Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a9027c08-8e08-389a-b16d-d470c4815927.roa
File:                     a9027c08-8e08-389a-b16d-d470c4815927.roa (raw, json)
Hash identifier:          rez9iKyZVeb6IAwoDmV23e9ERMc//Ovw3D22kvz/024=
Subject key identifier:   79:41:64:F4:EB:A3:B8:77:BF:88:E1:F1:C6:C6:F9:C9:66:A5:38:30
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F432858423DE2C513A9A67D08BE307ED0
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a9027c08-8e08-389a-b16d-d470c4815927.roa
Signing time:             Fri 16 Jun 2023 19:26:29 +0000
ROA not before:           Fri 16 Jun 2023 19:26:29 +0000
ROA not after:            Thu 14 Sep 2023 19:26:29 +0000
asID:                     834
IP address blocks:        172.96.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:3d:e2:c5:13:a9:a6:7d:08:be:30:7e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Jun 16 19:26:29 2023 GMT
            Not After : Sep 14 19:26:29 2023 GMT
        Subject: CN=9d68b2bc-01b4-4c24-bc02-2c17837fe90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:46:95:2f:5f:e2:34:85:24:3e:47:83:b1:14:
                    5c:ce:1b:79:c5:4c:10:ee:95:06:d7:8d:83:2f:fa:
                    85:2f:9f:46:43:1e:c8:aa:53:ca:8d:16:a7:00:c3:
                    2b:23:25:ae:a6:6b:5a:fe:40:b7:8d:0e:31:02:e7:
                    42:f1:fa:b3:7d:d2:5f:a4:fa:99:70:54:6a:40:e9:
                    f4:0d:68:57:87:95:86:7b:84:4a:8e:66:48:f5:a8:
                    7f:70:2d:6a:34:17:5c:b7:62:de:82:34:4d:4d:5d:
                    93:c1:16:5c:53:bd:84:f7:87:43:09:cf:b9:2d:ec:
                    b5:14:40:8d:d8:85:c1:8b:93:53:d9:2c:c0:3c:35:
                    69:ba:f7:7d:11:53:84:71:e5:31:50:ce:ee:c6:9c:
                    d8:9f:05:9d:8d:aa:9a:25:5a:19:11:a4:15:a5:d0:
                    5c:4c:0d:5a:26:51:ec:d6:50:8a:68:74:6c:3e:ea:
                    d1:66:4b:b1:c8:35:5c:e8:92:2c:3e:cc:a9:72:0d:
                    6e:49:af:79:81:29:5f:54:d9:15:33:1a:a8:5a:71:
                    cd:ab:5d:a1:7a:0d:91:fb:eb:50:f7:43:33:a2:76:
                    24:46:e9:10:f8:cb:2d:9b:c2:92:d7:31:a3:0c:10:
                    e0:de:bc:85:00:96:6e:48:cd:0d:ed:e1:da:ac:73:
                    8a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:41:64:F4:EB:A3:B8:77:BF:88:E1:F1:C6:C6:F9:C9:66:A5:38:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/a9027c08-8e08-389a-b16d-d470c4815927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ee:93:f4:8a:bb:31:fd:d8:30:34:94:ea:43:b7:91:24:fe:
         d8:c4:6e:c3:29:8e:fa:eb:02:54:5f:bd:06:b8:06:5e:ca:fc:
         0f:b8:42:e8:af:2c:a5:a6:36:c7:5b:69:dc:31:e0:a7:43:90:
         db:fe:2f:8e:c9:5b:73:7f:f7:a0:a3:e2:e3:fe:77:f9:fc:72:
         55:02:a5:13:d6:23:c0:8e:39:40:bd:ef:23:5a:60:78:96:4b:
         89:4a:d3:96:0b:9a:ea:a6:f5:51:c2:9c:d0:b6:d3:1a:be:6e:
         f9:19:78:5e:43:c7:57:e9:42:c8:a7:9e:80:13:a7:fc:06:cf:
         ff:06:3f:a7:e9:30:01:14:fa:24:6b:15:19:f0:fc:37:f6:2c:
         47:c7:99:4d:01:d5:71:05:14:bc:db:f2:39:e8:ad:b0:e6:47:
         a4:c1:23:f0:1c:47:4c:f3:95:51:a6:c6:aa:a6:1c:52:e2:8b:
         56:38:35:24:25:b7:de:aa:fc:63:48:cf:b4:5e:48:e8:ce:4a:
         78:46:7e:bf:c7:75:58:b6:3e:bc:f7:dd:b1:ce:03:ca:b4:b2:
         f8:1c:7f:e5:32:cd:02:b4:8a:94:1c:19:5d:9a:da:8b:48:83:
         f3:5a:3e:db:da:6b:c0:15:1f:89:e9:1d:43:77:90:99:b1:e3:
         fb:ad:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----