Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c40793f2-d0b8-3561-856a-cdff4279e211.roa
File:                     c40793f2-d0b8-3561-856a-cdff4279e211.roa (raw, json)
Hash identifier:          VDAUF5FvGxY6Dou+XuWSSU6IfYO+XCvH3FNqPlvdAF4=
Subject key identifier:   A4:49:A5:B0:EE:78:55:14:F2:99:4D:BD:8C:2B:19:27:61:80:1E:E2
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F432858484EDACFFA1EA721104CE0E680
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c40793f2-d0b8-3561-856a-cdff4279e211.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     63264
IP address blocks:        199.101.198.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:cf:fa:1e:a7:21:10:4c:e0:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=bab0febc-b982-49de-b172-06f34faa21dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a2:f4:8f:60:dc:23:3c:87:23:38:ad:52:71:
                    6d:5d:c9:42:fc:4a:af:7c:8f:4c:89:4b:fe:11:e3:
                    cf:fe:38:0a:6c:60:65:bf:73:ab:52:62:19:cb:5e:
                    ee:49:4f:46:a0:74:c3:58:81:41:0f:77:e6:a3:39:
                    81:e8:99:81:4c:46:70:28:6e:1e:20:4a:53:50:e8:
                    0d:62:55:e1:4b:1d:50:b4:1a:ae:e8:aa:76:50:7c:
                    48:58:e5:68:de:a5:76:ad:e2:18:f0:a8:c0:a7:db:
                    1a:4d:c6:99:bf:94:9a:0f:eb:11:f2:86:53:10:ed:
                    a5:f5:b8:40:4b:50:d2:9b:1f:d2:e8:3b:15:c1:43:
                    6c:5d:9d:aa:4c:7f:5e:2e:24:b6:94:8d:aa:f3:5e:
                    ff:14:55:5a:bb:91:37:48:c0:9d:13:f0:a4:da:78:
                    02:c0:bb:fa:6e:f5:5f:94:f1:59:9f:6a:9c:f5:16:
                    5a:33:6d:e4:ba:e7:a6:69:71:41:5b:7b:6d:13:dd:
                    b7:38:67:a2:6e:1d:6e:f6:5a:c0:86:5f:7a:47:df:
                    a3:b9:c9:9b:70:e3:f1:40:32:d6:61:1e:eb:c1:d7:
                    c5:10:e0:0a:dd:e5:41:c0:48:ec:2c:65:27:14:69:
                    c0:cb:70:01:35:65:ba:ad:a3:d6:77:ab:d8:c8:92:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:49:A5:B0:EE:78:55:14:F2:99:4D:BD:8C:2B:19:27:61:80:1E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/c40793f2-d0b8-3561-856a-cdff4279e211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:37:79:0e:7e:48:cf:41:3d:1a:a3:9d:02:01:9b:3b:40:7f:
         bb:d3:60:61:97:f3:f9:6a:28:65:aa:42:13:d0:b2:92:87:36:
         9f:f1:49:06:72:af:51:6e:69:cc:2f:dd:95:b7:29:8d:9c:ae:
         b8:42:b6:9a:06:74:e7:7d:98:48:bc:5d:2c:58:bd:67:63:13:
         a0:6f:da:37:86:a8:78:35:43:c0:19:8e:ad:35:91:62:4d:73:
         f1:b5:73:a7:4e:38:e6:ba:0f:f9:8e:f0:59:29:d0:11:ee:32:
         43:32:5f:34:33:fd:fa:8d:cb:43:2c:db:a6:bc:31:01:69:bc:
         cd:ab:c5:ad:f1:d3:23:82:59:74:91:4e:92:3f:97:f1:91:e5:
         b0:f8:49:d7:82:f9:59:fd:ed:f7:ec:61:28:a5:fb:a5:72:d3:
         b7:e8:49:4e:a6:bd:4c:79:6b:49:09:75:5a:90:14:3e:3b:d2:
         a8:35:ec:29:a6:c0:3d:66:12:52:bf:99:4d:d1:e0:46:79:6b:
         b5:67:42:cd:d0:a8:00:12:fd:13:6d:20:99:7a:1f:8b:71:c8:
         5b:71:eb:0c:b9:0a:1a:df:64:7b:f6:c8:0d:9a:a0:9c:2b:53:
         2b:87:e7:82:df:c8:47:23:c8:00:d7:04:be:eb:36:9f:9e:52:
         30:bd:a6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----