Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ba86a284-b9e8-3ca6-857e-0d0a7496604d.roa
File:                     ba86a284-b9e8-3ca6-857e-0d0a7496604d.roa (raw, json)
Hash identifier:          9Qkt4taZiXGcBguKv9bz7PxVEH4bMk639UI9pipxCUI=
Subject key identifier:   A1:18:BC:13:13:85:B4:5F:7B:52:05:40:32:20:1A:0F:FE:13:E2:54
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584309F453CB876F9E440E505AC0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ba86a284-b9e8-3ca6-857e-0d0a7496604d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        209.107.190.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f4:53:cb:87:6f:9e:44:0e:50:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8ef9cb62-8a57-4b57-8c2c-6c2c05b537a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d1:5d:69:62:34:ca:6d:e0:eb:1f:96:86:35:
                    c9:01:02:6b:19:fb:b6:00:d5:5c:1c:81:03:50:b0:
                    30:97:c4:7f:cd:cd:4a:80:69:73:a1:4c:0c:0a:4f:
                    9e:55:50:8b:44:09:6e:f6:53:db:1a:5b:74:f1:f1:
                    d7:a9:c7:e6:2d:63:03:6f:c9:74:44:66:87:ea:0b:
                    ad:2d:38:75:67:c7:93:9c:8c:5c:26:95:b2:0e:67:
                    44:5d:25:1b:3f:7e:16:41:9b:45:9c:24:e4:2b:0f:
                    e3:f7:e8:8d:a5:85:6a:dd:52:8e:cb:8c:56:e1:08:
                    90:b1:a8:57:a7:15:f2:91:ec:bd:33:55:ff:79:cc:
                    0c:1c:3c:5c:54:c2:f5:46:d2:35:fb:85:ee:10:c4:
                    8d:c2:1d:52:f5:8e:6a:3d:76:c8:6b:c4:9b:d4:a7:
                    79:5d:83:dc:91:1b:39:b0:03:0b:f0:3d:69:90:ad:
                    e4:0b:e6:25:8d:f4:4b:f7:24:00:08:6b:cc:ce:b6:
                    11:e1:76:d2:1b:80:54:e4:f3:f4:6e:cf:e1:3c:b9:
                    66:fc:b1:b8:51:cb:79:fb:bf:17:e0:2a:51:39:77:
                    6e:d6:dc:45:67:fa:dd:c2:67:8d:53:3d:4c:87:8f:
                    da:65:ac:9e:c0:8c:1e:ee:6b:06:a9:05:e6:e4:69:
                    05:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:18:BC:13:13:85:B4:5F:7B:52:05:40:32:20:1A:0F:FE:13:E2:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ba86a284-b9e8-3ca6-857e-0d0a7496604d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:27:6c:f3:4f:3e:72:23:5f:6f:46:2b:5f:89:0d:5b:6d:
         9d:89:6f:b5:b5:7d:26:bf:a0:60:24:a6:a7:3c:9b:aa:f9:17:
         61:07:58:dc:60:68:ba:cf:d3:ab:0f:7d:0a:3e:32:33:ae:68:
         96:97:2b:a6:1f:88:95:b6:60:c0:62:d9:21:8c:43:c9:8d:e8:
         f6:26:35:32:c4:76:d2:df:f1:3b:4b:09:7a:fe:bb:ef:9a:43:
         0e:81:4b:e1:98:17:83:89:a2:e9:9d:28:86:2b:ae:e4:70:0b:
         13:65:e5:c0:94:9e:ee:ff:87:0e:3b:77:7b:8f:05:96:e4:4d:
         f1:61:f5:39:07:b7:b3:95:74:af:72:4a:5f:01:0c:4b:8f:26:
         a7:eb:8c:b0:ed:df:7e:9f:81:60:25:53:33:ad:50:4b:12:1d:
         c3:e2:5e:17:3f:63:72:72:8d:90:a8:d8:c9:98:5b:7f:f7:c8:
         1d:5a:57:7f:99:97:e3:fd:90:8c:b0:38:5a:5f:47:18:1f:11:
         86:d1:aa:fe:86:4d:9a:88:19:a1:7f:c2:f0:47:d7:23:5e:3a:
         45:f4:61:24:3a:45:aa:f7:c4:06:4b:16:b4:64:2f:b4:ca:93:
         40:bb:36:73:ff:17:43:eb:d6:6d:26:5f:cb:b0:8d:bf:1c:9c:
         15:94:0b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----