Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c25f8a9d-0138-372d-8723-0641065da189.roa
File:                     c25f8a9d-0138-372d-8723-0641065da189.roa (raw, json)
Hash identifier:          uPhuy1utoyqSas084CoywjB+rQHQaAK0A3WCfVMgmiE=
Subject key identifier:   95:27:2B:7F:CD:CF:86:C3:DA:F1:9D:2B:A4:90:92:D8:2E:02:0B:0B
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F432858430A103B3C18D05290B049C380
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c25f8a9d-0138-372d-8723-0641065da189.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        216.73.80.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:10:3b:3c:18:d0:52:90:b0:49:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=2140765b-65da-49e7-9640-7e0459410027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:52:ac:47:81:74:3d:56:3f:b1:47:b8:6a:f8:
                    db:47:0c:b3:29:ae:19:98:81:23:c1:80:32:56:6f:
                    71:03:c6:0f:c3:e9:6a:a1:29:2a:e5:88:c5:80:4b:
                    ac:17:a1:4e:e9:87:cd:02:5e:b5:5f:ed:d8:ee:68:
                    34:4a:87:08:ce:f5:16:7a:5d:af:e5:4a:e9:83:d9:
                    e7:3d:33:b8:1e:7a:5d:21:6f:da:dd:b1:3f:19:cf:
                    b4:39:2a:ed:17:31:88:09:b8:b2:8f:45:ed:43:ce:
                    10:4d:7d:f1:72:e1:2b:c1:a6:0e:6c:77:e8:4a:0b:
                    53:ed:31:de:cb:07:97:2e:e8:d8:c1:5b:d3:15:b5:
                    15:2e:e8:9a:9c:74:9f:81:65:a2:a0:ff:e7:eb:ae:
                    eb:ee:33:4f:60:78:f6:41:31:35:25:d9:5b:db:88:
                    a3:ad:5d:ce:ea:55:0a:2d:14:66:87:80:16:e9:65:
                    a2:6b:14:4c:27:dd:bd:57:c6:8d:49:0a:45:9a:f3:
                    d3:98:a5:55:7c:6b:41:ec:0f:69:23:53:6c:7e:48:
                    d2:f5:2b:fc:db:f0:30:80:e3:db:6f:ee:4c:94:eb:
                    68:29:98:08:b5:16:84:60:68:f8:8d:2f:6e:d3:66:
                    df:a9:87:3a:0f:af:96:6d:a0:92:e2:eb:33:a6:e7:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:27:2B:7F:CD:CF:86:C3:DA:F1:9D:2B:A4:90:92:D8:2E:02:0B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c25f8a9d-0138-372d-8723-0641065da189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ee:11:af:c8:4e:e6:54:7b:12:eb:02:d7:9c:7a:08:a9:de:
         c5:90:5b:c0:22:17:1c:32:d1:01:18:ff:fe:44:54:aa:49:59:
         54:a9:8d:0f:b9:f6:cc:61:5f:70:3f:07:82:d6:dd:61:34:bf:
         db:6d:50:7a:62:7b:13:5f:52:b3:39:50:21:91:a3:fc:7e:8c:
         49:af:53:a4:c2:65:bb:01:f6:b9:05:8c:7e:df:89:e1:fd:e1:
         55:48:ae:c0:29:72:2b:5c:fd:c4:c5:01:f5:83:3f:d7:84:a3:
         3f:f9:25:92:0f:4f:8f:87:80:8c:01:47:e9:49:e5:bb:9f:1f:
         f8:7f:99:7a:89:b0:04:ec:b0:3b:51:c0:72:91:91:c8:98:bf:
         f3:e8:e3:2f:b7:9a:fd:57:6f:40:11:55:58:1c:87:d0:7e:d1:
         81:72:68:8b:28:57:c5:b8:12:66:2c:47:06:2e:67:87:1c:8b:
         6f:8b:de:80:25:7a:d3:c5:08:f8:26:b7:17:80:3b:44:6a:0e:
         37:e3:eb:c5:b2:ea:5e:44:15:d6:60:e9:4b:b7:f5:2b:48:66:
         a4:2d:42:74:62:22:5d:1f:72:12:e5:d3:2c:89:39:d4:d7:2d:
         26:44:2e:ef:03:42:ac:23:1d:f3:0c:23:d1:ff:0d:b8:eb:17:
         2b:97:c4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----