Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/418845dc-6c18-3e4d-be93-a1320f0719e8.roa
File:                     418845dc-6c18-3e4d-be93-a1320f0719e8.roa (raw, json)
Hash identifier:          KIrW6IgCyyalVNunwpZPb8QiCDtiZWH/mg5d6X6azzw=
Subject key identifier:   44:C2:A8:92:25:AC:C3:45:CE:82:3B:B2:8A:EC:C7:55:5C:6E:07:A1
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285844FC9DA39C2E928B109113A700
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/418845dc-6c18-3e4d-be93-a1320f0719e8.roa
Signing time:             Fri 23 Feb 2024 12:40:28 +0000
ROA not before:           Fri 23 Feb 2024 12:40:28 +0000
ROA not after:            Thu 23 May 2024 11:40:28 +0000
asID:                     14315
IP address blocks:        204.19.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:9d:a3:9c:2e:92:8b:10:91:13:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Feb 23 12:40:28 2024 GMT
            Not After : May 23 11:40:28 2024 GMT
        Subject: CN=fc9120ad-0584-496e-947b-8a735e013ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:18:7c:3b:69:7b:70:d9:ce:5a:b6:19:94:1a:
                    1e:9d:c0:06:1a:2b:20:f1:45:46:53:40:d1:c5:fd:
                    93:f4:2e:e8:b1:e9:f0:0a:9c:2d:d9:5e:2f:d6:3b:
                    69:6b:8b:c8:ce:dd:3b:ce:45:21:92:6e:1d:e5:26:
                    0c:2f:f2:3b:3d:ea:f6:36:85:f0:0b:1f:8e:5b:b3:
                    fb:cf:60:f9:9f:bf:8e:3f:c6:44:3c:66:a0:20:8b:
                    bb:ca:e4:1a:7f:c2:dd:66:17:ca:ef:0f:88:b3:b9:
                    84:d3:34:d1:47:97:0b:a3:c4:80:93:69:da:20:f6:
                    78:de:9e:22:5e:38:c5:ac:53:28:a8:ff:c0:16:cd:
                    57:b5:45:df:c1:95:1b:eb:e5:4e:15:b2:ab:95:ce:
                    3d:7b:53:3a:c0:ea:d3:e7:4b:07:95:47:06:5f:2b:
                    05:e9:be:d4:17:dd:40:9c:5d:3e:81:fb:5f:3a:21:
                    8d:2d:fd:b7:93:f9:13:d7:c4:09:5b:31:26:12:26:
                    74:66:25:ef:de:d1:6d:af:69:24:7e:a9:a2:72:b3:
                    79:74:41:40:fd:58:2e:f9:de:8e:33:bd:c1:cb:21:
                    a1:45:8b:c0:c9:81:a1:54:d4:a5:b5:e2:db:19:4c:
                    26:d6:d6:91:e3:7c:09:07:79:ef:5e:9e:69:dc:9b:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C2:A8:92:25:AC:C3:45:CE:82:3B:B2:8A:EC:C7:55:5C:6E:07:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/418845dc-6c18-3e4d-be93-a1320f0719e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d2:09:09:b3:97:4f:90:98:53:57:24:85:d8:43:80:07:29:
         be:06:ce:64:d9:bf:7d:de:c0:f6:56:ee:a9:89:43:fa:fc:95:
         79:17:11:8c:fd:16:6c:6c:f9:94:8d:74:34:11:dc:29:7c:39:
         a9:59:ae:15:35:94:07:b3:ab:15:97:9d:17:8b:91:ee:e6:9f:
         82:b0:e9:8c:0b:45:8b:aa:9b:95:33:79:35:a4:66:34:94:c6:
         54:04:5c:89:a1:c2:d9:63:ae:c6:a0:29:52:8f:88:81:90:36:
         7d:e6:e6:74:75:15:ce:84:ee:0c:69:ed:30:fc:9d:25:b6:a3:
         6b:9c:ae:f6:ed:ad:4c:e7:37:91:3a:b5:46:62:d2:08:74:c1:
         c9:d8:e8:f5:0c:32:f5:12:22:0a:1d:bd:74:55:3b:57:15:25:
         42:61:85:29:b6:7f:14:98:ee:1b:e1:46:79:1d:05:df:e6:9f:
         c5:2a:59:b4:82:bd:35:51:b6:91:8a:7e:d6:b2:89:31:27:40:
         f7:ab:8d:c5:ab:30:14:9c:b4:71:35:d7:91:1e:8a:1f:15:46:
         f1:ae:6e:f8:ce:f2:a0:b5:2f:6b:87:3d:b8:1b:5c:1d:b2:aa:
         74:e9:54:9e:79:ec:6f:76:0d:9a:03:21:59:75:21:89:a5:95:
         f2:a9:f1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----