Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/bd417d89-7a0f-3663-8b5c-ae8a3c24f00c.roa
File:                     bd417d89-7a0f-3663-8b5c-ae8a3c24f00c.roa (raw, json)
Hash identifier:          b2e0vmI475vKoHPggii7inBgHXlHGbzoWyqHzUiNWYE=
Subject key identifier:   12:0B:E3:DE:B7:3E:D0:8C:FA:78:4E:20:1E:C7:27:CA:BC:EB:53:99
Certificate issuer:       /CN=fd41a5ea-0768-429c-8541-83d829a5518c
Certificate serial:       010D0C9F43285841E46E0FD051133F41EF1E2D60
Authority key identifier: F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/bd417d89-7a0f-3663-8b5c-ae8a3c24f00c.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Mon 17 Jul 2023 13:38:44 +0000
asID:                     212513
IP address blocks:        136.175.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:0f:d0:51:13:3f:41:ef:1e:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd41a5ea-0768-429c-8541-83d829a5518c
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 17 13:38:44 2023 GMT
        Subject: CN=5a23dd51-8209-4f74-9bf5-4dcaada9b3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b5:89:c2:8f:65:88:85:51:f0:1d:b0:65:b1:
                    9e:bb:c1:1c:a2:1b:93:7a:ed:d8:6c:1e:8b:6d:aa:
                    5d:fc:0a:4c:56:d7:e8:bf:71:f3:db:71:92:a2:ce:
                    c9:dd:01:09:98:e0:6a:00:4e:19:f5:68:bd:01:63:
                    9b:ee:09:3f:0d:f2:61:e8:bc:6e:61:7d:0f:91:37:
                    69:e1:8d:aa:b7:4d:cc:67:7d:f7:6b:21:f7:9b:6f:
                    c5:aa:f0:02:de:14:25:87:07:94:6f:a3:6d:c9:a7:
                    8a:a2:5d:c3:50:34:1a:ef:07:56:32:62:4a:b8:e3:
                    d3:00:b0:8a:ee:21:9c:78:1a:8c:7f:99:98:ae:22:
                    e3:66:78:5a:13:12:2d:52:51:c3:d6:f8:cc:c9:41:
                    0d:05:6c:fb:0e:9a:92:19:fd:4b:af:4b:3d:1d:34:
                    f0:04:70:02:1e:34:81:65:94:0e:87:ff:e5:a6:ee:
                    b7:cd:18:48:6e:98:58:c6:a7:3d:69:82:c1:37:7d:
                    a6:4d:10:3e:5f:6d:2b:b7:76:15:02:37:9d:ee:b1:
                    e2:52:26:ab:af:ea:de:06:8e:ad:7f:c2:18:a7:0b:
                    b1:05:73:8e:98:65:15:29:07:aa:27:7a:5d:aa:51:
                    79:a2:88:dd:a8:f1:65:25:b4:78:e9:8a:be:a7:32:
                    98:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0B:E3:DE:B7:3E:D0:8C:FA:78:4E:20:1E:C7:27:CA:BC:EB:53:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/bd417d89-7a0f-3663-8b5c-ae8a3c24f00c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl

            X509v3 Authority Key Identifier:
                keyid:F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:e2:07:d5:22:14:22:b0:fa:65:58:87:4f:a2:67:c2:27:
         9a:63:b4:37:ae:64:c6:66:c3:ce:88:5e:52:5a:60:ae:93:ce:
         5c:a4:12:d4:6b:2d:c4:d5:ff:0c:64:a5:3e:e1:a6:28:83:7f:
         cd:60:01:a8:00:f6:e8:4b:a3:75:86:b7:30:0e:42:1c:46:40:
         ba:09:6f:36:bc:de:8c:db:b4:5c:e0:d8:32:90:37:d8:58:87:
         95:0b:b5:4a:a3:9b:65:a1:8a:4f:39:5b:07:4a:8a:d1:91:60:
         ee:26:65:22:ff:9a:2c:3d:fe:2f:64:86:ce:f7:15:b3:2c:86:
         37:94:65:d7:9e:f1:e5:b7:24:67:64:45:29:18:b7:45:ca:ba:
         0a:c8:24:10:35:b5:3b:a2:96:3f:b6:7e:c6:80:cc:24:9c:b2:
         7c:6b:75:fc:37:da:1a:0f:66:3a:c3:5d:87:1d:1d:59:fd:1a:
         a9:69:a7:bc:d4:e7:39:2c:51:7c:59:1e:3e:f4:87:8a:c0:f0:
         9a:2d:4b:9b:12:4c:2d:27:46:7c:f8:f7:25:7f:dd:8d:75:2f:
         6c:cb:9e:c2:3c:d6:bd:11:47:dc:ae:3a:39:6b:6b:f1:14:c7:
         d4:52:a0:da:78:f8:2e:47:88:88:e8:18:fe:9b:47:4b:73:4b:
         02:c0:13:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----