:a9:fd:ac:e0:9b:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Feb 26 16:29:24 2024 GMT
            Not After : May 26 15:29:24 2024 GMT
        Subject: CN=52656d33-f257-4909-986b-9255beee028a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:d3:15:91:80:b1:95:31:3a:86:46:eb:8a:
                    8b:2c:f7:d9:6e:ae:b3:42:89:69:60:b1:96:dd:54:
                    d8:66:1d:62:7e:24:f5:af:c8:8c:55:b6:7e:f0:1c:
                    89:2c:90:18:43:08:f4:e4:7c:07:69:2f:7d:b8:73:
                    3c:b0:32:cc:eb:28:8e:f1:c7:de:3d:6d:52:f6:1d:
                    fa:18:96:7c:ff:3b:3d:ea:8a:0f:c3:ac:35:c8:5b:
                    7c:29:1b:4e:b3:08:a0:79:ee:1e:f0:bf:40:91:9b:
                    f9:bc:f0:d2:b3:86:fa:36:ef:b3:e0:52:de:59:ae:
                    aa:0c:8c:c9:81:eb:57:65:2c:bb:2e:44:8d:61:71:
                    1c:d6:f7:04:28:e8:65:07:80:1a:e2:98:aa:1f:7b:
                    ab:ff:41:81:71:05:61:af:24:a7:78:1e:7c:01:ff:
                    d3:43:04:3d:21:8b:07:87:b2:12:52:5c:55:5a:c9:
                    c9:d2:21:d3:1d:98:9a:57:fa:f2:7a:7b:3e:c6:22:
                    cc:7e:21:2f:c1:47:2f:04:29:6b:0d:d1:61:c1:4c:
                    b5:ff:59:f9:a0:bd:f6:02:93:5c:da:45:c1:d9:0c:
                    e7:8d:dc:10:30:f2:5c:7c:fc:7f:83:19:93:f8:1c:
                    48:82:45:1c:ad:6d:7a:df:a6:59:db:57:f5:04:c7:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3E:CC:54:A8:C0:01:4B:B2:2B:B4:64:A9:1D:56:D9:46:B4:D9:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/6ebd6bb4-ea92-3c6f-8477-09bf92ed5bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:03:e8:e4:62:e4:f8:88:c2:57:4c:b2:17:37:84:c9:f8:d3:
         6f:5c:d7:1b:01:1e:78:00:73:9a:84:c4:70:43:45:96:54:cd:
         59:d8:99:24:36:10:13:1f:a9:9e:3d:7a:43:c6:8b:07:25:0d:
         ab:fd:14:8b:5c:c7:c5:48:36:7a:37:33:75:8e:ab:f0:a1:cc:
         43:56:35:6c:41:fb:4f:80:8d:e1:e5:01:f8:92:90:1b:87:08:
         52:aa:2c:94:7b:58:bf:37:2b:07:c6:f4:3d:19:a4:f1:6d:ed:
         90:79:2f:db:0b:63:69:d3:80:39:14:aa:ed:3e:8d:2e:7d:68:
         fd:79:76:1e:30:82:e6:1f:b1:0b:99:6b:c1:f5:40:33:ce:67:
         de:d0:19:03:a4:49:47:e2:9e:68:8f:bc:f6:1c:fb:8c:a8:e8:
         c3:41:53:34:b5:06:45:6a:f7:37:70:a3:ad:c9:44:9a:56:e5:
         7f:e8:9c:62:35:26:d0:ec:1a:14:28:df:7e:d3:03:e1:27:a7:
         72:a8:a0:11:14:6e:22:8c:48:58:a6:36:2f:c6:f9:d0:ac:c1:
         55:06:25:b7:69:b7:07:5c:f4:0f:9b:f7:95:62:f6:0f:43:04:
         0b:1e:28:aa:f8:77:a0:2e:f7:00:d1:bc:40:f8:7d:97:61:a5:
         f5:4e:b5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----