Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/cb55b65e-9f0d-34ea-93ce-70ac3a2fc205.roa
File:                     cb55b65e-9f0d-34ea-93ce-70ac3a2fc205.roa (raw, json)
Hash identifier:          sfeQqxxumvlaaDXX4NYNP44S57cPFQCxHIYm2k6fVHI=
Subject key identifier:   35:CB:1D:BD:C1:55:FE:67:8A:F9:C2:70:7E:DF:4F:8C:64:1C:4D:92
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F43285842F7B9EFA405A6E8D4C43E5000
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/cb55b65e-9f0d-34ea-93ce-70ac3a2fc205.roa
Signing time:             Tue 22 Aug 2023 09:04:34 +0000
ROA not before:           Tue 22 Aug 2023 09:04:34 +0000
ROA not after:            Mon 20 Nov 2023 10:04:34 +0000
asID:                     207551
IP address blocks:        199.119.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f7:b9:ef:a4:05:a6:e8:d4:c4:3e:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Aug 22 09:04:34 2023 GMT
            Not After : Nov 20 10:04:34 2023 GMT
        Subject: CN=73a076cc-d78f-4106-a450-5aa9e3f7247f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c0:0a:6c:3f:2e:14:1f:29:71:94:83:ba:d0:
                    a8:54:ed:32:82:6d:b9:bf:60:63:97:9d:2b:9f:72:
                    45:28:13:a4:e4:08:d6:04:a7:0b:ec:40:cd:be:3f:
                    da:59:56:43:9d:2f:c4:0e:13:4b:9f:34:f3:6b:6d:
                    12:e9:bd:0e:7a:b4:19:19:88:36:0c:41:f7:82:eb:
                    3b:60:d7:bd:f9:2b:e7:e6:9c:54:b2:25:9d:ee:7c:
                    5e:db:54:09:70:a6:8a:79:f7:93:9a:9d:70:f0:39:
                    38:92:88:2f:cd:05:59:05:9d:b3:cf:0c:6e:96:97:
                    1f:3f:20:1f:35:3f:a5:10:88:d1:fc:8e:2b:51:68:
                    35:7c:10:dd:36:98:5f:f5:d3:3b:3b:68:1e:58:49:
                    e9:f1:87:c8:34:d8:d7:2a:97:0d:67:a1:db:e0:7c:
                    a2:27:c7:bb:a0:94:2a:db:7d:69:56:13:1b:34:03:
                    34:e9:62:71:c3:92:4b:91:27:1e:07:0e:5c:34:bb:
                    02:46:7a:4e:a9:a9:7c:d1:ee:5b:5b:63:72:e3:5a:
                    3a:ad:3e:f1:43:5c:47:0b:2e:82:ff:37:70:5b:6d:
                    0f:ac:39:9b:66:2c:7c:13:56:ca:79:48:b2:db:dd:
                    37:13:eb:f0:3f:a3:89:2a:47:9d:d0:b2:a7:03:dc:
                    ab:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CB:1D:BD:C1:55:FE:67:8A:F9:C2:70:7E:DF:4F:8C:64:1C:4D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/cb55b65e-9f0d-34ea-93ce-70ac3a2fc205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:fb:a8:72:ff:ef:10:f7:0c:d6:9a:57:29:d7:2d:f7:a7:ad:
         6e:a4:cb:85:07:ca:26:76:85:c4:59:bc:ce:47:8c:a4:65:3b:
         72:0c:ff:4e:1b:ab:49:c4:eb:04:09:66:ea:26:cb:b0:10:cd:
         49:dc:01:6d:34:57:af:6b:eb:45:b0:c1:67:41:61:16:ab:90:
         01:fa:ec:7a:c3:02:35:2b:4e:32:3b:9c:79:e8:7d:66:8f:56:
         8d:f3:0d:a1:ab:67:ed:83:31:c0:00:fd:6a:b2:3d:47:ec:40:
         7b:43:ef:cd:bb:b8:54:09:a4:3a:98:25:18:19:b5:3b:17:1f:
         bf:2d:60:cd:1b:c2:5a:55:40:a8:8d:b2:a7:8d:41:e1:2b:39:
         7e:bc:68:36:a1:97:e6:27:29:94:41:3f:5b:82:2d:04:b4:b4:
         68:38:c6:76:73:86:17:ab:46:d7:ca:58:d6:e5:b9:5b:c5:13:
         a4:1f:f8:4d:c3:13:94:4f:50:46:b0:1f:b2:b7:9a:55:4b:58:
         64:f1:2b:cd:19:03:3b:10:5f:25:a8:b9:d6:c3:bf:18:f3:e2:
         28:8b:53:08:17:40:73:8e:62:22:0e:ef:e4:8a:1b:af:58:fc:
         73:64:ab:b9:46:c5:cf:bc:c3:9b:8b:c6:55:46:17:2a:59:c7:
         f9:30:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----