Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17c25161-a809-3b01-856b-e1c4f6bcce88.roa
File:                     17c25161-a809-3b01-856b-e1c4f6bcce88.roa (raw, json)
Hash identifier:          R0tecKm+hvw7e5o49569J1XBr+iozy+dfB30gzi7klY=
Subject key identifier:   6F:3D:06:B3:40:1B:96:D3:31:DA:D0:14:82:1E:6E:D3:55:A6:F2:9C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858426151C49C6E8AB8B59AD23BC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17c25161-a809-3b01-856b-e1c4f6bcce88.roa
Signing time:             Thu 29 Jun 2023 12:03:25 +0000
ROA not before:           Thu 29 Jun 2023 12:03:25 +0000
ROA not after:            Wed 27 Sep 2023 12:03:25 +0000
asID:                     205320
IP address blocks:        45.38.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:61:51:c4:9c:6e:8a:b8:b5:9a:d2:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 29 12:03:25 2023 GMT
            Not After : Sep 27 12:03:25 2023 GMT
        Subject: CN=2eeae14d-0938-430f-90de-4d6f657b350d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:0c:56:eb:51:ef:40:72:39:96:80:d7:77:
                    7d:fe:db:5a:70:76:36:fd:cc:db:a0:f9:cd:8c:9c:
                    1b:d3:75:f1:12:35:27:d8:61:c1:bb:9c:ec:71:b9:
                    b7:6c:00:c4:ae:fd:22:6c:26:28:aa:31:ea:1f:b1:
                    8b:93:70:6c:f5:9b:41:2f:73:8a:a7:61:eb:8a:be:
                    de:ce:18:05:d3:13:3f:ed:8f:76:31:c4:66:00:49:
                    1b:1c:28:59:85:42:8e:ea:44:0e:b6:dc:10:bc:9e:
                    72:68:6f:5e:ec:12:3b:23:bb:d9:fc:b3:55:a7:f2:
                    01:89:cc:9c:46:1c:b6:ee:34:9f:44:9e:41:df:48:
                    ff:71:9e:3b:46:48:ec:42:ca:71:7f:fb:71:7d:0f:
                    b5:71:86:5b:e5:65:4d:c0:3e:cf:f0:5c:0f:64:66:
                    ec:32:0b:60:d8:19:c7:e4:3e:5e:7c:91:00:94:06:
                    e7:95:75:97:51:8c:0f:01:7c:1f:8a:c7:52:10:ee:
                    04:42:f8:8d:3b:cd:df:39:5b:fe:5d:54:1f:16:8f:
                    5e:e1:25:5a:0a:98:3b:98:c4:18:cb:97:15:e7:b8:
                    d1:94:d1:60:35:2b:98:17:e9:0c:c5:c5:db:88:e9:
                    73:bd:ba:c0:eb:e1:ec:d6:02:38:d7:55:fd:7c:47:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3D:06:B3:40:1B:96:D3:31:DA:D0:14:82:1E:6E:D3:55:A6:F2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/17c25161-a809-3b01-856b-e1c4f6bcce88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4a:9b:1a:48:9c:2e:b3:9d:02:37:80:ee:25:50:9d:b2:13:
         1e:f8:fa:aa:d3:1e:f0:4e:77:2e:52:45:75:d9:5f:9c:03:03:
         fb:30:f2:11:44:8c:9b:ef:a7:44:aa:37:e0:fe:6b:cf:8c:88:
         8d:32:6f:67:43:59:ae:22:0e:9b:af:d0:2d:d6:15:62:76:fc:
         12:af:cc:16:a6:e1:03:97:8f:06:81:2d:3e:2c:86:8d:01:09:
         a8:55:3e:27:7e:bc:3c:78:21:2b:fe:35:2f:b1:15:5b:2a:aa:
         1e:90:b3:66:8c:e4:5d:2d:50:eb:01:76:b4:0b:c9:96:da:62:
         38:6e:2f:31:6e:1d:14:bb:b8:89:24:f4:4d:82:4f:d5:b5:f0:
         ba:1e:f7:5e:84:09:b5:67:97:5e:e1:13:90:5b:0c:f6:0b:62:
         36:2c:84:30:84:48:23:d4:4f:2c:30:36:ec:cb:65:3a:b2:58:
         f5:0c:30:5b:dd:f3:c1:72:f3:8a:b1:02:78:d3:e9:b4:06:03:
         04:cd:a5:fa:df:b3:6c:48:3f:6c:f0:75:42:0b:fa:51:89:7f:
         9d:5c:7d:73:06:ac:1c:3a:96:07:aa:f5:ea:5b:02:b5:5e:2a:
         35:b4:e5:56:87:be:59:3f:eb:f4:59:82:4a:f1:68:bd:83:65:
         3f:91:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----