Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/5ccb5a6c-3fe1-35f6-a08f-448b8b178e57.roa
File:                     5ccb5a6c-3fe1-35f6-a08f-448b8b178e57.roa (raw, json)
Hash identifier:          hhmy8rxSPmBaa8kQ6G433G5n4VpNq5yRSS2RgfcaoTM=
Subject key identifier:   BB:12:D8:C6:3A:A1:69:90:59:1A:F8:A7:FE:32:16:8C:43:BE:3A:9E
Certificate issuer:       /CN=36c39fb8-4da4-452b-a86f-8d28342d9446
Certificate serial:       010D0C9F43285841E4476A18A9C19FA2FB7D1F80
Authority key identifier: 7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/5ccb5a6c-3fe1-35f6-a08f-448b8b178e57.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Fri 11 Aug 2023 16:34:05 +0000
asID:                     396045
IP address blocks:        142.202.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:6a:18:a9:c1:9f:a2:fb:7d:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c39fb8-4da4-452b-a86f-8d28342d9446
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 11 16:34:05 2023 GMT
        Subject: CN=75437b47-b021-4192-8106-dbbe4452ce77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:3d:b8:42:23:33:40:b9:8a:b0:ac:37:d2:
                    02:c4:ad:f4:6f:b1:1c:44:3d:be:50:5f:7b:d2:08:
                    9b:74:1c:42:8f:05:33:b9:68:92:a8:4b:d6:6a:a8:
                    f6:74:bb:c5:f8:c9:4a:7a:d7:49:0c:27:74:cc:26:
                    97:6f:15:a6:89:0e:48:e1:f8:4a:49:ac:16:f6:ac:
                    e2:c5:b6:dc:19:e9:8c:b3:9d:89:04:1a:7e:68:9d:
                    53:fb:67:3d:2f:99:d5:b8:fc:5f:11:c5:f9:57:60:
                    de:92:37:bd:d8:4d:c1:36:0e:14:61:cc:d0:13:9c:
                    99:5b:19:bd:ba:c2:3d:40:ae:af:f3:90:8f:07:50:
                    c7:bc:2a:00:7b:70:57:81:35:f2:e7:61:55:87:fd:
                    78:39:1f:4c:06:f2:3e:38:0f:38:db:4a:85:3e:f6:
                    6c:4a:77:7b:8e:97:5a:ec:56:37:41:25:cc:20:14:
                    24:fe:45:f0:b0:3b:49:ba:fd:f4:37:53:e7:08:0c:
                    f6:3c:c6:1c:f1:d3:0f:16:e5:c0:24:0a:95:e8:03:
                    85:a4:f6:27:2b:c0:dd:f6:d8:0c:c4:2f:67:bf:83:
                    6a:26:99:9a:f3:d2:35:12:b5:d0:e8:14:17:bb:0a:
                    12:03:65:b8:67:55:e8:35:70:3c:a6:49:be:21:b3:
                    74:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:12:D8:C6:3A:A1:69:90:59:1A:F8:A7:FE:32:16:8C:43:BE:3A:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/5ccb5a6c-3fe1-35f6-a08f-448b8b178e57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl

            X509v3 Authority Key Identifier:
                keyid:7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:16:4a:cc:71:dc:4f:3e:c8:ed:6b:61:d0:47:70:4e:40:5a:
         2f:84:18:e8:73:c8:bd:73:35:d9:15:c7:10:04:2b:b3:ab:5e:
         4d:8c:95:94:f3:17:d4:79:fb:2e:73:e8:44:ac:c0:19:0a:92:
         dc:e5:05:7c:ee:53:84:6b:00:95:2f:52:c0:49:d5:52:51:30:
         50:9c:c4:86:ee:20:ea:da:65:b3:15:81:6e:ef:19:3c:9a:51:
         f4:5d:0c:5f:b5:50:cc:f5:69:e8:b1:1c:6d:26:fb:70:dc:43:
         22:e8:5b:e6:06:f1:21:6c:9d:24:96:6f:b9:03:c8:58:83:93:
         3c:b8:09:15:b1:23:c2:2e:31:bf:e8:b1:33:72:c4:6b:27:1d:
         04:ea:1d:b1:c0:01:50:fb:59:d8:d7:da:3a:e7:c1:65:a5:71:
         a7:43:1a:11:18:11:ef:c7:ac:60:3b:ef:6a:85:0d:22:e5:9a:
         af:7f:4d:28:b6:4a:ec:cb:04:9d:28:6e:3b:3c:3e:c6:3d:e6:
         68:aa:3b:e5:3d:2b:71:1f:fd:47:08:4c:ef:39:0e:06:c1:c8:
         11:42:83:75:26:7b:60:f5:ad:10:79:ba:39:c1:a7:b6:88:cd:
         90:89:23:e4:a7:a9:30:a4:85:50:62:fa:19:0e:1f:cb:32:64:
         06:ed:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----