Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/775fc2d4-dc23-38ff-b3eb-5e33d3659661.roa
File:                     775fc2d4-dc23-38ff-b3eb-5e33d3659661.roa (raw, json)
Hash identifier:          wYYTeesopuXUjFWe0pWiV61YRFuSF0k+Z7gdLgKqV2o=
Subject key identifier:   27:60:CF:E4:7E:6C:19:70:D7:AE:C9:65:52:E5:EB:C1:85:70:78:29
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328583E01309AE1E947661319CA2080
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/775fc2d4-dc23-38ff-b3eb-5e33d3659661.roa
Signing time:             Mon 23 May 2022 12:00:00 +0000
ROA not before:           Mon 23 May 2022 12:00:00 +0000
ROA not after:            Wed 24 Aug 2022 04:00:00 +0000
asID:                     205220
IP address blocks:        45.123.144.0/24 maxlen: 24
                          45.123.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:01:30:9a:e1:e9:47:66:13:19:ca:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: May 23 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2022 GMT
        Subject: CN=19cd40d0-6234-4347-aca2-d1ade8cf5b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:92:d3:91:69:6e:0b:d3:2a:ef:1a:08:e8:2c:
                    41:6e:bb:95:d5:af:37:58:3b:28:5a:5c:f5:3e:3d:
                    65:0d:32:40:4e:a3:d3:b1:dd:8c:c7:24:b4:7d:7a:
                    b8:c3:8c:bd:8e:d2:e0:bc:51:9c:8a:bf:ce:57:a2:
                    00:34:bd:ff:20:02:36:19:d3:98:45:2e:83:81:40:
                    ef:aa:47:50:03:41:7d:b7:44:b5:bc:4e:b2:07:01:
                    bb:c4:fd:f4:fc:5d:8f:d4:41:78:12:f2:da:c6:39:
                    7b:f8:7e:d1:7d:c8:d3:c8:ff:e0:fd:63:f3:46:b6:
                    37:f6:b0:b0:f2:d2:79:0b:c7:6c:12:f1:c5:b4:88:
                    6b:c9:83:25:87:83:01:c9:17:74:dd:8d:fe:a8:0a:
                    94:8a:8f:8f:ba:ec:7c:26:fb:64:e6:05:ee:5b:67:
                    d3:f1:19:ec:6f:5b:f2:77:bf:f2:ed:8c:ca:0f:fe:
                    88:81:ef:98:e0:8f:a4:ef:af:39:0e:27:70:91:e2:
                    7c:39:42:e2:c3:d6:bb:a3:1b:fe:b8:74:ef:26:09:
                    c3:ca:77:a1:45:ed:60:d3:9a:e2:cc:ab:c7:01:a4:
                    8d:88:ff:66:87:ab:fa:fb:2d:53:67:d6:14:99:30:
                    07:72:b5:cb:e7:61:1b:76:97:c9:be:11:70:31:dd:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:60:CF:E4:7E:6C:19:70:D7:AE:C9:65:52:E5:EB:C1:85:70:78:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/775fc2d4-dc23-38ff-b3eb-5e33d3659661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.144.0/24
                  45.123.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:55:8e:df:6e:e2:e5:c1:11:b8:e3:80:c5:75:a7:d5:c5:5b:
         c6:23:b0:55:dd:f0:4a:d3:f0:3a:6c:d7:87:df:ef:78:da:39:
         fd:21:48:d9:0d:d7:30:6b:9f:01:59:c7:9b:06:d9:c9:29:38:
         89:ad:ff:18:93:0e:2f:11:c3:b4:2e:53:56:9c:81:f7:bb:2d:
         3f:53:a1:9b:a9:52:5e:6c:f7:94:96:e2:47:c8:06:b6:84:84:
         e5:dc:25:18:f8:b0:08:48:c5:1c:86:67:c8:e8:db:ea:09:8f:
         05:c8:fb:3b:c6:8a:fe:4b:38:fd:f8:f3:13:eb:86:da:dc:d2:
         18:30:60:4e:76:45:01:33:3c:1b:af:7f:21:bd:1a:40:8e:88:
         02:2d:40:c8:48:11:25:5d:93:e2:b9:05:1f:46:c2:33:26:61:
         29:ed:12:6d:e9:90:3a:40:c0:fe:26:a9:17:dc:1d:e0:09:8a:
         21:92:15:1d:98:cb:67:14:73:b2:ef:35:97:20:d7:82:44:95:
         0b:d3:51:36:bc:6b:c6:8f:1f:c3:60:f2:54:e2:6f:c3:da:d2:
         5c:65:17:bf:be:51:62:bc:1d:3b:73:76:19:5e:45:95:b5:19:
         2d:13:a1:7c:0a:61:e9:18:cb:ed:c8:27:f3:fc:c8:62:3c:80:
         40:f2:9e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----