Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/68932ace-1d31-39c8-b128-1a2f3d292562.roa
File:                     68932ace-1d31-39c8-b128-1a2f3d292562.roa (raw, json)
Hash identifier:          Efhr5t0xnHYgNqJCEjrfgOidbClxpSDcrQRciSy232A=
Subject key identifier:   D5:7E:9D:92:F2:A5:B9:17:D6:E0:57:CB:C8:6F:8F:1C:FD:7D:26:F8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841E46E1DDC1841CC6943012000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/68932ace-1d31-39c8-b128-1a2f3d292562.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 20 Jul 2023 12:24:14 +0000
asID:                     398465
IP address blocks:        206.206.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:1d:dc:18:41:cc:69:43:01:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 20 12:24:14 2023 GMT
        Subject: CN=2aecb70e-8bc7-4099-80c9-c69f9b46fad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:b9:30:7c:0d:27:6e:50:8a:88:c2:7a:6a:
                    db:38:f5:e8:ca:4e:d8:b4:e3:12:5d:95:bc:92:c8:
                    c3:42:ad:db:f5:41:92:a8:fd:7a:db:ca:82:a3:0b:
                    9c:f2:b0:bc:23:4b:d7:f5:cf:9f:b8:d0:06:a6:ae:
                    87:18:8d:b3:0f:18:9e:d2:07:5b:a5:ec:5a:40:79:
                    7f:bb:3a:cc:05:b1:6d:0f:be:5b:c4:c0:20:40:b2:
                    de:06:d0:46:da:8c:f5:c7:64:1d:24:ba:1a:33:c1:
                    18:6f:bc:83:48:76:24:e8:c1:5b:6c:78:4f:d8:8f:
                    d3:29:27:b4:2f:82:3a:22:33:2b:d2:69:db:00:63:
                    2f:fb:62:d6:2b:76:0b:3e:e9:ae:ed:c3:56:62:da:
                    72:0f:36:7c:54:8b:63:60:88:00:35:1d:ac:7f:93:
                    79:1b:2a:99:cd:ea:a2:44:25:91:88:51:93:20:52:
                    32:1e:80:48:9a:48:ff:56:b8:a1:13:5f:9f:72:73:
                    d8:8d:85:09:9b:85:38:9c:93:6f:58:82:57:cc:0c:
                    ae:a7:59:31:c5:8e:f1:0f:c3:d2:a2:77:56:35:0a:
                    8f:92:9a:30:b9:72:aa:6b:6d:d9:03:b1:2f:95:b3:
                    ae:76:71:37:b3:1d:77:45:23:fc:84:d1:60:04:2c:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7E:9D:92:F2:A5:B9:17:D6:E0:57:CB:C8:6F:8F:1C:FD:7D:26:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/68932ace-1d31-39c8-b128-1a2f3d292562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:29:20:2e:03:ad:01:04:23:60:c2:0d:02:be:5b:da:5b:0a:
         ee:b6:e1:55:c5:b2:09:49:67:53:4e:1f:e7:02:5e:d4:dc:0a:
         1f:6e:eb:a6:35:64:81:ae:47:2d:ec:40:9a:07:e9:0b:05:ad:
         fc:7e:21:07:bc:82:3b:ef:3e:35:8c:67:7b:d5:02:f7:1a:82:
         17:a7:e7:6e:e6:ff:15:22:ed:79:4b:6f:11:6a:69:9e:bd:80:
         9c:9d:1f:a5:f2:c1:00:33:ad:06:4d:37:de:08:97:73:4f:46:
         70:4d:02:49:e2:80:b6:22:e7:35:0c:7d:5c:0b:4d:fb:a2:e3:
         66:61:6d:0b:56:b0:02:28:4e:04:92:2a:eb:18:11:f6:9b:6f:
         1e:48:c2:b4:66:d8:f8:a5:93:73:13:09:44:a2:a1:52:c4:b5:
         7d:19:12:36:e8:3f:fb:bd:58:99:e6:71:da:9c:83:3d:10:4c:
         a2:39:1f:8a:9a:6b:cf:e0:b3:35:d7:23:12:48:48:08:44:a1:
         36:e2:0a:b2:67:f2:33:97:fa:ac:c4:fc:54:f5:fc:d7:0d:f9:
         c1:7e:da:d6:5e:55:3d:a8:f3:7a:af:52:de:3a:7a:4c:df:93:
         82:9a:08:cc:0d:af:95:40:72:ed:9e:39:2b:fb:d6:24:bf:aa:
         55:40:a3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----