Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5fc34ef-63e7-3f4e-85e0-d1437a459243.roa
File:                     d5fc34ef-63e7-3f4e-85e0-d1437a459243.roa (raw, json)
Hash identifier:          gdsstRYVfbhAlCrvuXxgoxPge0yCV22G53KdOKlUCGo=
Subject key identifier:   73:91:AF:18:B7:D1:11:60:DB:9D:5E:EC:37:94:BB:E0:0B:4D:94:E7
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F43285844E0DA846B899D370C521C4FD0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5fc34ef-63e7-3f4e-85e0-d1437a459243.roa
Signing time:             Tue 13 Feb 2024 14:00:29 +0000
ROA not before:           Tue 13 Feb 2024 14:00:29 +0000
ROA not after:            Mon 13 May 2024 13:00:29 +0000
asID:                     834
IP address blocks:        199.48.179.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e0:da:84:6b:89:9d:37:0c:52:1c:4f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Feb 13 14:00:29 2024 GMT
            Not After : May 13 13:00:29 2024 GMT
        Subject: CN=1f219005-64a9-44e0-813b-2dfd9c4b077c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b4:8c:31:93:8a:42:ac:a5:ea:3a:08:c3:d0:
                    60:b2:e6:b1:61:a5:ed:bc:57:a3:c9:19:30:c8:53:
                    e8:cf:59:e6:2f:6f:a0:ef:aa:c8:a6:6a:48:d3:27:
                    fe:98:c8:64:95:67:73:47:08:63:39:f9:e2:bd:b4:
                    57:fe:70:1f:8f:47:c4:52:05:68:d3:9a:fb:fe:21:
                    ea:e0:25:fa:4d:4c:cd:da:5c:92:42:58:0f:95:06:
                    e0:12:1c:c5:ac:43:cb:b3:03:2a:c7:f1:6d:ce:3a:
                    57:5c:35:01:ea:fa:fa:ee:20:02:3e:b2:0a:0c:97:
                    cf:fb:e7:4a:5f:20:24:d4:8f:0e:1d:dc:54:ec:8a:
                    79:f5:28:99:3f:5d:3b:90:be:63:ab:26:3e:df:1f:
                    6c:84:65:01:bd:b8:4c:d3:62:91:ea:49:03:65:5b:
                    23:42:ef:4a:70:73:a8:01:7c:c8:66:7f:55:e7:b8:
                    59:12:6d:8e:2f:0b:70:a3:07:65:ec:e3:88:87:45:
                    ab:89:26:b6:aa:0c:1f:81:ae:e5:61:d3:74:99:ce:
                    8c:73:62:cd:f3:5d:fa:67:d5:cf:c3:c6:46:51:99:
                    57:88:d9:bd:09:b0:0e:7f:96:19:30:5e:e8:0e:ad:
                    c0:2b:2c:d0:2a:b6:46:a7:00:bb:2b:b6:97:cd:f0:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:91:AF:18:B7:D1:11:60:DB:9D:5E:EC:37:94:BB:E0:0B:4D:94:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d5fc34ef-63e7-3f4e-85e0-d1437a459243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bc:97:9f:e5:a4:f8:31:1d:f3:c7:2d:e7:be:4d:66:bd:fd:
         88:b2:64:bc:23:30:2d:ae:75:cc:5f:26:69:df:d7:1b:62:4b:
         6a:4e:cb:f2:5a:44:9b:77:ed:ea:7f:c9:16:5a:b0:eb:41:6c:
         1f:32:f0:e8:0d:38:f3:3d:73:18:4c:8e:83:10:9b:74:a6:93:
         c3:88:9c:02:2b:9e:5d:80:8c:26:12:d1:53:9d:18:01:e9:d0:
         8c:80:6e:07:fe:3b:fe:aa:f9:4c:63:f7:44:0e:4c:75:3a:ce:
         22:00:a7:08:40:8c:d1:1b:de:1a:f3:ce:de:d0:41:02:b1:b8:
         b9:33:a9:37:63:1f:4f:36:6d:60:55:b2:2f:82:4b:d5:b9:71:
         e3:54:6b:91:dd:24:0e:df:0b:7e:f2:ff:d3:f7:10:76:ad:4f:
         f5:0f:ba:c1:b0:68:f9:36:e9:b1:7a:b4:46:d6:c3:dc:c4:0f:
         4f:39:76:a9:54:38:6b:51:8c:7a:08:54:b9:ba:82:a4:ea:92:
         8c:a3:a6:b3:7f:8c:33:9f:a2:5f:26:99:56:b9:35:01:5c:dc:
         dc:e5:11:1b:8a:ff:f4:f9:32:0d:e2:dc:24:e9:af:26:53:ba:
         eb:ea:03:c9:e0:e2:91:6d:c7:26:d4:bd:b8:1b:06:df:4e:4d:
         97:da:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----