Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b8d8be4c-98a1-33a1-9480-4d9f428641b8.roa
File:                     b8d8be4c-98a1-33a1-9480-4d9f428641b8.roa (raw, json)
Hash identifier:          FJP4yvoyOY0PORsaOU98DVPiIS+lKFFCt+yMz23DbPc=
Subject key identifier:   5E:1F:D4:38:0B:DC:BA:A0:5B:4B:81:7B:FA:F0:90:C2:2F:EA:9A:25
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285843A9E670E8E5A1E3C6F5488D80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b8d8be4c-98a1-33a1-9480-4d9f428641b8.roa
Signing time:             Wed 25 Oct 2023 04:48:07 +0000
ROA not before:           Wed 25 Oct 2023 04:48:07 +0000
ROA not after:            Tue 23 Jan 2024 05:48:07 +0000
asID:                     40676
IP address blocks:        208.67.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a9:e6:70:e8:e5:a1:e3:c6:f5:48:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Oct 25 04:48:07 2023 GMT
            Not After : Jan 23 05:48:07 2024 GMT
        Subject: CN=22d271bf-2ced-4016-bd9d-a84df58086df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a0:52:d7:a4:8a:46:50:7b:12:a7:43:94:ef:
                    96:a5:12:d7:ac:00:c2:48:d6:e9:63:56:b7:43:14:
                    e8:a5:b2:85:e7:cb:6a:3e:76:46:c9:dd:f9:e5:0e:
                    39:32:c2:ac:6b:9c:83:5c:49:4c:b0:20:4d:10:2e:
                    6b:76:86:0e:ee:e1:45:32:04:80:e5:b6:da:02:27:
                    91:98:bc:e4:51:5d:95:ea:f5:fa:29:57:62:7b:11:
                    41:36:bf:8b:90:1e:f7:90:ce:b9:80:1a:8c:98:10:
                    33:17:5a:28:cb:57:c8:c6:fe:fc:af:3c:7d:c5:76:
                    a2:f2:17:3a:b6:1e:39:c8:da:36:b3:81:4b:6b:d4:
                    7b:e4:e9:05:7e:1d:70:10:51:17:31:f1:4a:b4:01:
                    ab:f0:6a:4e:77:d5:f2:2e:d4:e5:08:92:b4:0c:5d:
                    a2:41:09:78:a3:ed:41:8b:95:d0:d2:88:90:3e:63:
                    21:03:f4:3a:de:c4:08:c9:48:3a:aa:56:f3:8f:ba:
                    c0:bb:53:d1:7b:65:59:81:c2:aa:7b:6e:30:34:63:
                    6d:6f:49:e2:3c:fc:99:49:38:22:ec:da:39:bc:cd:
                    18:da:c4:79:94:9d:03:09:2e:f4:2d:3c:96:f7:89:
                    e0:0d:ff:d9:c7:c3:af:02:28:c5:f8:c3:18:b7:cf:
                    ce:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1F:D4:38:0B:DC:BA:A0:5B:4B:81:7B:FA:F0:90:C2:2F:EA:9A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/b8d8be4c-98a1-33a1-9480-4d9f428641b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ba:2d:84:5c:67:92:48:9b:c2:56:27:f6:90:09:6b:be:7d:
         35:42:fa:ce:89:af:a5:ba:dd:a3:fd:ed:a7:b7:41:7e:66:d4:
         28:37:63:44:89:66:5e:b2:b6:14:c1:4a:11:72:b7:46:98:0a:
         a3:d9:24:42:95:fd:41:82:ce:6e:c1:81:6d:39:3b:5d:38:b7:
         3f:f0:0b:c3:cd:b6:df:39:4d:f1:b8:b6:31:42:b4:9a:6e:f7:
         10:cb:11:32:5e:9b:b2:1f:a7:94:49:58:56:0b:a1:0a:14:28:
         b1:e2:dc:79:7d:df:2f:0c:9a:5f:7f:2a:ac:58:40:26:38:3f:
         b4:d0:8e:55:54:14:a6:20:7e:32:e3:02:cb:9a:99:26:b1:31:
         fa:78:13:b3:e8:e9:0f:c5:4f:33:49:05:73:41:b7:9f:f6:78:
         15:fd:9c:42:ce:09:9b:1c:54:6c:91:e7:af:3d:1f:4b:02:04:
         61:67:80:01:1b:10:cd:c7:bc:78:07:5e:5b:26:ed:a6:89:74:
         c1:01:b4:21:bb:13:a6:26:05:9b:3b:bd:5c:e6:a7:3d:e0:69:
         d2:c0:4f:c7:02:03:8c:ee:33:d1:bf:a8:a5:cf:9e:c4:95:0b:
         8f:a1:76:07:86:e5:32:f2:ae:3b:2c:93:4e:98:4b:b7:3d:83:
         fe:86:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----