Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/532351f4-b530-358d-86f0-c8afbc5cb4ed.roa
File:                     532351f4-b530-358d-86f0-c8afbc5cb4ed.roa (raw, json)
Hash identifier:          2QWr5JRoBuBmhrIQOiU7NoAWF3U5oIFD4cPr+kwJZ4M=
Subject key identifier:   B9:35:7A:75:0F:BF:D3:31:9A:4A:80:4F:54:1A:69:74:D3:27:5B:3D
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F43285843F923BC6B112BEBE9C3DAA2C0
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/532351f4-b530-358d-86f0-c8afbc5cb4ed.roa
Signing time:             Wed 22 Nov 2023 14:00:21 +0000
ROA not before:           Wed 22 Nov 2023 14:00:21 +0000
ROA not after:            Tue 20 Feb 2024 14:00:21 +0000
asID:                     58182
IP address blocks:        65.38.108.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f9:23:bc:6b:11:2b:eb:e9:c3:da:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Nov 22 14:00:21 2023 GMT
            Not After : Feb 20 14:00:21 2024 GMT
        Subject: CN=8ace5695-df0b-4819-85b9-805f8429e577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:70:c6:e0:02:eb:99:da:35:78:96:99:64:e2:
                    9c:a9:19:ba:3c:e5:92:ca:05:d5:86:91:6b:c6:04:
                    23:1a:6d:31:86:61:23:1d:62:f2:0c:40:57:63:ba:
                    dc:00:c5:3e:fe:23:10:cb:da:04:64:8f:c9:70:d8:
                    39:2a:cb:fa:32:d8:56:c1:a3:36:c9:c9:2a:e2:bc:
                    55:a0:6f:3b:ff:4e:3e:f5:8d:60:c2:69:7f:fa:74:
                    67:45:b9:ae:78:c9:aa:c1:ae:b2:c1:5c:34:c3:c9:
                    fe:65:e2:27:2f:52:4e:f0:45:27:5c:68:9c:d7:76:
                    e5:f7:f3:c1:a2:34:4f:e3:ba:8d:55:02:fd:d8:e5:
                    43:d6:88:de:16:ae:af:43:3f:1c:c4:33:cb:81:3f:
                    a9:5f:0a:5d:a6:77:d3:5a:99:41:f5:af:37:94:d4:
                    14:68:b6:cc:17:0e:f0:a1:8e:ea:71:cc:ea:4e:95:
                    bd:e8:cb:bf:c2:62:c0:98:2c:58:dc:87:92:a5:35:
                    6b:12:d5:45:54:dd:62:7e:63:89:25:52:f8:26:1e:
                    14:73:d0:63:2c:8e:75:70:1e:2b:98:3b:08:26:e2:
                    b6:3e:2f:7e:61:fa:a3:46:96:0f:e9:9e:ab:95:4e:
                    91:48:88:16:36:6f:f9:33:fa:ce:52:50:33:11:a7:
                    75:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:7A:75:0F:BF:D3:31:9A:4A:80:4F:54:1A:69:74:D3:27:5B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/532351f4-b530-358d-86f0-c8afbc5cb4ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:74:83:0b:f8:f3:d5:b7:70:47:1e:1f:e5:cf:6a:03:2b:
         14:b8:7a:c1:75:ba:48:34:e7:48:2b:ca:5b:06:9c:ca:13:17:
         b0:29:38:8a:00:12:ae:3c:2b:26:e4:f4:50:e6:d2:98:a7:88:
         22:53:01:c0:ba:99:4a:18:7c:9e:9f:f8:e4:e2:86:28:5f:5b:
         b1:00:21:af:0e:37:dc:a5:b6:71:a2:27:e5:8f:f3:6a:78:49:
         75:23:42:4d:6e:2a:35:81:98:43:42:86:d8:6f:57:ab:bc:a3:
         a0:24:e0:30:ef:bf:bb:f7:66:c5:eb:ce:89:cf:df:65:b1:3b:
         89:b7:c8:00:f8:28:ff:e2:ac:82:28:f3:4f:5e:30:f4:f3:17:
         98:c8:b4:28:ec:92:82:58:e5:92:a2:28:a0:86:31:2f:43:22:
         f8:f9:dc:32:58:e7:90:9a:8a:85:88:59:a8:31:1c:3c:0d:aa:
         c7:10:d8:85:19:53:26:5b:64:67:d6:aa:43:6a:f0:2d:dd:38:
         52:72:e5:7b:99:b6:e6:69:f3:86:47:95:fa:1e:45:5d:44:2b:
         a5:70:a4:5e:c8:3c:62:78:cb:d3:df:7d:00:b9:1f:04:d8:7a:
         77:98:5e:6d:2c:36:e3:f1:45:12:6c:d0:d9:e9:5e:56:a9:11:
         ba:96:a8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----