Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/185456c1-09e1-39c5-b2b8-1426ec503f10.roa
File:                     185456c1-09e1-39c5-b2b8-1426ec503f10.roa (raw, json)
Hash identifier:          p+Zh6rulSefSRCsxddf0e2JC7SWT0o3DhY+OwxCixWk=
Subject key identifier:   4B:21:D6:30:A1:5F:3A:EC:4D:02:9D:1D:9C:72:A2:4D:77:B0:24:83
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328584308EF1CC95415B922CC933F80
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/185456c1-09e1-39c5-b2b8-1426ec503f10.roa
Signing time:             Mon 28 Aug 2023 13:00:26 +0000
ROA not before:           Mon 28 Aug 2023 13:00:26 +0000
ROA not after:            Sun 26 Nov 2023 14:00:26 +0000
asID:                     7018
IP address blocks:        116.206.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:08:ef:1c:c9:54:15:b9:22:cc:93:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Aug 28 13:00:26 2023 GMT
            Not After : Nov 26 14:00:26 2023 GMT
        Subject: CN=e4f9f510-65b7-40c5-92d2-229547293e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:32:6e:a5:16:5e:5c:e0:9b:b0:49:05:52:
                    30:c5:65:13:ff:61:fa:20:17:f9:53:4e:14:b0:49:
                    cc:d2:3d:78:3b:83:51:d3:3c:3d:39:ac:6f:06:dc:
                    07:99:40:84:b8:cd:7b:6a:44:0e:a0:2e:74:60:cc:
                    fc:9c:29:bf:1c:5c:16:a0:28:3f:88:06:a2:6f:3a:
                    53:44:c0:8e:a0:88:22:bc:fe:0d:de:69:77:9f:62:
                    09:e5:07:c9:0c:33:ba:38:f9:53:0c:03:96:4e:b8:
                    2a:31:5d:b5:62:24:33:bf:5d:9d:91:51:96:cc:cc:
                    76:99:9e:e0:60:d2:e0:f4:86:84:e3:ef:5e:13:b3:
                    ae:9e:85:5f:04:84:dc:b5:c6:65:e4:6c:e1:48:a4:
                    08:af:24:b0:06:5e:06:46:07:6c:20:9c:62:6c:f6:
                    23:5c:e5:af:4e:a6:93:27:31:b6:4c:9a:23:0f:63:
                    d1:72:dc:fd:f5:86:69:b4:d1:43:b6:f3:b3:d0:ac:
                    42:3d:7d:7b:7e:01:a2:ac:53:4a:5e:89:ae:d8:6b:
                    96:1e:7d:98:d9:1a:ab:eb:dd:b7:f7:d3:d4:b6:3e:
                    94:cc:0c:63:08:76:2b:50:12:25:69:1f:d3:79:00:
                    ba:da:d4:62:78:f5:14:f8:33:0e:e5:15:8d:39:77:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:21:D6:30:A1:5F:3A:EC:4D:02:9D:1D:9C:72:A2:4D:77:B0:24:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/185456c1-09e1-39c5-b2b8-1426ec503f10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4c:ed:e9:f9:0e:36:ee:74:46:ec:20:41:94:6f:b3:9f:56:
         c9:38:aa:23:7b:c1:76:38:91:21:fb:97:f9:fe:37:c0:e2:6e:
         da:02:f1:29:ac:06:5d:bc:f3:aa:0e:eb:49:0f:d3:13:31:1d:
         1e:33:04:71:62:e5:d1:0b:43:96:bd:f7:22:0d:6b:bc:81:12:
         3f:fe:d2:d8:01:8d:a0:ce:d1:1d:0e:33:db:52:e0:9a:ea:c9:
         ad:76:f0:0e:48:77:c0:d7:8a:22:ab:0b:02:ba:a0:94:9b:06:
         93:ce:06:78:32:93:a6:81:39:ce:4a:c4:ca:ee:62:52:e9:7e:
         da:49:24:1d:a7:32:2b:30:6f:41:b9:a4:90:78:02:b5:e0:a2:
         2d:91:59:c5:d3:a6:3c:72:ad:3e:fe:f9:e5:3e:11:65:ce:92:
         da:f1:d6:32:7d:a9:08:74:b4:06:a2:0f:2a:c4:81:46:be:f3:
         34:a1:81:72:29:6b:5f:db:f9:af:7b:c8:1b:23:46:3f:48:3b:
         97:4e:fb:b2:cf:f8:b3:e7:9b:b9:41:72:29:2e:03:cf:8a:61:
         94:16:c0:ab:8c:fc:36:96:56:38:50:11:93:37:5a:b6:d5:7b:
         c0:79:70:e8:f4:e6:da:cc:07:c4:ed:bf:a7:b5:05:24:b9:6b:
         e1:15:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----