Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/075e5ab9-cf5e-3ee5-a39e-14934a206356.roa
File:                     075e5ab9-cf5e-3ee5-a39e-14934a206356.roa (raw, json)
Hash identifier:          q6CI6kUKoZu+NwfyJURvE3KUBclheXgfFfbbOT4T83c=
Subject key identifier:   62:50:04:FB:01:61:CF:9A:64:D8:32:FF:5D:70:BF:48:AF:23:4D:E5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841E46E1C069F61D62DBCCF2D00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/075e5ab9-cf5e-3ee5-a39e-14934a206356.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 26 Jul 2023 18:34:00 +0000
asID:                     7029
IP address blocks:        45.40.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:1c:06:9f:61:d6:2d:bc:cf:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 26 18:34:00 2023 GMT
        Subject: CN=62993cd9-92db-48f7-9d81-6d72caef38cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ff:a1:6c:a4:8d:4e:ec:f3:a3:04:21:e0:a0:
                    fa:d2:c5:3e:20:da:bd:51:5c:a3:27:9e:a1:f1:31:
                    24:1c:a4:9d:92:b5:6f:a3:7b:c1:14:fa:82:b6:90:
                    de:99:e9:5e:02:ba:49:f5:bd:f8:c8:67:9b:bf:2d:
                    30:af:79:68:b3:82:36:02:a3:dc:8f:1d:82:af:22:
                    7a:cc:39:83:67:62:ff:06:e8:63:d8:57:4c:8a:d6:
                    01:25:18:11:73:aa:db:72:e3:4e:c3:a9:b1:df:74:
                    2d:65:bb:ca:5f:8c:fa:68:23:7e:b1:46:79:28:af:
                    af:9b:11:46:f8:e9:59:b8:e0:9f:7b:28:b9:72:e1:
                    f6:f3:15:e4:70:c6:46:81:8a:51:da:85:fe:2a:c8:
                    c5:ca:e4:85:4e:61:3c:f9:32:34:92:00:01:a0:37:
                    ff:13:0d:01:2c:a1:86:b1:4f:12:67:07:46:c2:17:
                    d8:82:d1:23:57:9b:29:76:24:fb:37:b6:7e:ac:c5:
                    33:d9:1e:70:73:f2:d0:1c:f9:bd:5b:c9:b1:8c:01:
                    41:18:22:91:7d:3a:07:06:ca:23:73:af:92:94:1e:
                    3a:15:cc:27:cf:ad:75:2c:33:38:9a:d0:82:30:3f:
                    8f:75:27:6a:15:32:33:62:1c:ce:3c:cf:19:97:ea:
                    f5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:50:04:FB:01:61:CF:9A:64:D8:32:FF:5D:70:BF:48:AF:23:4D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/075e5ab9-cf5e-3ee5-a39e-14934a206356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:28:e2:bb:c9:fc:bc:d2:09:5b:7c:5a:5c:ca:c0:a5:c3:
         18:2f:28:3b:75:2e:59:4c:ef:d4:84:28:c9:e0:2b:81:0d:01:
         18:67:2e:c5:d3:3e:b3:e4:70:f2:43:18:50:98:7b:29:f3:41:
         a0:2e:06:86:61:33:1b:5a:50:a8:ae:b3:4f:05:22:6b:ed:be:
         8b:e6:0e:70:fb:40:14:13:80:bd:b1:cb:1c:51:80:22:e8:7c:
         7b:f6:38:87:62:c4:dc:76:01:62:db:fb:48:f6:44:c3:1a:94:
         2b:a9:2d:c2:4e:a0:7a:b6:6b:95:f6:6a:92:f7:df:6e:86:6f:
         f9:ee:ce:4d:05:9a:e1:28:3f:79:bd:3c:dc:45:64:d7:16:df:
         6c:ea:35:2c:fc:c7:46:f1:7e:f3:51:f6:2e:26:fa:f9:08:7f:
         0a:89:86:e2:1f:2a:85:b7:4a:1e:a1:35:99:3a:bb:88:f0:41:
         18:7a:d2:f1:83:dc:d1:0a:68:60:59:74:3e:12:f6:4f:bd:92:
         3f:90:c8:21:31:53:d5:f8:0f:d4:b4:61:78:ed:82:29:0b:5e:
         08:da:0c:62:92:5b:ca:26:fe:c6:ed:74:c4:fb:1c:20:c9:45:
         b8:b1:67:ff:a9:81:15:5c:81:c7:51:fc:af:a7:1b:f0:8f:6b:
         59:aa:c0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----