Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/96c446c8-eb0d-3121-a556-4dcbf0a5a343.roa
File:                     96c446c8-eb0d-3121-a556-4dcbf0a5a343.roa (raw, json)
Hash identifier:          lahKvcZ81J5UEfSHaad4qvhUJpsb0VpULcidyr2xEf8=
Subject key identifier:   85:AD:71:73:F1:76:1F:3C:E6:A4:47:0D:2E:AE:CF:5D:7A:B9:A6:6B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841E46E1B5335EBA859E8306980
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/96c446c8-eb0d-3121-a556-4dcbf0a5a343.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 20 Jul 2023 20:10:04 +0000
asID:                     7018
IP address blocks:        206.206.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:1b:53:35:eb:a8:59:e8:30:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 20 20:10:04 2023 GMT
        Subject: CN=4f94282b-82de-4bba-bc16-2700468904d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:46:37:36:7b:5b:7d:c7:bf:14:2d:eb:57:
                    f8:17:de:03:42:6d:c2:05:e3:4f:4f:72:c3:0a:41:
                    7e:2a:bf:29:6f:9b:57:b6:67:7e:5c:29:85:1d:5f:
                    4c:c0:88:83:69:ad:88:e4:e6:15:02:b1:39:32:df:
                    7c:c2:31:2e:06:6d:03:4b:d3:77:28:05:e7:59:dc:
                    77:ba:ed:57:3e:cb:ad:d1:a9:f2:27:73:85:0a:a3:
                    41:21:b2:79:c5:de:2e:e1:79:da:8d:b0:36:5b:5b:
                    36:b8:72:37:c3:c0:3c:68:dc:2c:c1:06:17:f0:47:
                    25:8f:cc:03:66:74:86:fa:0c:22:50:38:4c:b2:ad:
                    20:8b:fa:46:6b:3f:62:7c:a1:82:10:1b:ed:a5:55:
                    d6:43:c9:a4:b8:d4:04:ab:80:5e:cf:e7:2c:23:d7:
                    23:f3:d5:c1:82:d3:65:4b:c1:c6:a3:99:d9:d8:29:
                    67:1e:97:67:83:ac:9b:7c:58:af:ef:b0:4a:95:ec:
                    fd:ab:1b:32:b0:9f:1c:a2:b3:32:eb:b7:29:e0:0b:
                    38:58:dc:07:f0:5d:a9:2a:d7:e8:c4:a0:9e:d0:5d:
                    ca:b4:6e:c0:9b:86:78:26:bd:7e:2f:6b:bc:6f:15:
                    a6:ad:ba:5c:52:5d:3b:9f:12:70:27:93:d8:63:17:
                    ca:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AD:71:73:F1:76:1F:3C:E6:A4:47:0D:2E:AE:CF:5D:7A:B9:A6:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/96c446c8-eb0d-3121-a556-4dcbf0a5a343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:12:62:5f:e5:bb:d8:9d:d1:3c:f2:2b:94:af:91:34:71:21:
         e5:ab:b7:e4:4c:1b:dd:ee:35:49:fd:ff:5d:6a:ae:ba:5c:21:
         96:51:5f:81:32:75:db:66:c4:a4:f0:6b:5c:86:e3:d7:64:d2:
         d2:45:16:17:4a:d0:7d:46:53:48:4d:7e:e6:b4:41:e1:50:ed:
         c7:40:2b:96:f2:09:1c:89:32:e3:39:da:71:1c:b0:0e:27:69:
         07:5d:04:6a:73:d7:8a:e0:fb:73:27:45:ba:19:8a:e6:b9:e5:
         cc:17:65:4d:e0:d5:df:70:93:e5:da:b9:4e:72:fa:8e:95:9d:
         d1:b8:1a:8d:1b:c8:0c:5a:de:ea:54:87:c4:82:de:4e:67:bf:
         c5:9b:7e:1f:83:c2:39:70:57:7d:04:7c:5c:6c:fe:32:1f:84:
         f5:49:12:3e:60:64:a5:69:4d:df:61:8f:48:3c:29:d9:4c:b2:
         64:20:23:e8:60:ae:77:36:55:01:7b:74:1f:4f:b8:e9:b4:03:
         00:12:49:c3:a7:22:34:b4:ad:c4:cd:71:0d:57:10:fb:75:83:
         8a:41:cc:fc:fa:00:4b:28:dd:6e:5d:83:31:10:0f:16:bc:a2:
         13:73:96:9f:8c:28:f1:ec:48:56:50:a6:e6:c3:af:96:1d:0d:
         07:c3:85:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----