Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4435e628-5838-3ef8-a53f-cbed4029b6f6.roa
File:                     4435e628-5838-3ef8-a53f-cbed4029b6f6.roa (raw, json)
Hash identifier:          LTWL9OOeTwwKR9e7GmLDCYiolof8h6nkPKsqcxObOw8=
Subject key identifier:   57:B2:BA:97:13:95:98:41:F7:88:A3:99:16:3B:D6:FF:37:85:33:21
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584386FEAC499A61B313E2F91E40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4435e628-5838-3ef8-a53f-cbed4029b6f6.roa
Signing time:             Thu 12 Oct 2023 16:43:39 +0000
ROA not before:           Thu 12 Oct 2023 16:43:39 +0000
ROA not after:            Wed 10 Jan 2024 17:43:39 +0000
asID:                     42055
IP address blocks:        216.122.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:86:fe:ac:49:9a:61:b3:13:e2:f9:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 12 16:43:39 2023 GMT
            Not After : Jan 10 17:43:39 2024 GMT
        Subject: CN=e3cc6536-233d-4684-8ca4-7f1c73463251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:c2:27:68:3a:99:32:cf:a4:b3:b1:e8:d2:
                    eb:dd:86:34:93:da:e1:a8:26:1e:df:34:fa:07:f1:
                    d8:f9:e1:3b:77:94:b4:27:d2:59:5a:20:26:b4:4d:
                    3d:16:95:45:b0:89:0e:ad:46:d1:d5:db:87:93:eb:
                    75:e5:19:61:22:5a:65:80:37:f3:8b:5a:b5:9d:56:
                    ab:cb:52:73:16:1f:cf:1c:d4:7c:b0:3c:e0:3a:95:
                    9a:e1:6f:e7:ab:12:01:d2:8d:2c:54:c9:1b:8a:64:
                    3a:f9:f8:27:e8:16:9b:33:2f:ec:0d:5d:08:36:db:
                    22:ff:29:ca:bd:ba:95:34:0f:fc:8b:d7:7a:43:4b:
                    5a:52:53:35:90:f5:3d:80:de:7f:c5:c4:2a:d7:e1:
                    39:22:b6:11:7b:bd:88:6c:d3:fe:cb:a4:bf:50:a1:
                    01:b4:95:6c:00:62:ec:a5:64:38:f4:3b:65:a7:c6:
                    09:ed:f2:5e:e1:e6:5d:d0:54:92:93:e8:6d:3d:16:
                    b8:78:37:62:1c:fd:6c:18:7d:4f:d8:d7:82:28:2b:
                    4e:77:5c:50:72:a6:b5:b3:e8:43:a9:1b:3a:97:df:
                    21:01:01:f5:35:73:b2:a5:e3:3b:ab:6d:ad:3d:d6:
                    35:c5:1f:98:b0:86:79:93:7e:51:6d:c6:28:f8:eb:
                    38:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B2:BA:97:13:95:98:41:F7:88:A3:99:16:3B:D6:FF:37:85:33:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4435e628-5838-3ef8-a53f-cbed4029b6f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:7d:83:cd:81:21:2d:8e:5a:4f:bd:de:05:be:ed:cd:9f:7d:
         1e:15:7d:3d:f8:8b:8b:08:3d:02:98:46:4c:3f:b2:f5:01:d5:
         5f:5e:76:1d:c5:80:b5:e7:5b:b7:55:84:a8:ea:58:44:a8:a6:
         b0:4f:58:5d:33:3b:58:ec:37:f1:bf:f2:43:4a:9b:dd:b4:7c:
         1f:d1:30:d3:f2:62:58:42:a5:f6:f8:9a:58:12:cc:c4:49:a3:
         f6:b5:4a:94:31:13:ad:46:8f:46:1f:04:3d:0d:9f:e2:c7:40:
         4b:b4:90:80:63:5a:23:4b:0d:b3:ca:4a:95:7a:a0:2c:41:5f:
         ff:f3:af:37:8d:cc:d6:3f:e0:39:c0:a8:17:cf:e7:9d:98:1d:
         f7:7c:62:69:41:e5:80:25:86:8e:05:37:57:9b:c9:80:d8:23:
         2a:33:58:7c:7b:5a:fb:d1:38:55:f2:ce:ec:c0:77:6b:ed:84:
         d9:17:db:5e:67:e4:fa:d7:22:3b:9c:94:18:a4:c8:bc:bb:25:
         6c:59:ae:e8:26:99:d0:e3:28:44:81:d0:44:ec:fe:68:ea:55:
         c3:b3:fe:e1:37:ad:9d:f0:b0:13:c6:a0:7c:be:73:8a:e6:78:
         b6:a6:b5:c5:19:dd:10:88:66:2e:e4:51:d0:da:7d:eb:4c:65:
         43:7d:fd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----