Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/9feaf97e-1a40-3de6-a1c1-9771bc39ee40.roa
File:                     9feaf97e-1a40-3de6-a1c1-9771bc39ee40.roa (raw, json)
Hash identifier:          C6tZIfAbSJqk53EXNZ/gjLzVZry6ot8icIAJRhWqc6Y=
Subject key identifier:   BA:A4:49:52:94:50:EF:94:EF:E3:E5:33:9C:0C:3C:31:E4:DA:37:9F
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F43285841E46D20EF8B150E9CFB134100
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/9feaf97e-1a40-3de6-a1c1-9771bc39ee40.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sat 17 Jun 2023 17:46:13 +0000
asID:                     2914
IP address blocks:        104.250.252.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:20:ef:8b:15:0e:9c:fb:13:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 17 17:46:13 2023 GMT
        Subject: CN=8c1345c4-2239-40b4-8167-157f34b06343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:1f:f8:8c:a7:19:ef:a5:44:e6:19:3c:df:
                    6f:60:49:a3:24:8e:6e:3e:d4:5f:4b:2a:fa:59:23:
                    5b:38:5c:25:0a:5c:f9:63:aa:23:76:d1:c3:c3:ac:
                    30:4f:a6:22:7d:d1:ec:f5:56:d5:3d:bc:47:e4:a3:
                    40:c7:d8:f6:60:9e:92:93:81:6d:a1:bf:46:d2:e5:
                    05:56:6a:4b:3a:4f:96:1a:69:e6:8c:cd:e2:33:84:
                    ef:44:9c:af:6b:f9:31:f5:9b:79:21:a7:69:b3:ab:
                    d3:bb:d2:dd:1f:96:5f:2d:8c:69:ae:72:0f:ec:e1:
                    98:f7:83:59:05:04:67:09:92:1f:ac:8d:cb:f0:46:
                    49:fe:b1:a8:e2:9d:44:e4:99:fb:98:91:8c:31:02:
                    c7:fc:d4:8e:20:6a:d7:8e:f3:61:84:2f:a3:16:20:
                    da:16:18:51:37:4c:5c:c2:43:71:d4:bf:a7:48:df:
                    d7:40:77:4f:5a:11:92:78:13:8d:d5:54:96:8d:a3:
                    3f:fc:a0:7c:7c:51:80:80:79:7b:65:39:2d:b2:ed:
                    f8:df:40:1b:69:cc:76:7a:f5:7f:d2:ac:92:79:ce:
                    19:70:7f:6d:d1:ef:51:96:05:c3:d2:32:d9:50:07:
                    f1:9b:26:e4:e4:2b:16:c0:04:8a:f8:b5:fa:b2:e5:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A4:49:52:94:50:EF:94:EF:E3:E5:33:9C:0C:3C:31:E4:DA:37:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/9feaf97e-1a40-3de6-a1c1-9771bc39ee40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:ac:05:3a:d2:9d:c3:cf:93:35:87:d0:a0:2d:dd:27:cf:
         12:33:51:ad:d9:94:b0:4f:40:30:e8:4b:91:96:0e:cb:3a:17:
         88:7e:a4:71:c5:87:39:45:a8:58:89:25:6f:c9:17:31:25:d6:
         3a:98:2d:98:03:87:5d:df:62:69:b5:2b:f6:db:ed:85:68:67:
         cd:02:54:c3:7b:a0:60:53:04:cb:f2:1c:1a:38:c7:c0:f8:e6:
         2e:d9:f5:7c:c8:bc:43:5e:fb:77:7b:d3:2b:98:ed:1e:ec:4c:
         6a:9f:70:48:85:fb:a3:9e:13:8f:5c:21:4e:e9:1d:81:88:93:
         df:d8:8a:3f:77:0e:6b:bc:ff:91:53:57:cd:2f:c9:82:fb:ee:
         14:34:12:cd:7a:99:56:27:f2:36:9d:7b:ac:61:03:52:77:89:
         4e:3a:21:d7:c3:4b:52:b6:d0:21:8e:39:ff:c1:f7:bf:28:6d:
         07:40:19:f0:32:92:fa:8f:da:f3:4d:e1:7b:6a:7c:b7:5f:47:
         45:25:b9:9a:07:c1:ed:59:8e:87:a9:97:6c:f1:29:74:a4:9d:
         92:f1:65:9e:01:20:3a:c7:30:11:ec:9c:0b:89:56:a0:80:b1:
         d3:41:12:6c:05:4a:a3:09:ae:40:d8:67:b7:55:3d:ea:b4:72:
         b7:de:64:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----