Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a525aea7-8863-3661-9bbf-e033a095f98c.roa
File:                     a525aea7-8863-3661-9bbf-e033a095f98c.roa (raw, json)
Hash identifier:          nrEBHuDBs6LqYPsoweCFFqYmEIFK24/20SY280J0vl4=
Subject key identifier:   CF:F2:46:A1:F6:0C:31:7C:61:E5:7C:75:59:D9:D8:74:22:7B:C7:9F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584752A3B53E515F0C6604DC38C1
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a525aea7-8863-3661-9bbf-e033a095f98c.roa
Signing time:             Tue 24 Sep 2024 17:46:05 +0000
ROA not before:           Tue 24 Sep 2024 17:46:05 +0000
ROA not after:            Mon 23 Dec 2024 18:46:05 +0000
asID:                     2164
IP address blocks:        192.85.59.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:52:a3:b5:3e:51:5f:0c:66:04:dc:38:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Sep 24 17:46:05 2024 GMT
            Not After : Dec 23 18:46:05 2024 GMT
        Subject: CN=a77586d6-ea6f-443e-b05b-9d77daa59260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:08:61:46:2d:cc:ea:59:6c:3c:bd:73:9e:
                    2a:b3:e6:3e:2c:32:46:bf:63:23:0d:24:ff:20:29:
                    9c:27:d0:54:1f:24:72:53:79:69:d7:90:d3:9d:64:
                    fd:96:85:aa:d1:77:80:c3:92:96:51:79:57:54:82:
                    3a:bc:4e:04:6d:89:f5:e9:3b:e8:fe:45:1a:35:b7:
                    33:82:4c:ad:e5:6f:ba:df:e2:d5:21:82:3f:33:63:
                    34:3c:1e:17:8c:01:ea:a9:11:b6:be:e0:05:83:d2:
                    c4:ae:2b:94:56:83:76:79:92:a4:e6:1d:ae:4b:dd:
                    0e:0e:b9:9b:52:7b:f2:88:15:9d:f8:0c:89:46:19:
                    b0:35:20:69:05:07:25:bb:51:17:1b:7b:cc:ca:70:
                    68:bb:b8:58:f0:6d:b3:b2:7f:f8:89:1e:17:e8:46:
                    b3:bf:63:39:b9:99:0e:9f:34:1a:be:88:24:4a:92:
                    d4:ab:96:de:d5:12:a3:b1:33:a2:32:3a:00:ec:0d:
                    22:de:91:b6:75:cd:a0:9d:0e:13:09:44:89:81:e6:
                    f6:40:13:6e:49:45:2a:c8:db:14:44:33:75:d6:cc:
                    14:f9:0e:d3:03:bb:2f:fd:5c:98:66:9b:de:80:ef:
                    07:cb:f4:19:67:2a:17:76:22:0f:3a:44:a8:80:a0:
                    17:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F2:46:A1:F6:0C:31:7C:61:E5:7C:75:59:D9:D8:74:22:7B:C7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a525aea7-8863-3661-9bbf-e033a095f98c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:01:50:cc:af:38:a0:f2:60:bb:13:77:ed:71:da:cc:63:1e:
         52:55:05:e9:75:10:29:69:99:8c:6c:21:28:2e:da:f2:e8:56:
         f2:87:a6:c2:fd:02:15:ea:b2:0f:cb:a8:74:62:7f:0a:2a:cc:
         79:3c:58:0a:34:74:ee:d5:74:46:fb:61:51:35:5d:a5:7e:73:
         70:d3:02:c3:4a:b5:fc:32:82:3d:db:0f:e1:95:84:1e:a3:d8:
         49:68:13:88:ab:80:96:6c:9e:ed:a9:fe:da:ec:71:14:62:49:
         99:03:22:d0:29:41:38:1f:1c:e8:2a:0f:bf:e0:6e:0b:96:88:
         6e:a6:c1:e7:ad:45:11:35:99:17:5b:1f:0b:75:76:53:e1:3f:
         0d:80:05:ec:7f:b0:62:08:6f:a8:f8:12:b0:13:c2:07:5b:68:
         b2:4e:ec:9c:06:10:13:59:be:b8:a9:f5:76:85:37:db:1f:52:
         98:44:61:b2:b9:10:83:24:19:0f:5d:f0:68:12:02:dd:fb:1d:
         32:f2:9c:2e:7a:9f:82:3c:0c:d5:1f:8d:98:63:20:56:2a:4a:
         79:74:c6:72:87:ed:f5:d4:f8:7f:ca:c4:d7:62:51:1c:1e:5c:
         8c:de:3f:be:54:f1:29:8e:42:c5:81:d0:d6:f6:c7:19:b3:c2:
         9d:18:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----