Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/673bf855-0c8b-3988-941b-f9da6a44eae0.roa
File:                     673bf855-0c8b-3988-941b-f9da6a44eae0.roa (raw, json)
Hash identifier:          8nH8b/RjI6m+wkWD5gxrIqCVhQ3zK4pM5EwAcTep0s8=
Subject key identifier:   37:BC:BD:8E:48:A7:B7:77:37:49:1D:0E:0B:90:2F:C6:A2:D1:B1:1F
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F432858425F5B7EB765FB81185B84ED80
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/673bf855-0c8b-3988-941b-f9da6a44eae0.roa
Signing time:             Wed 28 Jun 2023 19:11:24 +0000
ROA not before:           Wed 28 Jun 2023 19:11:24 +0000
ROA not after:            Tue 26 Sep 2023 19:11:24 +0000
asID:                     43260
IP address blocks:        192.64.205.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:5f:5b:7e:b7:65:fb:81:18:5b:84:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Jun 28 19:11:24 2023 GMT
            Not After : Sep 26 19:11:24 2023 GMT
        Subject: CN=6f0a591e-b640-44be-bff9-45a5fbee5707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:40:ed:03:17:83:b4:3d:30:74:9f:d5:c9:
                    4c:26:f3:c3:75:44:e0:1b:ac:bd:62:58:29:c8:e0:
                    ea:a2:8a:85:da:94:24:25:d0:c0:e1:38:13:3c:75:
                    e0:f9:4f:47:e4:79:8a:eb:f7:43:b1:46:73:99:5c:
                    6f:14:b1:2f:0d:f6:b7:42:63:45:93:15:8a:a2:67:
                    d8:e3:28:c8:7a:57:60:bf:94:c2:b8:fb:94:f8:b3:
                    0c:e6:aa:73:72:bf:0c:2c:7c:9a:f2:6d:06:f0:2e:
                    f2:3c:7e:da:ac:6c:c6:e7:ef:af:e3:9b:30:ad:b2:
                    a6:bc:77:ae:c0:0c:ae:bf:d3:7d:70:45:85:ee:10:
                    4f:f2:07:5d:49:48:ca:78:36:5a:3a:5b:63:0b:25:
                    75:4c:cd:5f:b9:64:8f:e6:d9:d2:bd:84:77:e6:dd:
                    f8:ee:b4:9b:55:0b:6a:c2:b4:c8:23:40:35:81:15:
                    ac:41:39:26:a1:f7:5d:d6:39:4b:0e:6b:76:6c:f3:
                    88:fb:07:8c:a3:98:24:52:2d:85:9d:2f:55:14:94:
                    f8:3d:f2:6a:3c:18:17:b0:04:64:32:c4:65:6f:0d:
                    cf:cf:53:51:b2:ef:3a:51:07:1a:e5:f0:de:e3:0c:
                    e4:5c:5a:1a:77:14:7d:83:85:a2:c5:1c:5f:d8:18:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BC:BD:8E:48:A7:B7:77:37:49:1D:0E:0B:90:2F:C6:A2:D1:B1:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/673bf855-0c8b-3988-941b-f9da6a44eae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:68:39:51:68:6c:0f:35:d8:66:ae:c1:cd:cb:13:2c:ff:b9:
         7f:0a:2c:9a:b5:55:82:f2:fb:cc:ef:b2:5b:48:79:6d:c8:89:
         c9:64:5f:19:00:47:84:9f:16:61:ac:a8:d5:13:49:61:55:cd:
         0b:5c:66:20:7a:f3:3b:6e:db:4e:d8:76:6e:49:f1:5d:6a:8c:
         59:cf:42:4c:a5:ec:9c:03:4f:9e:27:a6:24:76:88:34:12:3e:
         6b:fd:69:73:62:f8:a9:10:95:44:14:b3:5a:6a:82:4c:b6:b7:
         0f:c3:24:62:d5:ce:76:25:c7:47:c4:89:33:a1:e2:b8:20:14:
         09:20:54:08:23:f9:17:37:17:13:fd:33:ed:e2:e1:03:a7:49:
         7c:da:9a:14:e8:7c:05:43:86:18:51:38:e0:cb:e6:d8:cd:8f:
         bd:e7:55:63:92:b3:d0:b4:c1:bc:5b:ac:33:5a:28:c7:3b:ce:
         bc:ad:ad:6f:ae:45:28:e6:71:e9:d7:ff:e4:ba:0a:0d:a7:92:
         84:21:31:d9:6d:1a:98:32:fe:a3:7b:ed:af:5b:5f:8f:25:5d:
         83:9c:ac:15:ee:8c:7e:28:52:d2:b2:4b:13:3f:e1:76:cd:75:
         6f:6a:94:11:62:d7:0a:df:b0:f7:f9:f3:13:95:3b:52:1b:23:
         5f:8d:24:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----