Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e7f3f6ae-6e81-31ae-9b0d-7773a4eb343d.roa
File:                     e7f3f6ae-6e81-31ae-9b0d-7773a4eb343d.roa (raw, json)
Hash identifier:          FMOdxBRczPi1mnW/eODU9fhpl7oddA5gmoaJ5MVa4Ek=
Subject key identifier:   38:CC:80:61:B4:38:15:4E:D9:8D:72:8E:38:26:80:01:E6:28:6C:64
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285844DAB5C295B41FE6CA18DCE440
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e7f3f6ae-6e81-31ae-9b0d-7773a4eb343d.roa
Signing time:             Sun 11 Feb 2024 09:11:35 +0000
ROA not before:           Sun 11 Feb 2024 09:11:35 +0000
ROA not after:            Sat 11 May 2024 08:11:35 +0000
asID:                     397630
IP address blocks:        130.254.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:da:b5:c2:95:b4:1f:e6:ca:18:dc:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 11 09:11:35 2024 GMT
            Not After : May 11 08:11:35 2024 GMT
        Subject: CN=8cec8b8a-4f56-460a-acb5-c3b3db37ab01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0f:f0:b7:f5:fc:d0:2d:6e:85:3c:a2:ef:74:
                    21:f7:ba:7b:73:2e:f5:34:26:3e:e6:d3:20:bc:1b:
                    64:43:1c:58:95:ea:1e:21:59:e6:6c:90:7a:64:db:
                    0a:b1:83:79:41:bd:e2:35:d8:6c:94:2f:37:1c:eb:
                    ac:68:97:61:a2:13:32:09:9e:de:35:df:37:55:99:
                    0d:06:b9:ad:e4:2f:d3:58:7a:99:b4:c2:08:01:a9:
                    35:75:8a:61:7b:48:95:0f:23:d9:5b:26:23:83:dd:
                    05:d0:e7:b9:46:2e:53:17:39:be:af:f1:36:49:ec:
                    e6:a0:cf:88:30:b4:6f:2b:9e:c1:e0:e8:48:62:e2:
                    92:90:6b:0f:24:58:63:4e:7f:88:9e:62:6c:e1:7c:
                    f1:5a:2f:e1:c2:cd:a7:5c:03:c5:fd:9d:82:18:5d:
                    7d:d5:85:d7:80:fd:43:3a:82:50:e7:e6:11:84:0e:
                    47:ff:6f:97:6f:b0:46:56:df:a7:c0:c2:2e:41:08:
                    48:f0:ab:93:6d:03:46:af:86:c8:cc:20:21:dc:c1:
                    c8:b7:49:db:72:2d:e9:b7:d2:a2:27:5b:59:3a:be:
                    64:6b:3b:94:95:34:29:2d:2a:35:4b:ab:f9:16:05:
                    0b:4b:80:99:10:8c:f5:89:c5:66:e4:6c:af:d3:3c:
                    dc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CC:80:61:B4:38:15:4E:D9:8D:72:8E:38:26:80:01:E6:28:6C:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/e7f3f6ae-6e81-31ae-9b0d-7773a4eb343d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:41:f7:e5:ea:89:ec:93:c4:5a:c3:67:0a:fd:9e:8d:b5:e7:
         8f:82:3d:fa:f5:e0:9f:5b:63:23:74:60:33:2c:73:f0:45:d9:
         0b:b3:93:f3:db:4d:95:e4:ed:50:87:08:5e:01:4b:2f:3f:a6:
         26:2b:56:a6:29:87:ee:cd:51:94:23:3b:62:21:c9:61:1b:d0:
         5f:05:e6:59:84:e7:2b:a6:03:af:3f:ba:b8:22:08:13:3b:c3:
         46:6f:28:49:f3:e1:71:8e:dc:a4:b8:cc:66:81:18:16:cc:06:
         1e:69:8c:01:61:78:b5:9d:62:66:7f:bc:8a:72:df:0b:29:4c:
         db:42:b1:f5:c5:05:d0:fc:6e:9e:75:8b:24:08:ac:d1:e8:f0:
         c8:24:a8:01:85:fb:4c:a2:02:c4:6c:54:8f:3d:92:bf:84:c7:
         d3:4c:8f:b0:7f:d1:b2:46:4d:67:ce:a3:6a:48:8e:95:96:2d:
         45:6d:d4:85:2b:d2:a2:fb:7c:c9:80:73:ee:83:14:02:ef:e5:
         28:fc:d2:e1:7b:30:07:d6:df:ab:3e:b3:35:22:ef:e4:2b:6a:
         61:6a:5e:e0:15:93:6a:03:2d:3f:e5:ce:f3:7f:09:5b:b2:ec:
         d0:66:15:cc:50:d2:28:91:06:da:95:f2:4b:68:ab:83:b5:65:
         d9:b8:3e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----