Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/de9e0716-e4a2-3ee0-ade4-5e5c6a2eb51b.roa
File:                     de9e0716-e4a2-3ee0-ade4-5e5c6a2eb51b.roa (raw, json)
Hash identifier:          Fk/VwVm9+2xvAg5/wyf4AaAKkIjJ+7f7kKTP/TXVIHI=
Subject key identifier:   96:69:F8:CF:71:99:8A:D7:23:6B:40:77:89:0D:BC:2C:46:85:DA:01
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F43285843BBD1020EB77C1130BC1E07E0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/de9e0716-e4a2-3ee0-ade4-5e5c6a2eb51b.roa
Signing time:             Tue 31 Oct 2023 14:49:29 +0000
ROA not before:           Tue 31 Oct 2023 14:49:29 +0000
ROA not after:            Mon 29 Jan 2024 15:49:29 +0000
asID:                     400642
IP address blocks:        199.48.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:bb:d1:02:0e:b7:7c:11:30:bc:1e:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Oct 31 14:49:29 2023 GMT
            Not After : Jan 29 15:49:29 2024 GMT
        Subject: CN=1af8f3d7-7ffa-4a73-be5e-7c93875577da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:1c:03:40:68:cb:93:5e:33:c1:55:83:79:
                    6e:fe:a8:10:d5:58:bb:e6:05:f2:6d:26:69:f7:95:
                    61:72:31:15:47:8f:7b:ee:6d:4d:b0:45:4d:83:4e:
                    09:b8:09:25:56:38:36:aa:6f:be:31:1f:60:8a:2f:
                    61:70:50:19:b5:fc:1b:8f:1c:77:80:c0:5c:d9:62:
                    71:bc:e4:88:84:ca:22:dc:b3:95:90:3d:34:85:4f:
                    36:af:a2:76:d6:e7:15:c8:d5:ae:7e:78:21:8b:4e:
                    1e:32:4a:db:e0:55:47:f3:fa:7b:25:3a:b3:20:96:
                    dc:fb:ec:b1:8a:86:9a:ba:c6:dc:6b:19:a0:de:62:
                    93:51:4a:42:c3:df:84:0f:00:09:fb:d7:c5:fc:b4:
                    7a:fa:f1:07:fd:1a:b4:0d:96:01:cc:f9:56:dd:80:
                    ac:20:87:1d:a4:bd:28:06:57:9f:01:c0:1c:35:df:
                    8a:7f:67:9b:39:62:32:8b:91:2d:1a:cb:09:3c:05:
                    57:c8:5e:95:ef:47:5d:f2:5b:70:bd:4c:49:4c:f5:
                    ba:52:45:7f:c1:92:4c:7a:85:9d:5b:aa:ba:de:d1:
                    ce:65:0d:2a:ab:c2:28:4c:80:65:b5:20:16:2d:18:
                    e8:dd:51:7b:cf:1e:07:82:12:58:d1:89:52:d0:59:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:69:F8:CF:71:99:8A:D7:23:6B:40:77:89:0D:BC:2C:46:85:DA:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/de9e0716-e4a2-3ee0-ade4-5e5c6a2eb51b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e2:c6:9d:ce:b6:89:73:3c:d0:ea:3f:67:9f:94:d1:34:18:
         de:06:87:e5:3f:98:45:96:6f:aa:17:cc:2a:f8:47:73:6c:64:
         f0:6c:9c:69:4c:d5:1d:f1:83:e6:28:80:8f:52:d0:34:09:0d:
         04:13:80:40:a8:8e:aa:b5:ff:cb:31:11:6d:c0:4f:18:6c:81:
         4c:72:21:de:c3:4f:72:21:0b:ae:19:d9:3d:d8:3a:84:37:36:
         92:48:5f:8e:48:a2:77:6d:bc:9c:96:b2:d7:6f:63:bf:e6:9c:
         6c:0c:26:e5:fa:62:34:29:1a:5f:36:db:ef:42:6a:00:ad:76:
         c7:a0:43:50:fc:85:ac:67:71:8b:5f:72:05:e9:ac:10:e9:5a:
         69:ae:b3:e9:cc:dc:4d:d7:88:0b:99:8a:b6:ec:a9:8a:5c:8f:
         8e:12:c8:91:db:6a:6a:b7:94:0a:f6:6c:74:2f:ea:99:1b:fe:
         cb:a6:f8:bb:cd:63:1e:49:08:5a:d7:47:b2:eb:b5:88:7d:aa:
         bd:b2:f5:b1:60:9a:65:90:d9:3c:85:eb:92:36:47:ef:c2:67:
         42:ad:37:5b:f8:b1:c8:32:bc:ef:ae:fb:c5:ea:54:90:05:0c:
         96:00:5e:e8:a6:dc:56:63:5e:89:eb:a8:b3:74:d4:25:22:68:
         90:67:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----