Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/359d023e-a8dc-3be3-a2bc-8a9fb0d680b1.roa
File:                     359d023e-a8dc-3be3-a2bc-8a9fb0d680b1.roa (raw, json)
Hash identifier:          hsWq0NB3wBtq2F1OCkpIaK0wOliThs1rBAofCWKY4iw=
Subject key identifier:   4E:1F:C8:45:C3:81:A9:40:78:1A:47:75:A7:ED:CA:D3:93:45:C3:63
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845025AD67D45A824AE8B4930C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/359d023e-a8dc-3be3-a2bc-8a9fb0d680b1.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     64267
IP address blocks:        192.177.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:d6:7d:45:a8:24:ae:8b:49:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=e2067337-65de-4c8e-b83a-5d0ef6ee1bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1b:ff:51:61:a1:52:7d:89:8f:3b:11:a1:f0:
                    fe:35:eb:12:5d:a1:64:28:27:cf:44:6c:80:62:37:
                    9b:e2:d0:d0:8e:8c:de:48:c2:de:c8:dd:14:fb:33:
                    0a:9b:82:6a:17:19:cd:43:de:aa:0f:4a:54:9b:d2:
                    ae:1b:dc:b0:90:1f:8d:b0:8a:ac:1c:59:12:e1:b1:
                    24:f8:6a:9a:1d:c4:7f:fc:4a:6d:de:db:af:43:1a:
                    de:ca:11:22:57:22:96:7f:4b:97:52:00:72:1b:aa:
                    a3:54:67:0f:21:45:1f:16:0f:b9:16:c0:f0:b2:a4:
                    1a:3a:60:66:d0:6f:d4:c8:a7:4b:40:04:c5:c0:18:
                    8b:27:6c:7c:4f:91:e0:e7:2c:55:88:73:74:7e:e7:
                    3e:f4:ca:06:ac:44:8c:94:b1:a9:9a:a3:01:81:1a:
                    ca:c3:a9:ea:71:69:dc:03:32:fe:bd:1e:4c:ed:8a:
                    53:13:6f:53:b9:d3:42:12:a1:11:17:99:5a:81:e7:
                    b0:ca:5f:d7:4c:27:d0:50:93:16:b7:a2:58:3f:3d:
                    cf:07:2f:d3:b4:a0:d3:ba:53:a5:24:34:93:ae:70:
                    03:95:b6:70:dc:36:4e:24:8d:1a:8d:6f:8e:43:64:
                    03:7a:84:74:5f:8e:34:25:87:02:46:7c:0d:7f:e0:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1F:C8:45:C3:81:A9:40:78:1A:47:75:A7:ED:CA:D3:93:45:C3:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/359d023e-a8dc-3be3-a2bc-8a9fb0d680b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:99:64:68:59:74:c0:aa:4a:ab:0c:d2:18:dd:fb:a4:1c:c8:
         e5:f2:dc:14:fb:92:01:57:c1:bd:60:85:67:96:ab:e6:a3:1b:
         6f:25:e4:9e:60:66:ac:34:e8:2f:d7:f6:e5:2b:60:e4:57:e9:
         28:53:1f:b7:60:18:60:17:a7:7c:a0:03:55:c3:21:62:59:db:
         6b:b6:f5:9f:16:14:f8:68:75:46:f4:e6:7f:ce:d8:d9:35:8c:
         86:2f:92:f2:0b:20:08:6a:c3:88:b3:e0:87:51:b1:23:28:77:
         d5:63:37:0f:64:c4:90:3f:0e:21:ee:06:63:c5:e3:18:3f:0a:
         2a:72:0a:d2:90:06:20:41:2d:01:cc:aa:e5:45:64:56:42:ca:
         0b:e4:4a:77:15:60:0f:8a:6e:0c:31:ef:db:8d:90:fc:03:77:
         df:61:58:11:44:0b:0b:1c:19:f9:78:bd:1c:32:c7:1a:66:27:
         0c:04:8c:db:0b:79:7b:77:fd:18:fb:c1:6c:de:25:bd:98:5a:
         cf:f1:52:80:ab:f2:c6:42:dd:93:73:91:60:67:44:80:ad:68:
         50:1a:66:89:7c:5e:38:78:e2:3b:f7:5f:bf:f7:ec:32:74:d6:
         ea:7a:b3:d7:ea:d0:f2:90:fa:8b:8d:a9:b8:5f:85:47:e9:7c:
         ec:73:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----