Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/c4678282-cab1-38ed-b199-5f272b4a00f8.roa
File:                     c4678282-cab1-38ed-b199-5f272b4a00f8.roa (raw, json)
Hash identifier:          Hz3Goy0DN6lR4Y3W+ZUtjWsgYC0sZdEeiHj3+E3w+oY=
Subject key identifier:   5E:2E:7B:4C:13:14:95:75:7F:E0:6D:77:D1:79:7F:A1:01:F9:36:9F
Certificate issuer:       /CN=85f6c3f1-956c-47fe-badb-d8e0bd20e47d
Certificate serial:       010D0C9F43285842F9BBC059C4D1BC9E3F856880
Authority key identifier: EE:AA:F6:50:8E:81:06:BD:8F:F3:55:15:64:A8:FF:1C:78:9F:E7:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/c4678282-cab1-38ed-b199-5f272b4a00f8.roa
Signing time:             Wed 23 Aug 2023 02:19:50 +0000
ROA not before:           Wed 23 Aug 2023 02:19:50 +0000
ROA not after:            Tue 21 Nov 2023 03:19:50 +0000
asID:                     16509
IP address blocks:        162.246.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f9:bb:c0:59:c4:d1:bc:9e:3f:85:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f6c3f1-956c-47fe-badb-d8e0bd20e47d
        Validity
            Not Before: Aug 23 02:19:50 2023 GMT
            Not After : Nov 21 03:19:50 2023 GMT
        Subject: CN=0166e21e-b89b-4bf0-9e77-f3dcab710f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:57:b0:18:97:83:a7:10:d8:5b:ce:e3:ca:
                    f8:1e:73:63:ef:39:2c:7a:90:48:18:45:2c:51:3e:
                    bc:ee:7a:e6:e5:ae:db:b3:45:27:fd:e1:13:49:a1:
                    a0:e3:81:19:11:55:8a:fa:3b:b7:4f:0f:92:30:41:
                    09:3a:d0:a8:26:22:a5:6c:58:2a:e4:28:f8:61:a7:
                    1b:ec:b7:ca:c4:76:7b:62:66:8f:de:18:1a:7d:2f:
                    55:41:62:95:46:50:73:3e:ef:2b:9a:1e:8b:97:0c:
                    e5:a2:93:fe:eb:60:63:97:97:ba:9f:e8:91:9a:9e:
                    f3:83:8b:5d:b9:01:e0:55:5f:e4:24:22:e7:5b:9d:
                    7e:3b:a7:e5:d6:9c:29:bd:00:c4:46:f7:bc:cf:28:
                    7a:77:a2:d9:e6:43:7a:57:2e:2a:17:25:6f:9b:31:
                    6a:d7:ba:74:9b:89:43:35:d7:f6:50:4f:93:92:e5:
                    d2:45:28:94:c2:17:0a:a0:a3:ca:8b:0f:1c:3f:34:
                    30:3e:a2:48:67:d4:c4:fb:3d:72:9d:4a:78:33:54:
                    a0:fa:2d:37:74:11:a5:47:96:d1:29:ca:8c:df:20:
                    5b:ff:58:d8:88:a7:50:1a:d8:80:45:c5:90:5e:24:
                    12:c8:af:18:fa:87:6c:51:48:52:99:33:d6:73:61:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2E:7B:4C:13:14:95:75:7F:E0:6D:77:D1:79:7F:A1:01:F9:36:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/c4678282-cab1-38ed-b199-5f272b4a00f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:AA:F6:50:8E:81:06:BD:8F:F3:55:15:64:A8:FF:1C:78:9F:E7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c5:f8:3b:77:f7:30:1d:b1:98:32:68:19:a1:75:9b:07:9b:
         0d:4c:fe:94:77:83:c1:11:5a:0f:80:3a:88:70:88:93:36:5f:
         b6:10:f6:41:03:e1:45:e2:2e:4b:b5:fb:3a:27:e8:ab:81:96:
         57:b0:63:8f:35:e3:fc:02:18:27:34:fe:0c:ee:0b:28:1a:ce:
         d8:f1:4e:83:dd:7f:23:0e:b8:4a:b8:e0:2c:25:ea:1b:6b:d3:
         d2:f2:5b:f4:77:db:a4:5b:b4:96:96:e3:66:af:7d:a4:8f:2e:
         c0:5a:14:7b:3c:ac:68:8d:0d:25:ae:a7:72:ac:1c:ab:a2:67:
         c5:e1:c9:9f:8d:f3:52:de:60:a0:4a:23:b5:12:3a:fc:3a:1f:
         64:e1:69:3d:a4:6b:a3:81:da:69:92:2a:1f:da:4a:99:dd:65:
         34:ed:e8:7a:fd:a2:40:d6:df:00:7b:57:7b:e0:69:5b:07:a4:
         f7:43:6b:6b:33:4a:fe:4b:19:ab:2f:f7:e7:61:37:ab:07:1c:
         f2:56:07:db:f6:24:ad:f1:ca:d2:99:1c:9d:5e:8d:ea:b2:3b:
         ae:68:db:04:19:0d:77:93:97:40:da:e8:41:a7:e8:49:77:bb:
         5d:30:77:5a:61:f3:4d:10:8e:df:d9:be:ac:0b:22:e6:08:5f:
         6a:db:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----