Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/1d0f31df-0033-326e-b8cd-a2bdc9e09491.roa
File:                     1d0f31df-0033-326e-b8cd-a2bdc9e09491.roa (raw, json)
Hash identifier:          lPL0NzBBKP9SAQzEWao+0KmNZvwwhJ0Z3BycNtmrGrI=
Subject key identifier:   87:AA:A0:9F:90:85:99:FA:B7:DE:B9:9F:64:CD:70:7D:CB:74:C6:11
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F43285841E44736136508859C7DBBC100
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/1d0f31df-0033-326e-b8cd-a2bdc9e09491.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Thu 10 Aug 2023 00:49:44 +0000
asID:                     33392
IP address blocks:        74.116.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:36:13:65:08:85:9c:7d:bb:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug 10 00:49:44 2023 GMT
        Subject: CN=d4183d15-ca42-41e2-b6f9-ac536902079b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:14:cc:33:f4:8e:93:c4:69:f9:32:30:06:41:
                    f7:18:4d:a2:0c:d5:36:94:9e:63:ef:af:e8:1e:7e:
                    54:6c:dd:1e:cc:dd:60:68:9d:d6:2d:42:f3:71:fa:
                    56:6e:7c:4b:bc:94:bf:38:db:47:cf:8d:f3:35:ce:
                    f1:4e:46:77:91:0c:6b:cc:b1:60:b8:05:ed:c2:69:
                    c1:bb:ac:9e:4c:9c:ab:ec:cb:a6:ed:c6:ae:2d:d3:
                    d0:6d:40:53:eb:50:fe:4a:7f:07:3f:cb:06:27:82:
                    9a:9e:a3:50:dd:77:e2:aa:5a:d6:05:09:75:ad:82:
                    17:d9:49:d2:12:8f:8c:04:ad:4a:65:e4:e8:74:6b:
                    9b:8e:f6:f4:a4:90:41:44:9e:11:c6:95:50:63:98:
                    72:48:a6:d4:6d:93:2f:ed:e6:bd:c7:07:6c:b1:c7:
                    a8:4a:b1:67:8f:b3:61:d4:64:b4:62:c2:c1:c5:99:
                    98:e5:0c:fa:ee:7f:50:14:67:c2:f2:3d:9d:68:6d:
                    0a:04:b5:cb:da:e5:90:3d:74:45:88:2c:79:b7:83:
                    f4:0a:00:28:be:e0:9a:78:29:59:c6:c1:22:86:3e:
                    93:c1:5c:a4:45:3f:1d:59:87:b0:03:5e:1e:83:12:
                    1d:f6:72:bd:a0:94:0a:34:de:60:a5:1c:54:61:07:
                    b2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AA:A0:9F:90:85:99:FA:B7:DE:B9:9F:64:CD:70:7D:CB:74:C6:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/1d0f31df-0033-326e-b8cd-a2bdc9e09491.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:33:e1:cc:fd:b2:70:d4:b0:e8:67:92:74:59:5a:4f:18:c9:
         3b:73:ec:cc:e7:8e:f3:2c:64:e9:4c:da:07:a5:de:df:c5:65:
         dc:77:1c:c0:e1:dc:42:ce:dc:e9:d7:1f:db:c5:00:65:75:fe:
         3c:f9:d3:2a:b2:a3:24:0a:4b:f3:0e:67:33:b6:e9:40:af:c8:
         19:ba:19:40:75:42:fb:f3:bf:a8:9f:86:08:1e:27:3e:0a:2a:
         cd:b5:3e:cf:21:1d:59:ca:13:33:2e:69:e0:66:67:9f:1a:a8:
         7c:19:69:38:b1:66:ee:db:11:34:80:4f:6a:64:1f:58:b9:8c:
         6f:ae:02:43:31:ef:65:fe:d4:9a:22:79:9a:23:4a:07:99:28:
         61:45:58:4d:15:92:ad:77:be:4c:a6:07:81:e9:2c:dd:6f:b2:
         ac:70:d1:a9:ae:8d:18:e3:e2:de:e1:8e:a8:ad:bc:a5:5e:ab:
         91:02:27:87:76:0e:76:37:f4:de:26:0e:51:c6:69:a8:11:84:
         e9:92:93:d2:0f:ea:cd:f4:ec:0c:5c:c3:61:2e:1c:12:16:88:
         7f:00:92:34:17:1c:b0:52:e0:54:82:98:f5:0f:3f:5f:43:14:
         a8:89:63:92:59:ca:9d:29:4c:c3:eb:61:1e:b0:3f:5a:ec:d7:
         a5:88:1c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----