Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1b639619-3478-376e-b9f3-687e219a3099.roa
File:                     1b639619-3478-376e-b9f3-687e219a3099.roa (raw, json)
Hash identifier:          AYoU41poZYiOUfibOJnYcDthDE4D3pGjUnvfpJasOZQ=
Subject key identifier:   30:18:3A:28:49:CB:E1:BE:72:48:C7:9D:24:79:D9:AD:9E:C3:59:D3
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858423276D9C099AD0123B05F5000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1b639619-3478-376e-b9f3-687e219a3099.roa
Signing time:             Mon 12 Jun 2023 17:15:09 +0000
ROA not before:           Mon 12 Jun 2023 17:15:09 +0000
ROA not after:            Sun 10 Sep 2023 17:15:09 +0000
asID:                     834
IP address blocks:        206.206.108.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:32:76:d9:c0:99:ad:01:23:b0:5f:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 12 17:15:09 2023 GMT
            Not After : Sep 10 17:15:09 2023 GMT
        Subject: CN=e5cbaafa-3a22-4977-a72b-f53a17804b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c3:a4:36:89:fe:00:99:9f:8b:cc:78:73:f6:
                    a4:fe:5a:f6:9e:13:39:a3:1b:f6:80:37:ad:33:f8:
                    6a:9a:37:a8:e1:41:8c:10:50:1d:91:80:07:f7:91:
                    1f:47:de:e0:6a:03:13:02:ad:82:12:c9:ac:a3:92:
                    7e:d7:8f:39:b8:d9:ca:cb:ef:35:2e:c6:d3:fe:fc:
                    b2:99:1d:34:d0:97:2b:87:e7:93:98:e2:50:eb:66:
                    3f:87:a8:6c:5f:40:f0:eb:0e:27:7f:4a:e9:2c:98:
                    f0:b9:99:30:8c:6f:7f:9c:cb:ef:dd:2c:e2:0c:5f:
                    87:43:93:d6:3c:0e:32:4d:18:56:0c:3c:9b:08:c3:
                    97:af:c8:7c:b3:c2:e0:3d:86:7d:94:40:91:e3:61:
                    7b:6e:54:32:ef:40:c8:a9:c7:2d:65:8d:fc:fd:ba:
                    7c:52:d3:32:a9:08:76:27:67:e4:7c:56:19:b0:c6:
                    e9:65:ea:81:26:c9:d8:7e:97:17:bd:5f:2f:ee:4d:
                    67:ef:fb:09:25:f6:6c:8f:ac:4c:8d:82:3d:ec:e0:
                    82:09:82:84:4d:e6:72:3d:70:0d:2a:1f:79:41:51:
                    dc:5a:eb:26:55:c8:4a:92:0c:15:5b:43:c8:1c:54:
                    30:77:a7:c7:cd:ac:7a:e1:a4:c3:ab:a0:62:5a:72:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:18:3A:28:49:CB:E1:BE:72:48:C7:9D:24:79:D9:AD:9E:C3:59:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1b639619-3478-376e-b9f3-687e219a3099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e8:45:4d:93:c1:88:e8:3f:51:8a:6d:58:1c:9e:0f:15:8b:
         da:54:9a:17:f6:fc:c1:7b:a4:7d:cc:25:b9:b6:20:d4:2e:3a:
         24:20:49:5b:77:d9:33:b5:72:1c:9a:ce:b0:59:cd:33:71:c9:
         ec:99:22:c7:45:a9:a7:95:94:ab:28:0a:ee:7d:78:ec:0f:89:
         52:4e:36:c9:ca:b7:90:d0:a4:3c:93:90:a1:8b:3f:98:98:5c:
         a0:a3:14:85:d4:2e:94:1c:1f:91:2d:59:27:6b:bf:ac:bc:57:
         43:83:1c:2f:dd:08:8c:d6:68:49:d6:69:fb:6e:6d:92:0d:b0:
         16:5a:f4:51:92:53:23:94:ad:e7:5f:5e:5d:16:e5:17:bb:c9:
         93:60:7d:ba:5e:9f:0e:7b:70:fc:b5:4d:fb:f1:1a:f1:32:de:
         7a:54:14:8f:87:42:f2:ad:56:2a:5d:cb:b8:60:4e:a2:49:ad:
         a0:fd:8e:fb:e2:cb:63:eb:fa:68:6b:f8:70:05:be:37:76:d6:
         5f:9a:77:5d:d8:a8:e0:0c:26:70:aa:9d:58:3a:88:32:7a:bf:
         18:d3:cd:a2:97:35:58:59:1b:54:34:21:df:8b:6e:21:f5:6b:
         70:f3:15:bc:cc:db:d5:58:a7:38:ee:04:dc:a8:4e:a4:75:5e:
         d1:b3:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----