Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/860f315c-d0c8-48e2-82af-cbb022b7b068/bec0c6df-5233-39a2-9f53-195b99618a52.roa
File:                     bec0c6df-5233-39a2-9f53-195b99618a52.roa (raw, json)
Hash identifier:          Vv3Q8eevKf8OvNkhlkthGKvD2DvfkBUf/t39NWZrdbI=
Subject key identifier:   34:43:CF:96:09:97:11:84:AD:63:9E:58:3C:1E:91:FB:2C:E3:AB:30
Certificate issuer:       /CN=860f315c-d0c8-48e2-82af-cbb022b7b068
Certificate serial:       010D0C9F43285842E54E517E42A153CA973C2300
Authority key identifier: 2E:83:37:B9:05:FD:8E:D6:17:67:2D:0A:5E:DA:8B:3D:7D:80:E1:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/860f315c-d0c8-48e2-82af-cbb022b7b068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/860f315c-d0c8-48e2-82af-cbb022b7b068/bec0c6df-5233-39a2-9f53-195b99618a52.roa
Signing time:             Tue 15 Aug 2023 18:43:11 +0000
ROA not before:           Tue 15 Aug 2023 18:43:11 +0000
ROA not after:            Mon 13 Nov 2023 19:43:11 +0000
asID:                     15133
IP address blocks:        192.30.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e5:4e:51:7e:42:a1:53:ca:97:3c:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860f315c-d0c8-48e2-82af-cbb022b7b068
        Validity
            Not Before: Aug 15 18:43:11 2023 GMT
            Not After : Nov 13 19:43:11 2023 GMT
        Subject: CN=2788f148-aa56-4bd9-afe4-550943891d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:54:2b:1a:5b:73:aa:69:bb:e9:62:9c:be:48:
                    87:20:2c:d9:c9:11:e2:d9:58:c5:cf:a9:d0:9c:49:
                    24:85:08:17:07:5c:c8:a4:58:e4:14:aa:df:17:12:
                    d6:1c:30:b7:ea:5e:68:26:61:40:4a:74:40:c9:bb:
                    2b:c9:42:45:c1:ef:cc:7a:50:2c:58:8d:d3:05:b8:
                    0e:49:12:06:87:10:d5:5b:8b:40:62:c2:6b:c6:a8:
                    5c:20:46:4c:a9:43:78:83:1b:db:ff:de:b5:03:3c:
                    44:cf:90:d0:7c:a0:69:b6:2f:63:5d:10:02:3d:db:
                    7c:d9:a3:84:13:65:3a:14:fe:b6:77:ce:28:7f:7c:
                    29:1e:5e:60:e3:9c:ad:dd:81:ce:4c:b4:90:96:da:
                    72:99:57:de:13:35:36:df:e6:1e:d5:bb:ae:8c:a4:
                    a0:45:6f:49:e2:65:ae:0f:56:ce:ed:40:ff:92:6e:
                    36:bd:fe:6a:44:3b:00:66:29:07:81:2c:f0:54:50:
                    46:f1:b0:2c:0d:62:5a:d2:f3:6f:52:2f:26:43:65:
                    1f:93:70:9b:03:4f:52:fb:79:1c:48:05:1c:06:b4:
                    ee:ef:74:1b:6c:ca:da:60:e1:14:1b:ac:51:e0:f4:
                    99:e4:ac:01:c4:13:71:a2:30:e7:a3:e1:be:42:ed:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:43:CF:96:09:97:11:84:AD:63:9E:58:3C:1E:91:FB:2C:E3:AB:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/860f315c-d0c8-48e2-82af-cbb022b7b068/bec0c6df-5233-39a2-9f53-195b99618a52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/860f315c-d0c8-48e2-82af-cbb022b7b068/860f315c-d0c8-48e2-82af-cbb022b7b068.crl

            X509v3 Authority Key Identifier:
                keyid:2E:83:37:B9:05:FD:8E:D6:17:67:2D:0A:5E:DA:8B:3D:7D:80:E1:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/860f315c-d0c8-48e2-82af-cbb022b7b068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:08:c2:24:30:6b:df:59:0b:6a:52:3c:ba:93:8d:9e:24:ce:
         97:ce:85:d3:11:fd:b4:d4:d1:27:b5:02:f2:b0:dd:eb:fd:1a:
         c3:5a:42:84:ac:fd:1a:0e:c8:b1:b0:14:15:38:fd:ff:ab:96:
         b3:e7:50:c6:06:3c:38:1d:16:e7:01:5c:d5:47:69:95:0d:bc:
         59:09:08:38:54:db:cb:c2:95:11:54:21:6e:75:7c:c2:eb:83:
         e2:ff:63:05:7e:61:5b:b1:a2:6a:08:d3:62:9a:b9:84:6a:79:
         56:25:d2:cf:0c:11:be:a7:a8:f9:00:3f:b0:7f:e1:e9:49:e3:
         77:63:0c:6d:e1:c2:e9:33:40:a9:2f:c5:ad:32:7b:08:88:06:
         49:31:d9:b3:f4:ee:2e:e8:ef:31:f8:07:f4:65:43:f1:3d:46:
         68:06:83:49:53:7a:89:24:c9:d8:d4:97:5e:74:98:ff:e7:84:
         0c:0a:58:d1:6c:d4:42:ee:ca:5d:63:11:f9:97:f0:32:e4:15:
         9e:06:a9:3e:85:64:39:f8:a2:4c:ea:15:47:68:94:99:72:5b:
         32:b6:4d:e6:da:6d:ce:b4:c0:cb:72:c5:be:81:dd:96:97:f7:
         81:45:08:96:cf:24:89:7e:08:f0:f1:e4:7d:1b:ba:b5:a7:43:
         7c:91:fb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----