Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/140872f8-9a3a-3096-abfb-67d09076fc35.roa
File:                     140872f8-9a3a-3096-abfb-67d09076fc35.roa (raw, json)
Hash identifier:          mIgtJS9ah1AX1Z5S8F99oPsWuzcZgNtSerFr66MKEus=
Subject key identifier:   17:0E:57:42:8C:86:B4:5C:B0:01:F2:32:B9:94:03:4B:63:01:42:79
Certificate issuer:       /CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
Certificate serial:       010D0C9F43285842F9945526C6A582FD0D5A6F40
Authority key identifier: FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/140872f8-9a3a-3096-abfb-67d09076fc35.roa
Signing time:             Wed 23 Aug 2023 01:00:22 +0000
ROA not before:           Wed 23 Aug 2023 01:00:22 +0000
ROA not after:            Tue 21 Nov 2023 02:00:22 +0000
asID:                     62833
IP address blocks:        64.255.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f9:94:55:26:c6:a5:82:fd:0d:5a:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
        Validity
            Not Before: Aug 23 01:00:22 2023 GMT
            Not After : Nov 21 02:00:22 2023 GMT
        Subject: CN=a7c46ad4-aabb-438a-907e-a73626ffc24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:58:d0:45:67:ca:45:5f:b8:cf:d5:da:b1:
                    dc:a1:70:87:85:8f:19:37:ba:1b:c4:22:ab:25:6b:
                    bb:2f:af:2b:2a:d3:73:0e:5f:44:86:70:a5:f3:9a:
                    d9:d7:a7:c0:9d:6b:83:b5:d3:f7:1c:9b:ad:61:9c:
                    8c:d4:89:c1:2c:aa:e9:14:6a:1b:19:04:5f:f4:77:
                    b7:42:0f:ce:f5:14:77:c5:ab:21:2b:e4:5a:95:92:
                    39:21:e0:e8:e7:8d:1e:12:83:b2:18:72:77:35:9d:
                    d2:b5:3a:21:e4:f3:04:41:8f:40:6a:65:bb:23:d9:
                    85:c4:ee:ef:8c:11:2e:a2:2d:fc:7f:0a:ae:1c:a0:
                    cc:39:e7:74:da:c3:a6:e7:1d:32:04:ee:1f:81:e4:
                    b8:e8:2b:10:a2:83:14:3a:9a:4e:39:0c:ca:96:4f:
                    91:0d:51:d4:bf:f5:42:70:77:ab:9f:fd:b3:b9:91:
                    05:7f:c2:0f:2d:f6:b9:3d:2c:30:9a:b1:67:b8:12:
                    0d:2c:4f:76:46:8c:b9:e0:3b:c0:56:57:df:f7:df:
                    50:44:e7:dc:6c:07:17:69:ae:92:75:34:94:70:67:
                    ca:50:56:0a:0c:a3:3e:c8:58:ed:7b:df:bb:b4:18:
                    c0:0a:67:b8:f2:37:03:d5:9f:d5:b8:ad:80:53:6e:
                    42:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0E:57:42:8C:86:B4:5C:B0:01:F2:32:B9:94:03:4B:63:01:42:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/140872f8-9a3a-3096-abfb-67d09076fc35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl

            X509v3 Authority Key Identifier:
                keyid:FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.255.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0d:4f:f4:68:d8:17:5d:87:f9:1b:b6:be:6e:dc:02:9b:6c:
         59:b7:e1:07:4d:52:18:14:44:74:e6:59:df:11:ec:da:79:55:
         75:f2:61:d3:1e:44:be:e8:ef:03:16:97:79:18:78:f4:ae:58:
         75:2b:ce:eb:58:72:5c:20:02:2c:06:db:4f:d0:8d:40:21:55:
         1c:43:6a:8d:c8:fc:82:84:0f:08:ed:ce:92:00:1a:22:73:7a:
         9b:3c:07:e2:75:08:f4:44:3c:c2:da:a2:62:a2:80:b5:33:ab:
         86:37:32:da:6d:48:24:56:f8:eb:2d:2c:76:8d:99:2b:d7:e5:
         b1:2a:88:00:fa:8c:5f:a3:7a:cc:27:21:d1:c9:96:42:df:39:
         47:59:e7:9d:92:1d:23:b1:65:c1:2b:27:ef:a6:9a:95:0f:2d:
         6f:d6:b8:2d:35:a1:64:d2:58:b0:db:54:3a:74:bb:bf:0b:0b:
         0d:25:c3:d2:6b:f7:67:13:1e:45:c4:fb:7b:27:62:b0:7d:56:
         e0:d7:08:41:2f:59:47:fd:bb:08:f2:ee:54:ec:90:dc:e5:b4:
         dc:6f:19:e4:c1:9c:c5:68:c4:9f:21:a5:5d:1b:0d:44:40:68:
         64:30:23:52:17:13:4f:2b:15:ca:6f:66:b4:c6:0a:9b:a7:0e:
         b5:f5:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----