Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85f93189-a373-3124-849e-81d339db8067.roa
File:                     85f93189-a373-3124-849e-81d339db8067.roa (raw, json)
Hash identifier:          GeT52GyOHW2uz6GxoJgRBSHk8U5L2e2ETiWoQtrGhUE=
Subject key identifier:   8A:EE:25:4E:5B:5A:A7:45:3C:C9:A1:33:17:A0:34:C5:68:14:19:2A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285842A02217940496392C9120C200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85f93189-a373-3124-849e-81d339db8067.roa
Signing time:             Sat 22 Jul 2023 00:03:17 +0000
ROA not before:           Sat 22 Jul 2023 00:03:17 +0000
ROA not after:            Fri 20 Oct 2023 00:03:17 +0000
asID:                     834
IP address blocks:        23.230.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a0:22:17:94:04:96:39:2c:91:20:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 22 00:03:17 2023 GMT
            Not After : Oct 20 00:03:17 2023 GMT
        Subject: CN=b1dc1add-ea57-48c6-958e-61278c55b84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:39:67:d8:7c:41:ab:2d:74:a9:7a:95:50:8f:
                    c5:80:16:a8:0a:a6:9d:b0:85:b9:1a:6e:8a:22:a9:
                    9b:ff:1e:5e:ea:13:a2:51:f3:36:f2:d6:f1:ef:1d:
                    b2:57:0f:a4:e1:74:fd:de:27:ab:7b:41:92:10:3f:
                    b5:d2:84:43:2a:1a:71:5e:d0:67:31:ac:8d:a3:a8:
                    89:64:14:42:76:9c:c2:42:0b:0e:2e:70:b9:f6:1a:
                    1b:e6:b0:f7:7c:7e:95:59:cc:1d:6e:30:f0:2c:20:
                    3d:14:92:cd:d0:14:eb:ff:97:86:b0:b6:20:af:11:
                    0d:b8:c5:08:9f:a8:f2:9c:99:16:83:8f:00:fe:3c:
                    1f:e5:08:0e:1e:b7:9b:8b:0a:40:8d:7a:f3:07:7d:
                    15:4e:b8:89:ef:02:eb:fd:d2:d9:3e:21:52:7e:32:
                    0b:8e:ab:5f:a3:45:ee:fd:a0:2b:83:fd:ae:ab:99:
                    6a:bb:8d:d2:2b:cb:b4:6f:7e:54:72:2c:e1:23:36:
                    85:ce:32:47:fa:f9:13:ae:e3:cb:7c:fa:b2:d8:71:
                    c5:68:8c:09:f8:b1:bb:f3:5b:56:ad:63:52:97:ef:
                    40:01:50:bb:78:40:27:5f:e2:a1:8f:92:cf:62:9d:
                    ec:8a:3f:8e:1b:24:58:01:ba:b3:6f:13:d6:70:9b:
                    18:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EE:25:4E:5B:5A:A7:45:3C:C9:A1:33:17:A0:34:C5:68:14:19:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/85f93189-a373-3124-849e-81d339db8067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:86:1d:82:f0:d4:d5:a9:c8:73:d7:ee:8c:50:f9:67:4c:7d:
         05:cb:63:90:fe:0e:9e:96:1f:ca:16:95:ef:3c:b1:ed:bc:b1:
         81:ea:10:c8:f9:9f:2c:a1:af:81:1b:3b:ae:c5:95:8e:df:b0:
         be:6d:06:38:03:c6:16:21:f8:8e:4c:63:69:a1:6e:06:bb:9a:
         51:84:9b:59:a7:05:be:50:45:0c:1c:62:9b:5b:3f:5f:75:c1:
         26:c4:83:88:a9:a2:52:06:00:89:e4:05:aa:2f:f6:32:1a:0b:
         9d:51:85:6c:7b:4b:61:44:a2:2d:f8:bf:d9:1f:95:67:a7:5c:
         ff:74:97:19:66:c1:e6:86:59:27:5d:0b:d4:ef:21:2c:d9:25:
         4b:ea:f9:9c:c5:b4:9d:7c:a8:7b:13:96:c1:cb:2b:b0:51:fb:
         ba:eb:e2:80:81:c5:7d:aa:52:4e:2f:bd:c0:22:b9:c8:df:ee:
         d3:ca:23:d8:7f:ea:e5:47:c4:4f:cf:f0:ac:70:72:b0:3d:27:
         e7:aa:5c:77:d3:ad:a9:17:33:8b:40:cf:07:6b:ae:70:27:44:
         8a:ad:d6:44:65:04:b7:61:3c:d1:f5:37:e5:a8:7c:4c:85:72:
         61:6d:be:53:f7:ec:57:02:d9:99:ca:42:9e:47:67:65:ad:3a:
         7b:3f:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----