Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/cb623c36-1417-3e0d-b33b-7806a7dfbf8d.roa
File:                     cb623c36-1417-3e0d-b33b-7806a7dfbf8d.roa (raw, json)
Hash identifier:          4tLNi+8N4/FRYt6Sr5iREd2vDFMjEJze8qBAYDocPvI=
Subject key identifier:   0B:2D:6B:FD:06:8C:B2:34:48:02:3F:E6:AB:CE:3C:72:D3:B9:C1:E8
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F43285842E609917C1D375EFDFA92CA80
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/cb623c36-1417-3e0d-b33b-7806a7dfbf8d.roa
Signing time:             Wed 16 Aug 2023 01:00:22 +0000
ROA not before:           Wed 16 Aug 2023 01:00:22 +0000
ROA not after:            Tue 14 Nov 2023 02:00:22 +0000
asID:                     213035
IP address blocks:        107.182.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e6:09:91:7c:1d:37:5e:fd:fa:92:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Aug 16 01:00:22 2023 GMT
            Not After : Nov 14 02:00:22 2023 GMT
        Subject: CN=e572c53a-7701-4c89-bdcb-7eced4414bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:f9:46:e8:32:eb:d1:c9:3c:83:66:f0:fc:
                    4a:b0:82:a2:1d:19:e4:a9:92:60:1a:fd:98:03:7c:
                    63:ee:09:6f:f9:d5:d6:bd:2b:47:3e:b4:1f:e1:c3:
                    fb:bd:96:83:55:37:f5:cb:84:33:1f:dd:cb:e5:05:
                    db:22:12:23:6f:19:b4:d0:43:6b:61:eb:5c:85:03:
                    5d:94:7d:af:9b:83:cc:03:74:3e:37:f5:c6:89:e0:
                    7e:15:6a:79:e8:6a:b5:43:8a:ef:a7:61:4b:3c:83:
                    be:0b:25:48:f4:19:31:14:d4:1a:9c:e2:ba:80:7b:
                    7f:39:2e:96:09:5d:da:a3:39:f7:22:78:69:76:94:
                    9d:a8:e3:27:14:27:d3:75:54:7d:db:35:8c:36:5b:
                    5a:99:94:e0:d0:5f:0d:56:75:a3:1f:7c:81:5b:4b:
                    a9:62:d1:3c:15:2f:70:f0:41:1f:73:2e:ee:6c:77:
                    e5:6c:8b:f3:ef:ff:d0:2c:37:eb:d1:28:c2:30:b2:
                    90:57:08:f0:79:42:08:ce:ff:2a:13:1c:b8:01:d2:
                    24:e9:6d:0e:bd:11:7f:a9:62:15:a6:9c:a5:39:1f:
                    15:7d:d5:e5:bc:05:ed:34:93:18:12:40:ff:8f:dc:
                    5c:ab:00:dc:4b:21:ba:46:dd:0f:f5:70:8f:55:b9:
                    b2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2D:6B:FD:06:8C:B2:34:48:02:3F:E6:AB:CE:3C:72:D3:B9:C1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/cb623c36-1417-3e0d-b33b-7806a7dfbf8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:7b:64:4b:a9:05:14:c1:86:fe:9c:e2:69:89:8c:3d:49:21:
         fa:b2:c4:fe:7c:12:30:38:d6:eb:c3:d1:e0:e7:68:0e:fe:2c:
         10:d2:aa:b0:fb:f2:a2:aa:ae:3c:12:20:12:9e:c3:dc:44:3f:
         e7:cd:54:e5:37:3c:77:01:f6:f0:a9:40:18:3a:b0:ec:b2:c2:
         4b:7d:78:09:8b:f8:dc:c2:30:bc:ee:b7:a5:f8:94:bc:a8:f1:
         01:f5:ab:c4:58:ce:89:96:71:d6:fa:ae:ec:09:7b:3c:e3:3f:
         0f:c1:c9:64:7f:20:82:df:e5:53:aa:04:08:cb:dd:26:3b:a4:
         32:b4:07:68:7e:99:01:e9:3a:78:8a:41:c1:6f:2d:c3:e0:d2:
         34:21:bc:ea:b6:c2:7c:60:29:80:1f:df:a0:49:34:12:16:01:
         d6:5e:06:f6:dc:37:85:ef:21:84:5b:c6:ef:9b:12:bb:e4:91:
         0e:df:5f:9e:65:a1:86:6d:d6:10:b1:6f:27:cb:cc:68:b8:5d:
         67:e5:74:e2:c8:4a:30:49:6d:f7:cd:43:1b:fd:77:6a:2c:86:
         22:ce:e4:c5:fd:4e:d5:39:a0:a1:ec:2a:3d:9d:24:02:91:e1:
         2c:5c:07:51:c5:36:9d:ae:3b:90:1b:bc:27:0b:a9:f4:ed:f9:
         05:14:e2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----