Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a7d3b63e-6ce9-3188-88fe-73ed0d9ee941.roa
File:                     a7d3b63e-6ce9-3188-88fe-73ed0d9ee941.roa (raw, json)
Hash identifier:          hMof2OWTPgzVShbIIZRlbhaoT+zk9b+GICxVxfKbufk=
Subject key identifier:   53:9E:34:BC:84:D0:80:07:CE:D1:DA:8C:09:26:18:04:C3:81:BD:EF
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328584309F7F39D1CC98D35E7889B40
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a7d3b63e-6ce9-3188-88fe-73ed0d9ee941.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.154.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f7:f3:9d:1c:c9:8d:35:e7:88:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=ddac27ba-5f5e-421f-ac3b-3a0a256aa201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:7d:70:e0:26:10:0f:f0:66:ac:de:0b:49:
                    6e:cd:4b:0b:68:ef:3a:d8:25:a3:92:8b:17:7c:07:
                    78:c3:a0:44:f3:eb:b5:ea:29:d2:d6:56:47:82:77:
                    ab:94:66:5c:14:42:f1:dd:ce:a6:14:c1:7c:75:55:
                    51:8b:76:f6:b6:64:56:c2:3a:41:fe:c9:a5:f6:65:
                    33:44:4f:83:ec:45:df:d2:b1:1c:d8:e0:95:42:20:
                    58:f1:6d:b3:db:42:f5:c4:be:eb:4e:d5:b8:ee:53:
                    18:83:f1:4b:5b:ac:0b:94:3a:11:20:bd:d7:91:a2:
                    e8:35:c7:f7:9d:ba:45:53:1e:1c:e9:6e:a5:e3:0e:
                    d2:22:3a:81:bd:ec:5d:f4:1b:9e:80:98:ea:94:d9:
                    bb:85:ef:80:63:6b:39:ea:83:d4:12:e1:63:e9:68:
                    df:3a:c3:71:07:77:b0:c2:ea:a1:b3:a8:5e:c9:6a:
                    a7:b0:73:59:60:e5:eb:b4:27:f4:bc:fb:0b:2c:cf:
                    97:6a:72:b1:43:dd:03:d8:79:36:c7:9c:c3:a7:a0:
                    0d:51:38:c1:46:d2:b3:40:d6:8f:af:3a:9b:5c:8a:
                    2f:36:60:e0:53:c3:85:88:5b:dc:25:f3:1f:69:0b:
                    bf:ac:5a:46:20:ba:69:57:39:d2:85:3d:7a:2e:bb:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9E:34:BC:84:D0:80:07:CE:D1:DA:8C:09:26:18:04:C3:81:BD:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a7d3b63e-6ce9-3188-88fe-73ed0d9ee941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b2:81:82:d6:ff:30:cf:11:77:18:ba:9e:4f:c3:00:2d:67:
         26:1d:ba:f7:bd:a4:f3:2c:42:24:e4:59:d7:78:f8:72:f4:d4:
         95:e8:09:b1:bf:3f:5a:bd:d7:7a:18:16:67:7e:07:1e:e2:43:
         a9:de:c1:9a:a2:c5:64:b0:6a:4f:1a:85:04:26:7f:91:ba:ab:
         e6:94:ee:ff:69:04:04:97:48:7f:c1:da:68:7b:87:c7:14:8e:
         01:7f:07:e5:99:e6:51:7f:0d:56:5c:64:34:ec:5a:e8:a7:3b:
         50:61:91:f8:32:e8:cc:4d:89:57:c4:94:26:5a:3d:e3:a0:65:
         c1:e8:4e:a4:c0:62:74:5c:71:e7:ca:e7:dd:ba:41:8e:60:da:
         b8:f1:e8:6e:fd:48:ed:a9:1c:f2:fc:1d:ca:9c:74:d7:fa:02:
         d9:cc:33:3c:56:b4:e2:18:e3:22:2d:ab:8c:41:c9:b4:51:9c:
         e5:ce:c6:9a:35:1a:c7:7f:19:c4:77:6a:e4:b7:d9:6b:4a:d1:
         4b:30:7a:66:f8:dc:eb:aa:aa:a0:b6:17:88:dc:85:8e:16:c1:
         1c:9d:86:dc:52:b1:38:0f:20:b0:3c:39:ce:22:bb:1e:78:dc:
         d8:aa:b2:b5:82:bf:f4:a2:5c:76:e2:5d:f1:79:3b:98:7b:77:
         bb:92:5c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----