Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc220260-cb71-308c-bef4-0a1b664d1a55.roa
File:                     fc220260-cb71-308c-bef4-0a1b664d1a55.roa (raw, json)
Hash identifier:          h/ILZHv/LHgHCrJ856RwgNM0HQCbFdHxhWX7j4ebup4=
Subject key identifier:   A7:15:9D:D3:E5:45:F5:75:87:86:B3:6A:C1:DB:48:84:37:23:8E:11
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285842E1B274C83D84168FFC6E1D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc220260-cb71-308c-bef4-0a1b664d1a55.roa
Signing time:             Mon 14 Aug 2023 11:41:42 +0000
ROA not before:           Mon 14 Aug 2023 11:41:42 +0000
ROA not after:            Sun 12 Nov 2023 12:41:42 +0000
asID:                     834
IP address blocks:        192.177.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e1:b2:74:c8:3d:84:16:8f:fc:6e:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 14 11:41:42 2023 GMT
            Not After : Nov 12 12:41:42 2023 GMT
        Subject: CN=ab2dc431-e493-4abf-ae1a-5a9bf126c0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:94:61:df:22:37:c8:3d:ae:ee:16:c0:cd:
                    9f:a0:a6:52:f1:6a:ce:56:23:cb:b0:73:3c:b0:2b:
                    39:bb:95:df:a0:99:a8:64:0f:ef:47:fb:cb:3f:29:
                    38:4c:de:db:f2:ff:33:14:d1:fc:eb:ea:9f:e3:49:
                    77:42:26:cb:70:35:1e:0c:fc:a2:1d:a4:0b:b6:91:
                    d5:ec:89:4f:89:f1:09:55:bd:3a:01:9d:e8:06:ff:
                    6f:8b:bd:90:8f:71:5f:7f:c6:8c:be:57:cb:ee:f2:
                    c4:d4:6c:0b:16:79:4f:de:48:da:5e:cd:cd:34:12:
                    8d:e5:d9:6d:d8:5a:4b:87:ab:bd:6c:c1:29:53:86:
                    2b:eb:1a:c6:91:b2:14:52:6c:32:a4:41:86:b5:96:
                    a0:30:81:b7:6f:a6:25:39:79:d8:a1:9a:c7:32:a7:
                    04:56:95:de:ab:df:4a:e2:a1:77:a0:72:fd:20:70:
                    5d:4c:8a:d1:28:3a:3d:9d:f5:4c:65:60:08:a0:67:
                    22:1c:02:ac:6f:3d:84:2c:3f:02:a9:fd:f1:a0:26:
                    41:6a:30:7e:5e:2d:22:14:c2:d3:9a:b4:e7:f2:69:
                    cc:02:59:51:fe:d7:86:4b:28:f9:fa:4b:d5:ac:09:
                    de:b5:cc:0c:f3:89:42:b5:67:95:48:e5:a8:50:77:
                    a4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:15:9D:D3:E5:45:F5:75:87:86:B3:6A:C1:DB:48:84:37:23:8E:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc220260-cb71-308c-bef4-0a1b664d1a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:30:9e:71:02:c1:8f:36:04:e7:d0:06:10:19:b2:23:b4:27:
         d8:1d:05:37:40:09:e6:a0:71:a2:ea:77:fa:2c:f4:95:e7:86:
         7b:8e:56:71:49:52:2c:55:ed:81:95:25:98:96:b5:09:4b:b3:
         29:2a:37:57:44:b2:46:ca:6f:87:b1:8b:32:98:10:ce:48:96:
         b5:d7:f0:ab:9b:2b:c8:ee:ad:f0:60:ae:e5:35:7f:1d:83:79:
         aa:d8:f0:33:ef:1a:54:eb:b4:51:bd:9d:97:d9:f6:5d:58:07:
         1d:a0:b8:14:9d:49:38:b2:c8:81:83:f3:b5:41:52:0c:00:da:
         4d:ea:ae:1b:3e:30:72:e0:10:f2:d8:ac:0b:59:aa:08:ba:4c:
         c8:7c:51:25:39:6a:1a:0a:e7:b0:d0:53:2e:a7:3d:c3:9e:ab:
         ec:3c:33:c5:c1:53:09:b7:b9:5c:89:4c:74:2f:1f:3a:ce:f4:
         00:fd:8d:9c:52:d0:be:60:88:5e:d1:e1:bf:7f:c3:ef:a7:ed:
         6a:45:00:92:09:18:a2:a8:07:8f:aa:c9:f9:65:7c:5e:b6:6b:
         6a:2f:b8:23:dd:dd:da:eb:37:34:94:ac:82:47:34:96:8c:9c:
         47:71:8f:d8:d0:52:a9:92:2f:5e:2d:c5:20:34:3a:33:91:40:
         39:d7:25:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----