Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/07706aeb-7f42-3d7f-9d1e-c85a8248c775.roa
File:                     07706aeb-7f42-3d7f-9d1e-c85a8248c775.roa (raw, json)
Hash identifier:          MVZSjJHvGx+tIHwvAd0T4O//T6O8XpWBzMO8SA9hJpE=
Subject key identifier:   87:A9:2F:CA:2B:8B:E8:0D:90:EC:9F:F6:A2:63:75:F7:5D:A0:6B:DC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285842B7F9431D305C057024289160
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/07706aeb-7f42-3d7f-9d1e-c85a8248c775.roa
Signing time:             Sun 30 Jul 2023 13:00:20 +0000
ROA not before:           Sun 30 Jul 2023 13:00:20 +0000
ROA not after:            Sat 28 Oct 2023 13:00:20 +0000
asID:                     834
IP address blocks:        206.206.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b7:f9:43:1d:30:5c:05:70:24:28:91:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 30 13:00:20 2023 GMT
            Not After : Oct 28 13:00:20 2023 GMT
        Subject: CN=48f51637-566a-46a0-b530-dc9b027c0e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:85:84:25:5e:4f:e4:8a:65:6e:87:9c:25:ee:
                    3c:6f:8a:95:f9:f4:d9:23:48:46:9d:21:55:6a:a5:
                    94:60:c1:20:1b:8a:3e:87:00:c0:5c:c9:14:be:bd:
                    ed:ce:90:69:6e:76:73:98:2e:e5:29:72:7d:24:35:
                    81:ee:2c:b1:b6:1e:1d:5c:1d:b6:f4:0a:0b:08:03:
                    c8:9c:44:20:f5:71:3a:10:be:58:44:1c:c5:c8:e4:
                    b3:ee:c2:0d:d8:c3:79:0f:f3:cc:73:1a:1b:cd:a3:
                    20:e1:59:62:25:70:ae:43:5c:3f:49:9b:e5:c3:19:
                    7c:0a:d9:18:83:4b:c7:9d:a7:06:f9:d1:d2:d2:af:
                    26:92:74:ec:45:f5:92:d2:eb:01:e6:a9:c4:3c:c7:
                    45:c1:76:83:da:95:5f:29:53:e2:dd:9f:b8:74:eb:
                    14:b8:40:dc:79:d7:65:cf:e6:ee:5c:ea:7d:53:61:
                    88:2d:4c:24:1b:d3:c5:31:ec:b1:87:ac:3c:63:0f:
                    89:b4:57:09:55:55:ee:23:8a:2b:f9:af:e7:bf:4b:
                    ba:f4:2b:e5:07:40:d4:09:9d:bc:ae:56:18:8b:8d:
                    71:82:fb:71:13:3b:13:15:ca:3e:dc:46:20:28:a5:
                    fd:09:b6:35:ea:a2:bd:75:92:2a:e3:2f:90:91:36:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A9:2F:CA:2B:8B:E8:0D:90:EC:9F:F6:A2:63:75:F7:5D:A0:6B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/07706aeb-7f42-3d7f-9d1e-c85a8248c775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:46:35:b1:07:cb:88:5e:2a:c3:17:10:7f:78:90:eb:79:73:
         12:44:30:eb:d0:d9:54:e6:14:b0:8a:33:5f:49:e3:6a:c9:2c:
         7a:9f:88:27:bc:68:59:69:e9:5d:25:e1:5c:56:d2:9b:b9:da:
         cb:a8:c6:c6:3b:c2:7e:5f:91:03:08:19:e2:0c:55:ed:c2:ce:
         57:a8:eb:81:40:cf:1e:45:87:d2:93:d0:5c:f1:3e:40:e0:03:
         a8:07:e1:6e:32:24:8d:8f:c8:52:79:35:f4:4c:81:ee:c1:c7:
         83:ef:ef:b5:b5:ab:5e:b9:02:f6:e1:f7:23:30:2f:11:b6:4f:
         45:c2:9f:88:7b:60:15:9a:bc:e9:c8:c1:c2:bf:a6:a1:af:22:
         2e:ad:87:00:0c:39:76:46:dc:d0:33:99:33:b7:88:a9:f7:d2:
         a7:61:22:12:ae:43:9c:52:bd:ab:76:4b:57:b8:0a:d7:7d:9b:
         92:ee:53:cd:48:c2:9e:cf:90:9b:4c:59:07:64:eb:01:a0:9b:
         d1:c3:6d:e8:b9:cd:69:81:28:df:33:f7:b0:c0:57:a8:e5:f8:
         f6:aa:f9:d3:54:b7:b8:ea:7b:7c:6f:92:6b:6c:53:52:df:a4:
         b1:28:c1:75:74:c7:14:49:34:4b:b7:cb:44:63:a2:27:c4:f3:
         dd:2c:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----