Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/b867ddde-fad2-3a1a-ac7a-cbe206e59c83.roa
File:                     b867ddde-fad2-3a1a-ac7a-cbe206e59c83.roa (raw, json)
Hash identifier:          MTjfJ+q+ToVj/2Savl6WV4dEaM4bWoo4zgIzyuyLUfQ=
Subject key identifier:   D4:21:25:D7:70:77:00:4C:C3:BC:3D:8F:DB:2D:A2:FD:9D:8E:64:94
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285842AFD6A68E6A66E04B888BC500
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/b867ddde-fad2-3a1a-ac7a-cbe206e59c83.roa
Signing time:             Thu 27 Jul 2023 15:04:13 +0000
ROA not before:           Thu 27 Jul 2023 15:04:13 +0000
ROA not after:            Wed 25 Oct 2023 15:04:13 +0000
asID:                     139482
IP address blocks:        173.249.164.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:af:d6:a6:8e:6a:66:e0:4b:88:8b:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Jul 27 15:04:13 2023 GMT
            Not After : Oct 25 15:04:13 2023 GMT
        Subject: CN=5d8413d3-47e5-4f4f-a24d-44a37024c76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:32:ed:bd:6d:1d:ab:69:c7:b4:24:18:f8:
                    b8:c1:4e:4f:5c:76:a0:41:f5:df:32:a0:49:4e:81:
                    a0:3b:6f:12:d9:af:f4:a1:09:9e:68:4b:4e:8b:5c:
                    f0:ee:38:27:a5:13:eb:9d:bd:6b:eb:77:03:75:fc:
                    89:a3:36:94:ef:d2:3f:17:d8:3d:47:db:4c:09:67:
                    f5:94:77:f5:39:44:5a:a3:82:bc:1f:ff:ea:3a:bc:
                    fa:4a:44:6f:b0:11:e2:2d:14:9b:bb:97:14:31:38:
                    10:17:42:85:2b:a7:19:3c:22:8b:05:70:4a:30:90:
                    1b:b5:37:0d:e6:50:13:a8:ed:69:42:30:41:3f:9d:
                    01:c1:06:05:2f:2f:7e:93:5c:f2:82:46:2f:11:0c:
                    e2:e0:a7:7c:19:40:f0:0d:21:fb:59:9d:89:23:c2:
                    9b:aa:b1:16:89:04:e3:e1:ff:28:36:2e:a6:cb:16:
                    8a:06:0c:ed:ed:91:a9:d7:b0:53:21:23:d0:bd:81:
                    08:51:ae:40:39:4c:01:36:8e:15:14:80:21:66:1c:
                    17:a7:fe:79:2e:f4:56:83:fb:31:16:32:e9:a3:97:
                    94:fb:bd:bc:79:a9:ee:6e:e3:52:ea:6c:5f:36:57:
                    7e:c7:e7:d6:0c:b5:28:c5:b5:08:e5:78:db:e4:2d:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:21:25:D7:70:77:00:4C:C3:BC:3D:8F:DB:2D:A2:FD:9D:8E:64:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/b867ddde-fad2-3a1a-ac7a-cbe206e59c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:6b:51:31:16:ba:41:ce:c8:3e:b7:ae:0e:bd:20:70:2d:
         e7:0b:fc:dc:db:55:c7:54:f0:c3:c0:fd:9b:c3:09:ae:13:f4:
         23:29:77:b8:3b:a5:26:c3:d6:25:1a:18:0e:dc:f0:c1:66:a5:
         07:e6:ab:67:fa:6e:25:ad:b1:cf:8e:cb:0d:c8:0d:c0:68:14:
         d1:08:73:33:75:6d:a6:d7:a9:01:06:1a:8d:4b:98:d0:04:f5:
         54:b3:bb:59:7d:7b:70:f7:45:bd:fe:ab:c1:f7:9d:56:fe:9f:
         b4:b0:1c:12:73:86:6d:25:be:9a:a6:07:95:10:5b:24:4c:35:
         4e:13:10:be:01:15:4e:92:75:e7:9d:67:2a:ce:e4:0e:3b:3d:
         ca:b3:70:2f:8b:e4:a8:6c:96:08:33:3a:c8:fa:8d:21:7e:16:
         dc:e7:86:ca:f6:38:d7:1c:e4:2e:56:da:55:65:31:79:f4:75:
         26:63:b2:92:89:49:0f:f4:12:34:30:40:b5:62:7d:51:ed:09:
         17:2d:41:9d:f4:83:59:e7:5e:bd:6d:d1:ce:dc:b7:0f:b3:15:
         86:76:0e:29:dd:a5:d4:98:fc:ed:7c:d2:72:4c:63:34:62:68:
         d6:1b:a9:a0:27:71:ef:31:a2:8e:26:c7:c8:10:b2:56:c1:3d:
         e4:7e:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----