Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/e4125225-f00b-3bbe-b351-f6bcbdeb52cf.roa
File:                     e4125225-f00b-3bbe-b351-f6bcbdeb52cf.roa (raw, json)
Hash identifier:          vqa4eYRb8BDsC98wyjDwayzIfPgUEG6eu8ey7wLs/HA=
Subject key identifier:   D7:7A:E1:3B:C4:1A:5A:1D:E9:91:93:DC:58:26:3F:60:90:2C:A4:1C
Certificate issuer:       /CN=7116114d-1634-456d-8393-b81a373b3490
Certificate serial:       010D0C9F43285844AA6A29C932DBE4130B00B740
Authority key identifier: 69:65:50:08:ED:E5:B1:1F:46:7D:3E:D2:21:26:5F:E9:19:53:63:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/e4125225-f00b-3bbe-b351-f6bcbdeb52cf.roa
Signing time:             Thu 25 Jan 2024 02:00:24 +0000
ROA not before:           Thu 25 Jan 2024 02:00:24 +0000
ROA not after:            Wed 24 Apr 2024 01:00:24 +0000
asID:                     36369
IP address blocks:        104.224.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:aa:6a:29:c9:32:db:e4:13:0b:00:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7116114d-1634-456d-8393-b81a373b3490
        Validity
            Not Before: Jan 25 02:00:24 2024 GMT
            Not After : Apr 24 01:00:24 2024 GMT
        Subject: CN=d3f69d97-53a6-49dc-a035-d01611104537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:15:c4:66:8f:20:65:33:ea:5d:fa:52:af:8a:
                    13:f3:79:fd:9b:d0:3e:7e:14:17:ba:ef:eb:7e:f7:
                    68:6b:8a:e8:b3:cb:d5:63:00:0f:0e:7a:08:b5:c1:
                    33:bf:54:09:59:40:36:61:57:17:89:c2:a8:93:5e:
                    09:eb:47:1a:1c:73:82:9c:6a:48:c5:ef:6a:b0:31:
                    8e:36:79:b4:3f:a1:32:98:6d:29:7f:c8:77:7c:04:
                    3d:c9:c9:ab:d0:48:f6:6e:85:34:c1:e1:e4:29:0b:
                    3f:12:64:77:af:e4:93:2a:99:0b:69:45:e7:d4:0a:
                    7b:f9:0f:80:4e:ca:ac:a3:ad:81:81:5e:ce:c2:27:
                    ad:31:a8:d4:7a:57:5d:21:02:bc:1e:ec:17:c9:b4:
                    b2:40:df:09:13:f4:48:01:98:52:f9:39:7a:e4:6b:
                    d5:c6:5c:8e:f3:4a:0e:be:2a:fd:f8:b0:24:b8:99:
                    a8:8d:98:ed:c5:d8:b3:27:e7:05:34:01:c2:ea:4c:
                    dc:c3:0d:b0:b1:b3:86:13:0a:0b:f3:57:b9:74:13:
                    2d:3f:b9:8b:6a:4e:e1:69:f0:07:6f:cc:af:2b:e6:
                    03:ac:6c:78:ba:89:74:3f:fa:b4:c8:d3:fc:24:bd:
                    38:c9:3a:17:3c:4c:d4:c1:ae:39:99:cd:b3:d8:4b:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:7A:E1:3B:C4:1A:5A:1D:E9:91:93:DC:58:26:3F:60:90:2C:A4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/e4125225-f00b-3bbe-b351-f6bcbdeb52cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490/7116114d-1634-456d-8393-b81a373b3490.crl

            X509v3 Authority Key Identifier:
                keyid:69:65:50:08:ED:E5:B1:1F:46:7D:3E:D2:21:26:5F:E9:19:53:63:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7116114d-1634-456d-8393-b81a373b3490.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a3:e1:b7:1b:2d:27:27:25:c2:29:f5:02:68:72:89:c2:6f:
         58:2e:96:35:41:d8:bb:64:3f:cb:b9:ac:63:31:d3:81:29:8b:
         a5:88:47:e9:98:5d:2a:c4:91:e5:e0:2f:c3:a4:58:3a:d7:63:
         86:9f:c0:6f:90:31:34:d1:c2:36:a6:15:2e:cd:6b:da:e7:3b:
         4c:2e:2c:b8:ce:ab:cd:88:5e:bd:d8:9e:98:88:3c:f0:c9:c5:
         f6:ad:7d:0f:91:c3:ff:b5:52:71:ad:8d:03:91:e4:e2:18:3d:
         86:03:7d:ab:b5:35:e8:20:43:ff:4e:a5:89:76:44:f0:bf:56:
         f7:4e:ef:5d:0f:7e:a1:dc:f6:c1:0f:f7:fc:e4:d1:83:eb:cb:
         0d:30:ff:0a:93:c2:f3:aa:11:d1:b7:31:f7:bf:4f:61:83:c8:
         2b:46:e3:f6:4c:b4:da:4c:82:09:9a:0d:bc:ec:5c:1f:c2:ca:
         bf:f2:3c:55:30:94:4b:01:89:85:0f:21:83:21:d5:35:62:90:
         07:7d:62:7b:ed:b9:97:bb:87:79:6b:c8:1e:09:1f:96:7d:e2:
         ec:09:f3:c5:f1:16:14:e3:97:f6:6f:0b:1e:54:61:30:54:3e:
         48:99:5b:62:49:fe:93:ed:d0:c7:9a:7d:3e:7e:bd:a7:5c:a5:
         37:7b:b3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----