Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b38ed257-081c-323f-a6b5-828d8047b498.roa
File:                     b38ed257-081c-323f-a6b5-828d8047b498.roa (raw, json)
Hash identifier:          FZ97EKHllLn+zwnL+wlEmaK8LRFY8af5VMmSlcrsRXc=
Subject key identifier:   91:9C:DF:1E:BF:B8:54:12:01:F0:7C:A4:D9:EC:88:17:ED:E0:E6:30
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584256DB1CB8CA0BE2C31B60C080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b38ed257-081c-323f-a6b5-828d8047b498.roa
Signing time:             Sun 25 Jun 2023 18:06:16 +0000
ROA not before:           Sun 25 Jun 2023 18:06:16 +0000
ROA not after:            Sat 23 Sep 2023 18:06:16 +0000
asID:                     400536
IP address blocks:        104.164.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:56:db:1c:b8:ca:0b:e2:c3:1b:60:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 25 18:06:16 2023 GMT
            Not After : Sep 23 18:06:16 2023 GMT
        Subject: CN=5800a80a-77b8-483a-8071-6d10ee6d27d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ff:9e:b5:42:9a:60:36:43:3e:f0:02:75:44:
                    59:42:50:91:f7:f6:5c:69:cf:ba:31:4c:f8:b3:e4:
                    97:8c:ab:e1:8a:21:fa:05:63:e7:46:ad:d0:b3:5a:
                    e0:ea:4b:b4:ad:17:0b:65:f0:bc:49:e3:ce:50:2d:
                    97:d8:a8:aa:8a:12:43:59:88:91:4e:81:f4:a5:a9:
                    d7:d9:0a:c4:32:9c:eb:c6:70:f9:be:cb:54:f1:1c:
                    dc:ce:78:4d:26:87:8c:33:0b:bc:14:b1:b1:0d:11:
                    a3:9a:87:22:c0:61:59:fd:ca:94:f6:1b:f9:c8:19:
                    22:2b:5f:e2:5f:c5:65:24:b7:70:c9:d6:c3:2d:c8:
                    20:ae:a9:d1:0b:d4:19:ac:98:ff:3c:ff:88:0e:b8:
                    75:7c:87:3f:40:b1:e3:9d:43:f4:46:dc:5a:f0:77:
                    21:1e:7a:6d:f6:5b:50:dc:27:01:e4:9d:fa:dd:be:
                    9b:b6:34:65:ab:5a:2a:fd:43:19:45:14:f6:9f:c3:
                    eb:51:36:46:42:6b:f0:0a:0f:5a:15:74:46:cb:fa:
                    0f:fb:fd:85:ce:30:88:3f:9e:96:1e:37:af:14:e9:
                    d8:3f:07:08:a0:ae:2a:58:9d:62:ac:cf:37:17:5e:
                    f4:95:44:d7:f3:fc:8d:aa:31:66:0c:97:32:42:c5:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9C:DF:1E:BF:B8:54:12:01:F0:7C:A4:D9:EC:88:17:ED:E0:E6:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b38ed257-081c-323f-a6b5-828d8047b498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:8a:96:7a:2f:bd:49:98:26:e2:65:9d:e3:d6:f7:7a:14:9f:
         fa:eb:1d:9c:c1:e8:e4:b3:6f:6e:6b:46:0e:c5:94:ef:e9:37:
         7f:7e:bc:a5:52:07:5a:72:2d:87:ba:26:1d:3f:f8:a9:49:2e:
         a7:eb:cf:56:43:75:c9:8b:1a:a1:7a:7e:b2:1a:19:3f:0f:9b:
         01:6e:a7:5f:60:fa:2b:fd:f4:ad:a5:d3:ff:5f:f4:19:cf:46:
         fa:21:d9:ed:5a:8a:2b:dd:32:11:50:68:0e:60:b0:a6:f4:04:
         96:0a:5c:04:11:3c:e1:e9:26:5b:d5:e9:06:88:f5:2b:2b:42:
         14:21:a2:0a:86:3f:44:0a:d6:11:76:4c:d2:bf:e8:88:d9:33:
         36:f8:db:52:41:f5:49:17:96:03:4b:87:a7:4b:a7:67:8c:a3:
         32:3c:ae:97:9e:80:bd:b0:9d:30:c4:54:39:29:cc:17:e3:50:
         63:61:80:a6:97:83:f2:60:cc:fc:c4:69:62:76:1e:dd:cf:23:
         fe:c7:52:b7:99:52:34:35:e0:f2:9e:b7:e0:db:53:ca:96:ab:
         82:09:b1:bf:cd:d9:42:51:33:08:9f:0f:04:b0:6a:c9:f5:e7:
         68:a8:6d:61:99:49:42:e8:39:4d:11:bc:72:d1:88:97:45:78:
         a3:a8:dd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----