Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8c4a9d74-4427-366a-ab1f-9e0469cb11ae.roa
File:                     8c4a9d74-4427-366a-ab1f-9e0469cb11ae.roa (raw, json)
Hash identifier:          +oJY3VnpGMLe6Fz11LOB8S+RuvdNXS5bfD3W/dKRlfk=
Subject key identifier:   F9:C8:9B:DB:75:D0:57:12:E3:06:54:7B:18:EF:E0:75:71:4E:5E:4B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584545DBB0E9C2A308096AAF89C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8c4a9d74-4427-366a-ab1f-9e0469cb11ae.roa
Signing time:             Wed 20 Mar 2024 18:19:30 +0000
ROA not before:           Wed 20 Mar 2024 18:19:30 +0000
ROA not after:            Tue 18 Jun 2024 18:19:30 +0000
asID:                     147291
IP address blocks:        173.211.3.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:db:b0:e9:c2:a3:08:09:6a:af:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 20 18:19:30 2024 GMT
            Not After : Jun 18 18:19:30 2024 GMT
        Subject: CN=83ba4874-516d-4254-b719-7ca3a162ee0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:68:68:c9:9e:27:9c:0d:a7:22:0d:ed:47:
                    94:69:96:5b:e4:27:ae:11:9b:67:23:d9:3d:a4:9b:
                    1e:5a:7c:cc:b6:96:92:61:0f:e0:d3:68:49:1b:aa:
                    85:48:19:4b:4f:fc:fc:a4:ee:fe:fb:9f:9e:de:22:
                    b8:e4:8b:ea:bf:48:d3:bc:1a:65:c1:11:ee:79:ad:
                    51:d2:a3:b1:a4:ab:3f:d3:f9:ab:a4:fc:ca:1b:8b:
                    d0:18:86:b0:cc:7c:5d:34:96:1d:43:aa:a7:56:1b:
                    26:ca:ac:88:76:e5:53:dc:b9:9b:6b:ca:3e:7d:5a:
                    23:6c:4f:4b:d8:64:39:b7:7f:d0:88:01:06:18:08:
                    ce:d4:22:f7:d8:5f:ec:e1:6a:a6:19:ea:6c:d5:84:
                    34:b1:84:1c:3c:87:82:a2:c5:8b:b9:61:41:fd:45:
                    c9:45:41:9c:d7:66:55:8e:0c:81:b7:99:87:2a:6b:
                    5a:78:2b:44:e8:5a:19:4d:01:13:d0:cc:43:65:dd:
                    b2:6b:75:a5:91:dc:76:dc:b2:1b:51:ff:17:fe:18:
                    c4:25:a6:8e:c6:ab:12:7b:22:aa:46:a7:5c:29:3f:
                    37:34:d7:e4:5c:af:88:c4:56:8f:50:74:c7:9a:23:
                    44:a3:3a:64:05:06:8f:cb:68:f2:16:14:35:b8:18:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C8:9B:DB:75:D0:57:12:E3:06:54:7B:18:EF:E0:75:71:4E:5E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8c4a9d74-4427-366a-ab1f-9e0469cb11ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e9:c2:e0:54:66:bc:fa:56:4f:06:63:59:49:ae:3e:a1:d0:
         04:03:00:a1:66:e7:95:b0:13:a2:9b:03:26:d3:d0:00:dc:0f:
         e4:0d:93:f7:31:3b:10:12:bc:d8:16:42:0f:27:e4:aa:22:53:
         fa:f3:85:f8:e8:44:b5:c2:bb:5b:45:73:21:ab:53:4e:20:e7:
         a0:0f:3f:4e:1d:26:5a:2f:02:12:f0:e5:57:be:a9:b9:e2:12:
         67:c7:17:d5:ca:c1:0c:3c:d3:b2:3d:fb:ee:e4:5f:28:3f:31:
         ae:47:c9:e5:7c:5c:ec:86:c2:90:3b:a0:d7:34:74:68:e2:da:
         d6:4b:39:ca:c0:60:3b:b2:18:87:2b:7f:ba:c0:0c:b2:c2:7e:
         32:0c:07:73:c4:83:32:7e:07:d9:ed:ee:d5:5c:24:d7:65:de:
         92:cc:84:09:87:e6:1a:2a:a7:dc:ac:52:f3:0c:e0:ae:f9:b4:
         44:80:2f:b6:7a:a8:90:8c:21:87:ac:71:cf:3d:73:8f:4f:82:
         ff:ae:cf:8a:78:73:52:e8:4a:08:63:de:c0:30:24:4e:8f:9f:
         9e:c9:52:f0:fc:0b:b3:dc:36:ec:4d:27:e7:12:19:61:e7:49:
         2d:0d:f1:31:ad:1f:a2:07:10:5e:69:e2:da:2d:41:e3:9f:d1:
         2c:8e:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----