Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/39188aa8-5b90-3bda-a569-1714d1a3058b.roa
File:                     39188aa8-5b90-3bda-a569-1714d1a3058b.roa (raw, json)
Hash identifier:          r+4bSF1b5wX1xhiIQSH/DQ4JJcP83tAbXQvfMdTQixY=
Subject key identifier:   35:C2:48:DC:9C:5F:9F:E0:58:A3:EC:62:CF:CE:75:29:F4:D5:2A:42
Certificate issuer:       /CN=5402024b-7d23-4041-8713-daddd547282a
Certificate serial:       010D0C9F43285843F3B804F63A502F77E2934AF0
Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/39188aa8-5b90-3bda-a569-1714d1a3058b.roa
Signing time:             Mon 20 Nov 2023 15:24:24 +0000
ROA not before:           Mon 20 Nov 2023 15:24:24 +0000
ROA not after:            Sun 18 Feb 2024 15:24:24 +0000
asID:                     398343
IP address blocks:        68.170.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f3:b8:04:f6:3a:50:2f:77:e2:93:4a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5402024b-7d23-4041-8713-daddd547282a
        Validity
            Not Before: Nov 20 15:24:24 2023 GMT
            Not After : Feb 18 15:24:24 2024 GMT
        Subject: CN=8cc0deeb-5955-435c-a9b0-cf08241eb557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:bc:1d:4a:79:61:da:73:8e:bd:d0:85:a6:
                    2d:61:1a:bf:6d:d1:db:7b:03:2d:6f:eb:08:c5:9e:
                    44:f9:a9:7d:e1:f1:ed:2b:84:0a:0f:18:70:ca:81:
                    e8:ee:f7:82:41:3f:29:52:05:d8:27:50:a9:44:5c:
                    f2:15:e4:46:2b:ce:24:59:09:bf:d4:eb:37:9b:84:
                    9f:a9:3f:2f:3f:89:95:69:c1:72:54:6e:b4:9b:e4:
                    3d:09:43:2f:f0:33:82:26:37:1d:6b:88:64:ea:4f:
                    bc:8d:0d:6c:c6:41:d4:b7:8c:74:dd:17:7f:76:db:
                    d1:15:97:56:bb:e2:ca:86:81:ba:88:d0:34:14:6e:
                    0d:f0:ef:0a:ee:49:8f:d1:9a:6e:87:47:b2:0c:4a:
                    c3:00:9d:f6:ba:99:2a:79:bb:87:16:06:33:86:02:
                    a7:41:9a:c8:05:96:38:ed:8e:36:f4:cb:ea:06:ff:
                    e8:6e:92:29:24:1f:b6:f9:6f:1f:1b:08:f4:d7:dd:
                    ac:e8:e3:7e:26:68:84:bc:05:f1:0b:12:2d:06:e3:
                    0b:85:bf:b0:96:1a:8a:6e:50:5f:a7:78:4b:0f:4d:
                    76:78:80:a1:36:0b:f2:d0:42:c5:6b:a7:af:29:32:
                    0a:05:21:69:49:8d:fb:3c:f1:76:fe:9d:b1:89:07:
                    94:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C2:48:DC:9C:5F:9F:E0:58:A3:EC:62:CF:CE:75:29:F4:D5:2A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/39188aa8-5b90-3bda-a569-1714d1a3058b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:95:a4:7c:28:38:97:db:50:9c:88:a1:f1:c5:a2:30:1f:3d:
         30:5a:70:58:46:8b:c1:16:bd:7c:33:5f:6a:9c:dc:3c:ae:32:
         45:9f:77:8f:89:46:71:9b:4e:cc:93:2c:5d:01:d3:2e:5b:15:
         7a:18:b8:e2:c6:72:e8:90:c2:af:9b:c0:30:60:fa:4c:97:fe:
         44:7b:a4:dc:b9:97:a2:66:7e:09:d5:75:95:f3:a2:57:56:cc:
         5a:af:52:af:8c:fd:7b:1a:4c:e4:49:dc:08:62:5a:f0:43:85:
         3d:e0:fb:ee:a5:f5:de:f9:62:d5:ec:0d:13:e8:c3:b7:ce:19:
         5b:e7:81:8f:fc:c5:5b:cb:b1:57:1e:ae:84:70:8c:56:96:ce:
         02:9b:7f:6d:46:af:e4:9c:a2:27:99:19:c7:5c:52:30:17:74:
         89:2c:c7:5b:ee:a8:87:dd:f8:f5:55:fe:80:a2:bf:31:9e:42:
         6e:a2:fc:c4:fb:c0:8a:58:20:9a:b1:fa:56:d0:c6:7f:8d:f5:
         35:04:82:a2:0a:54:9e:ac:ad:d2:c7:47:0d:48:5d:7e:fd:83:
         c0:c5:4d:66:28:23:f9:a2:6f:e6:17:06:9c:48:05:ac:ac:ec:
         f5:0f:c1:05:34:5d:04:60:0f:eb:1a:48:20:a7:7c:70:8c:e4:
         62:b1:b5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----