Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3825d88b-1c4c-33e8-baa2-2e4a6784fd9e.roa
File:                     3825d88b-1c4c-33e8-baa2-2e4a6784fd9e.roa (raw, json)
Hash identifier:          tATRKUD1Abl3uFrqAqSW8OrslMxa3M24AZJvt2oQdy4=
Subject key identifier:   64:7C:1E:AE:E8:D4:7C:5C:08:46:F4:D6:33:42:DC:50:73:A9:87:1A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285842DAC8B8D39EE0BDC2D6B98200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3825d88b-1c4c-33e8-baa2-2e4a6784fd9e.roa
Signing time:             Sat 12 Aug 2023 00:15:55 +0000
ROA not before:           Sat 12 Aug 2023 00:15:55 +0000
ROA not after:            Fri 10 Nov 2023 01:15:55 +0000
asID:                     834
IP address blocks:        45.39.199.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:da:c8:b8:d3:9e:e0:bd:c2:d6:b9:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 12 00:15:55 2023 GMT
            Not After : Nov 10 01:15:55 2023 GMT
        Subject: CN=7454ebf6-e6c0-41f5-a080-44651f4ac923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d8:45:75:8c:18:83:fa:d8:a6:0e:f7:de:8c:
                    84:c3:31:ef:a9:cc:a8:76:7b:be:b2:10:da:45:15:
                    c0:7a:0d:bc:2b:55:e3:06:40:19:0c:aa:13:f7:ec:
                    39:ef:68:c9:ab:d5:06:fa:76:50:01:05:e8:45:e2:
                    1b:89:3a:7d:1a:61:68:7d:64:3c:05:7e:a0:74:16:
                    be:5e:b7:d4:2d:b0:30:22:79:13:e3:39:98:db:58:
                    1b:a5:7a:08:9b:22:41:74:e4:f1:a5:d2:59:77:3e:
                    e0:19:41:ca:1d:64:b4:29:59:a9:75:8e:bd:e4:f1:
                    39:9a:9c:be:5d:33:3e:9f:20:74:ed:4f:a3:11:f0:
                    8d:39:b7:c6:a2:e9:09:f5:cb:52:c8:5f:19:9f:88:
                    14:54:15:43:ea:2b:a8:d4:46:e5:f3:e9:fc:51:e9:
                    62:35:3f:a9:a1:ef:43:9c:98:f1:38:dd:88:f3:51:
                    be:2c:54:fe:44:c6:0f:97:70:b9:77:f1:6b:bb:11:
                    af:05:8c:0e:f8:b8:0c:e1:a8:b2:13:c9:ac:ad:32:
                    f3:49:e4:43:a6:86:30:92:e5:66:40:8c:3e:f9:81:
                    87:1b:13:58:ad:af:ea:77:8a:c1:25:89:95:a1:31:
                    62:4e:95:fe:dc:eb:4f:17:32:e7:0c:34:c9:b9:96:
                    41:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:1E:AE:E8:D4:7C:5C:08:46:F4:D6:33:42:DC:50:73:A9:87:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3825d88b-1c4c-33e8-baa2-2e4a6784fd9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.39.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:92:07:13:71:08:23:b1:0b:68:28:9f:fe:01:d2:bd:fb:68:
         a5:24:88:a4:d5:20:ab:cf:1b:fa:20:71:1e:76:92:f1:93:82:
         54:b6:68:34:ec:e9:4a:87:b5:c1:ff:4a:94:b8:87:9d:6c:19:
         52:36:30:6f:1d:03:32:54:2e:9e:50:8f:61:25:20:af:54:39:
         9c:a4:ee:ff:31:8a:05:de:91:45:9f:5e:c4:18:2f:fd:70:3e:
         c7:98:d9:a8:30:ee:27:d2:4c:11:a7:83:10:67:32:c5:16:50:
         f3:4b:69:0c:c9:e4:22:c1:81:f9:34:83:a3:b1:78:c0:d2:f8:
         03:27:44:b7:d2:8b:6f:ad:9c:1c:a7:97:5f:29:1c:14:25:dd:
         cd:cb:e5:a9:30:a5:b6:c0:37:c1:02:a8:c0:ec:22:40:76:a1:
         c8:9f:cc:bb:cc:86:af:64:51:d3:be:e6:1f:a1:4d:1b:d9:8b:
         31:b7:2e:13:a5:cd:57:d1:af:23:86:7a:f8:54:11:32:c7:92:
         64:81:21:83:57:8e:d8:8a:31:6a:a0:fc:f6:a5:82:1c:3b:80:
         f4:d9:1e:02:61:72:d5:18:17:a4:39:3a:55:39:e3:a3:96:ff:
         66:e5:98:e9:9c:1c:44:9b:d2:81:b7:41:6d:22:2e:58:be:de:
         b1:e9:a5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----