Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/635ada1c-ce2d-3b75-904c-cc04712f5eab.roa
File:                     635ada1c-ce2d-3b75-904c-cc04712f5eab.roa (raw, json)
Hash identifier:          89fcfnlat8732yF9pA+HCrRBgRiYFTGNT9ZMZtBpYLU=
Subject key identifier:   5B:98:31:76:A8:96:FA:A2:92:09:8F:4E:A4:C5:B2:BD:57:33:11:71
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285842E6098B82D2BEB89223AA2E80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/635ada1c-ce2d-3b75-904c-cc04712f5eab.roa
Signing time:             Wed 16 Aug 2023 01:00:22 +0000
ROA not before:           Wed 16 Aug 2023 01:00:22 +0000
ROA not after:            Tue 14 Nov 2023 02:00:22 +0000
asID:                     213035
IP address blocks:        107.182.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e6:09:8b:82:d2:be:b8:92:23:aa:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Aug 16 01:00:22 2023 GMT
            Not After : Nov 14 02:00:22 2023 GMT
        Subject: CN=675a7725-e335-4623-b482-edfbc48cee58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:6e:19:a2:df:42:70:48:dd:66:98:7e:a3:
                    ca:df:c7:22:9b:a8:2f:39:25:8d:a2:58:60:3d:2c:
                    17:d6:78:0a:43:75:9e:86:6c:10:bb:7c:ea:06:54:
                    c6:d3:95:3f:bc:1e:e7:c6:2a:2e:6c:99:d1:1f:c1:
                    c2:33:fc:0b:dd:38:70:12:61:64:19:8b:b8:b6:c5:
                    88:29:3b:21:76:fe:cf:ff:8e:48:5a:ca:4f:94:b7:
                    fe:16:1e:2d:54:6e:8c:b8:88:45:4a:06:03:b3:a2:
                    de:03:e3:04:55:70:3e:ec:87:87:ce:4e:fa:67:21:
                    87:40:4e:c8:7b:2b:fa:2c:28:cf:1b:71:2a:b7:94:
                    1a:65:58:48:0a:10:ee:33:3a:c9:7f:0d:d7:49:cb:
                    00:9f:7f:42:e3:5e:67:9a:b3:35:56:97:f2:33:4b:
                    ff:d0:fe:a1:46:5e:1b:55:0f:8e:c6:e3:e5:e9:7a:
                    12:75:c2:06:12:97:3f:0f:dc:7f:4c:3f:4f:1f:05:
                    ee:91:2c:ee:3a:3c:0a:14:8f:89:5d:dc:d9:3b:c6:
                    d0:3f:a9:b6:c8:f4:52:50:6e:3b:41:62:58:42:06:
                    a2:6e:3b:2b:36:2d:a1:e3:a3:c7:b3:12:66:16:34:
                    e5:fa:82:87:8e:f8:9b:2f:d6:d8:93:df:fc:95:38:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:98:31:76:A8:96:FA:A2:92:09:8F:4E:A4:C5:B2:BD:57:33:11:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/635ada1c-ce2d-3b75-904c-cc04712f5eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:45:8f:ea:61:11:94:30:19:de:6b:3b:99:fe:ad:c8:3c:
         86:b7:ba:0d:dc:f6:29:59:f0:05:de:c5:54:2f:2f:c2:98:d8:
         88:6f:17:87:ad:88:03:1f:10:4c:7c:d3:54:ac:d7:41:1e:ad:
         f9:e3:c2:e2:49:84:3a:a4:40:25:f2:b3:6d:4b:d7:cc:70:a0:
         e4:88:cb:64:ad:60:0d:2d:cf:fe:d8:15:30:03:c7:bb:57:95:
         73:6c:dd:46:c3:9a:0d:c2:e5:67:df:09:15:c3:01:44:05:aa:
         e6:7e:8f:44:57:9e:9f:d3:6d:ec:80:62:47:dc:08:e9:c7:9c:
         d6:dd:26:d7:08:a4:a6:51:1d:fd:d8:60:07:ae:85:e7:2e:3a:
         85:ef:a9:ce:62:3b:db:97:53:96:6e:6a:aa:00:20:5a:c4:6a:
         d5:c1:7e:0d:00:10:ad:3d:90:d1:69:96:b2:08:a8:0d:2f:34:
         f7:5a:2a:99:e7:55:5d:cb:b9:0b:9d:81:f7:cf:cc:65:52:64:
         9e:b7:06:ad:25:f0:91:cc:9e:d3:6f:03:e9:5d:d8:49:df:5e:
         c8:35:b4:27:bf:38:be:02:67:b8:6e:85:55:62:c6:40:a7:25:
         67:80:9d:80:e2:f4:1f:91:dd:9d:3e:33:7a:dc:6a:aa:7c:82:
         73:d7:64:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----