Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01c5ddc5-f397-3f25-8a8b-f0e7dda91dd1.roa
File:                     01c5ddc5-f397-3f25-8a8b-f0e7dda91dd1.roa (raw, json)
Hash identifier:          CGs+FwX3bRT/FN9bf3Tuwm/PUqENfmrTF1122RkLzL8=
Subject key identifier:   63:CF:33:30:BA:1E:D0:B3:B1:0A:6A:F7:61:87:49:5D:39:1B:3C:F6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584286D1E06F34D753599505A380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01c5ddc5-f397-3f25-8a8b-f0e7dda91dd1.roa
Signing time:             Wed 12 Jul 2023 22:26:27 +0000
ROA not before:           Wed 12 Jul 2023 22:26:27 +0000
ROA not after:            Tue 10 Oct 2023 22:26:27 +0000
asID:                     49999
IP address blocks:        206.206.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:86:d1:e0:6f:34:d7:53:59:95:05:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 12 22:26:27 2023 GMT
            Not After : Oct 10 22:26:27 2023 GMT
        Subject: CN=72807912-e1bf-42ab-af9d-a9536ba0fd03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:bb:3f:ff:88:0f:22:af:ce:f1:ce:34:37:
                    18:18:11:e1:eb:98:12:e3:b0:51:c5:52:f7:bc:02:
                    f1:9b:d2:15:65:73:a3:de:0c:b0:ab:54:eb:62:bf:
                    9a:f8:f4:44:77:f4:f1:13:84:33:6c:94:29:38:fb:
                    5a:01:2f:1a:c5:9d:37:f0:59:eb:0e:c1:68:f8:27:
                    1f:f5:95:f9:18:6a:62:56:20:c9:72:86:29:05:b3:
                    5e:fc:1c:92:62:ea:99:11:0c:71:99:8a:75:bb:94:
                    de:f2:81:41:3f:47:34:3f:3c:5c:78:a0:a8:6c:4c:
                    81:88:d9:b5:62:83:f5:b2:d5:6f:56:73:20:bd:01:
                    9b:5c:10:15:74:b2:ba:06:06:94:36:26:ea:80:a2:
                    5e:81:47:20:cf:53:1c:c9:1f:bd:6d:6e:89:49:3e:
                    89:89:08:55:9d:e0:55:0f:f7:43:21:85:90:09:86:
                    60:16:09:eb:ec:a3:bc:d9:d0:47:61:b0:bf:d4:78:
                    28:6a:1f:e6:e5:f4:b1:ff:ed:ad:c4:68:9e:a8:f1:
                    b7:77:b0:b8:46:56:90:64:aa:d3:16:7f:73:82:1c:
                    dc:b1:25:50:df:68:40:2b:a1:29:0f:95:96:25:2b:
                    86:e2:be:29:03:7f:86:9a:8d:93:d1:83:dc:24:4b:
                    97:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CF:33:30:BA:1E:D0:B3:B1:0A:6A:F7:61:87:49:5D:39:1B:3C:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01c5ddc5-f397-3f25-8a8b-f0e7dda91dd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ba:ed:d2:99:15:8b:6e:c1:c5:13:d5:ca:d9:50:86:12:82:
         5c:47:02:e7:ed:49:55:4f:4f:0a:40:09:77:6c:ec:e4:be:2e:
         e1:b1:8b:04:d7:35:6d:65:c6:8e:2d:ec:6e:8e:50:f2:ae:72:
         1c:8a:bf:7a:96:2e:3f:68:99:cc:3c:9a:86:1c:42:74:e0:1f:
         87:d4:1c:cb:4b:b4:fe:91:11:78:cb:32:bf:b3:35:5c:05:79:
         d1:5e:ed:e7:b9:e4:7c:7f:d7:59:50:68:e6:40:42:b2:a5:6b:
         63:c5:4d:80:f8:69:c7:76:76:76:56:d8:51:d9:2f:83:2a:f7:
         ce:7e:70:f6:86:d2:e8:94:a5:0a:e0:ec:16:58:ab:79:d6:db:
         4e:da:cb:f8:3c:69:e6:a6:f1:b7:c8:b6:c2:3e:90:9d:59:ef:
         d6:8b:43:ef:a6:60:88:e6:6e:f3:2b:c2:9f:63:a3:13:66:c6:
         f7:0c:60:53:c6:3b:d5:d0:cd:d0:05:09:ad:14:ec:44:0a:9a:
         5b:27:90:93:5d:be:ef:86:29:2a:fc:02:c2:8c:58:c5:5c:e8:
         f5:15:b1:21:5d:4f:20:80:b9:e0:4f:51:df:d6:61:d6:3f:16:
         de:02:04:a6:df:65:cf:04:46:07:63:1d:19:48:58:a6:a8:4d:
         b9:fe:9e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----