Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd200d63-0e8b-3940-98e6-0ac676f22e90.roa
File:                     fd200d63-0e8b-3940-98e6-0ac676f22e90.roa (raw, json)
Hash identifier:          pnUXlay5qa7ps5zRwQVDbYzUxREy1WE+m7QuQ2pF8Go=
Subject key identifier:   9E:83:5F:CA:61:64:35:31:4F:E9:7A:33:76:D2:13:04:A8:37:68:F5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285843EA300F51A228F67D01C81551
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd200d63-0e8b-3940-98e6-0ac676f22e90.roa
Signing time:             Fri 17 Nov 2023 05:28:11 +0000
ROA not before:           Fri 17 Nov 2023 05:28:11 +0000
ROA not after:            Thu 15 Feb 2024 05:28:11 +0000
asID:                     64267
IP address blocks:        23.230.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ea:30:0f:51:a2:28:f6:7d:01:c8:15:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 17 05:28:11 2023 GMT
            Not After : Feb 15 05:28:11 2024 GMT
        Subject: CN=6fcb01ae-2875-4d4d-b28f-853f05b22b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:e3:01:95:7a:76:9e:7b:d5:c0:88:b2:17:
                    b8:42:a3:90:d5:73:39:52:63:a3:7b:e9:5f:a4:d2:
                    55:ca:19:0e:7b:2a:66:59:2b:a0:1e:87:3f:d8:69:
                    8a:54:65:37:58:c7:a3:5d:b1:77:35:9e:65:91:59:
                    cc:95:9d:a3:29:3b:9f:5a:8a:75:ab:98:79:5c:b1:
                    86:d5:05:1e:52:6f:8b:99:09:66:96:02:cf:65:5d:
                    d7:6c:c9:5b:ac:c2:1a:bc:ca:40:22:d7:e4:bb:82:
                    e1:24:93:f6:b6:51:6a:d8:e8:bc:92:29:cd:24:2c:
                    7d:f3:c2:ce:3d:47:95:77:c6:3f:98:80:cc:70:ea:
                    db:9a:8c:b1:e0:3d:33:f2:fb:af:66:30:60:7d:d5:
                    ee:81:f0:75:5c:10:8f:40:5e:1c:75:07:b1:0e:51:
                    84:4c:ed:42:b3:b0:89:d8:a5:e3:61:ae:3e:55:af:
                    96:9a:42:4d:1a:47:4f:4e:4a:1c:b1:86:41:62:cc:
                    67:84:cb:e6:fc:c7:53:f0:f6:a3:2e:d7:6b:5e:44:
                    80:3c:35:07:68:ee:1e:3b:29:33:44:e3:2f:40:55:
                    37:ed:af:f2:6a:65:91:31:85:cd:c9:0b:bd:92:80:
                    d2:3c:2b:dc:a7:22:16:e8:46:79:4b:fe:ef:2d:93:
                    25:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:83:5F:CA:61:64:35:31:4F:E9:7A:33:76:D2:13:04:A8:37:68:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fd200d63-0e8b-3940-98e6-0ac676f22e90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a8:fe:b9:20:b8:75:35:0e:36:26:72:21:74:a0:50:d9:59:
         06:02:36:8c:3a:f8:96:24:7b:ca:49:81:0e:98:fd:08:79:fb:
         a9:84:dd:74:bf:1b:53:5c:01:e1:a3:57:37:8a:77:bd:cc:66:
         bb:98:8e:c9:58:d0:d5:09:76:24:33:c4:a2:bc:e4:d1:30:12:
         a9:b6:0f:d8:f7:a2:fa:3d:35:2a:d7:f4:22:b1:b5:51:e9:9b:
         4e:70:15:33:45:84:94:5f:ba:f3:63:ed:8c:de:33:94:26:5b:
         f5:d9:10:c5:eb:43:a8:f1:60:11:24:f5:64:de:53:3e:0f:65:
         5e:d9:35:b8:42:2e:86:a5:7d:46:83:aa:f1:62:73:e8:f7:f3:
         9d:27:30:45:66:61:f9:ac:2b:32:a5:44:ec:53:20:73:83:62:
         ef:9e:6f:fe:d4:70:d0:c1:7e:e1:e7:ce:1b:6b:4c:0a:a5:ce:
         90:21:80:a1:99:df:80:25:d2:35:9d:24:6a:b7:91:bf:bc:1f:
         b1:91:5f:ba:66:5e:bb:86:0a:1a:5e:16:68:ec:1e:94:09:d5:
         ac:4f:58:3d:dc:c6:39:e0:5b:52:71:55:69:da:4c:cf:4a:39:
         01:7f:a6:06:68:6e:1e:a6:7a:36:dd:c9:f3:03:eb:21:14:df:
         56:b1:33:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----