Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/d25bce34-ae90-376f-85ad-263c845fe161.roa
File:                     d25bce34-ae90-376f-85ad-263c845fe161.roa (raw, json)
Hash identifier:          ZgvlHFH49UgGq/sKW1yO19UW1EmXocj5+Nju97+bIdo=
Subject key identifier:   6D:6F:05:9A:0B:FB:26:6C:C4:D3:A5:C9:60:31:C7:86:C0:DF:1D:1F
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F432858479946722EC045224CDB878F00
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/d25bce34-ae90-376f-85ad-263c845fe161.roa
Signing time:             Sun 20 Oct 2024 01:00:30 +0000
ROA not before:           Sun 20 Oct 2024 01:00:30 +0000
ROA not after:            Sat 18 Jan 2025 02:00:30 +0000
asID:                     14618
IP address blocks:        199.255.212.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:46:72:2e:c0:45:22:4c:db:87:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Oct 20 01:00:30 2024 GMT
            Not After : Jan 18 02:00:30 2025 GMT
        Subject: CN=8a0f4b99-b19e-4713-840e-f7ff6b1b04c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ad:21:a5:5b:90:de:c7:21:c2:e2:1c:17:73:
                    1e:a8:65:4c:73:a1:2c:4e:d6:bc:cc:06:82:26:f2:
                    60:9d:55:94:70:1d:81:a6:fe:08:13:8b:89:9b:5c:
                    a4:91:f5:e8:95:40:90:e0:a7:4b:19:08:0f:80:1b:
                    e5:e9:d7:83:05:30:4b:89:22:b1:89:2d:09:d9:2a:
                    32:5d:aa:3b:2d:ce:56:61:15:47:f0:a6:a5:78:4e:
                    dd:fe:76:d8:4d:1b:1d:c1:90:d5:64:37:aa:a3:b8:
                    b7:5f:6a:59:9e:23:72:0e:0e:64:72:8e:2a:c1:78:
                    62:53:89:cc:68:fe:21:ec:ac:9f:6a:e6:17:14:4a:
                    0a:35:8b:b1:4f:a3:24:50:00:a8:f7:1d:8b:c0:aa:
                    74:dc:70:91:6e:72:e0:77:f9:0a:de:02:60:09:1b:
                    80:a3:00:44:11:49:0b:99:db:d6:2e:4d:45:46:ba:
                    04:58:d4:46:07:2f:c9:3d:46:be:eb:0b:bc:74:61:
                    24:89:73:dc:b5:f7:32:34:45:e1:8b:13:88:3f:7e:
                    8f:80:63:51:10:7f:2c:38:20:5f:00:e7:ae:c2:b8:
                    27:89:bc:6d:cb:8a:57:d8:9f:cf:0c:96:6b:b7:f3:
                    9b:f6:d1:fd:b0:c5:46:07:15:c5:1c:be:81:84:f7:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6F:05:9A:0B:FB:26:6C:C4:D3:A5:C9:60:31:C7:86:C0:DF:1D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/d25bce34-ae90-376f-85ad-263c845fe161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:3e:9a:e8:33:29:3b:0c:b7:10:9d:8f:24:40:75:cf:39:
         02:9a:05:e0:1e:93:cf:72:ea:a9:f4:da:c3:7a:04:03:6d:c0:
         69:14:08:7f:f8:24:2a:e8:3a:ef:9a:bb:6b:5a:ed:ed:34:0e:
         da:d2:93:b8:46:aa:2a:83:72:45:c2:58:e7:a7:a3:8a:25:91:
         28:de:83:a3:5f:b8:d8:80:b3:ba:e3:c6:48:e8:5f:0b:6a:af:
         35:70:05:7d:76:0a:9b:e3:84:2f:a4:99:85:de:0a:a6:7d:08:
         83:2a:84:df:96:90:ee:15:5a:a2:39:a3:73:fb:8e:3a:38:39:
         78:ff:40:16:57:12:9f:02:c9:4c:01:77:81:2a:d9:91:1d:8f:
         2a:44:11:51:28:d5:fc:b6:8b:21:9d:88:8c:27:1b:da:e4:a5:
         39:0c:26:d8:18:f7:83:26:98:6c:df:e2:53:81:2b:d0:30:46:
         b3:cd:55:2d:d3:ad:b7:4f:92:54:c7:98:2f:12:87:13:51:b5:
         b8:60:6d:10:1d:fe:09:1c:eb:63:d7:58:50:3b:4a:e5:4b:9a:
         b5:a2:60:65:ed:2c:0e:92:6a:1f:ae:96:cf:eb:bb:c8:29:3f:
         8f:b6:08:f0:aa:c0:89:34:7f:0d:59:b9:51:c8:64:84:d6:7e:
         df:bf:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----