Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9cad73e6-bd14-3a72-a234-f3f4dae2d869.roa
File:                     9cad73e6-bd14-3a72-a234-f3f4dae2d869.roa (raw, json)
Hash identifier:          qywzQRhttJQluSiX7qPIQ5/HZ/u3eTT8GPPIGQ7swak=
Subject key identifier:   EF:5E:44:05:C6:66:04:94:B7:D2:67:5E:24:0B:49:C8:4F:E7:D6:94
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285843E0CFA4F67DF0C10C7DDFE680
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9cad73e6-bd14-3a72-a234-f3f4dae2d869.roa
Signing time:             Mon 13 Nov 2023 20:51:39 +0000
ROA not before:           Mon 13 Nov 2023 20:51:39 +0000
ROA not after:            Sun 11 Feb 2024 20:51:39 +0000
asID:                     271
IP address blocks:        128.189.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e0:cf:a4:f6:7d:f0:c1:0c:7d:df:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Nov 13 20:51:39 2023 GMT
            Not After : Feb 11 20:51:39 2024 GMT
        Subject: CN=bf13de0d-d0c1-422d-b75e-50a683ea9e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:9b:c4:f7:bd:40:8e:76:8b:ae:6e:a8:d8:
                    cc:16:17:4b:a4:7e:cb:54:f9:9b:e8:e1:8b:79:c8:
                    4b:d3:e6:4f:55:2e:20:f0:97:e0:a0:40:3e:f4:9e:
                    52:52:32:f9:17:cc:9a:68:7c:88:84:dc:be:b7:30:
                    05:82:9e:bc:bd:4f:96:1f:57:04:5b:20:d6:44:b8:
                    dd:88:3e:65:43:21:15:ec:21:b1:d1:97:9a:b7:03:
                    a6:f5:12:2f:ea:38:f7:65:fe:7d:74:58:60:1c:69:
                    a3:77:66:6d:49:04:97:4e:15:8d:37:10:99:be:e0:
                    c4:57:a0:e0:e2:8c:36:c8:92:a6:b0:f0:e7:e2:32:
                    cb:24:80:c0:82:42:1a:60:3f:a4:7d:90:3f:b3:1d:
                    52:a1:92:a9:ec:2e:23:1a:82:73:e7:17:a1:14:38:
                    e2:29:05:8a:2c:c0:42:c5:13:22:5b:0d:4d:04:ad:
                    f9:07:82:eb:46:bf:08:01:47:92:12:08:5d:04:43:
                    4c:cd:67:e5:f7:2e:85:ba:e5:da:67:92:ea:ea:fa:
                    17:78:f3:62:5f:3a:09:c1:ea:23:20:72:55:49:1c:
                    37:65:5e:d8:45:7e:8c:a9:33:f9:95:09:d7:81:c3:
                    02:b1:d0:2d:40:65:26:2f:da:86:43:69:ab:ff:2b:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5E:44:05:C6:66:04:94:B7:D2:67:5E:24:0B:49:C8:4F:E7:D6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9cad73e6-bd14-3a72-a234-f3f4dae2d869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:4b:59:78:9a:78:f2:c9:10:df:6d:c6:b3:35:40:8f:13:5f:
         aa:02:49:66:fb:f2:8a:2e:8b:68:70:77:ca:dc:9e:dd:39:ec:
         c6:76:8f:51:8a:0c:07:e3:86:bd:53:0e:11:f7:6d:fa:1f:07:
         f0:71:4a:45:6e:4a:f1:7b:aa:cc:be:4c:68:58:d4:46:3b:30:
         fa:a1:9a:11:a3:95:44:aa:f5:6b:1b:3d:88:6f:64:01:9d:32:
         7e:81:1b:97:93:ac:dd:cd:d6:db:1e:a4:13:21:44:18:15:b0:
         c8:ea:d7:89:8d:df:c5:62:05:d8:ac:e1:ce:4b:58:79:06:c7:
         b1:6a:49:7e:02:fc:3d:8f:e9:81:ff:f6:39:b3:4c:61:a0:6e:
         cd:5e:16:9f:2a:b9:29:27:4b:d7:0a:41:03:37:8b:e8:0f:13:
         3c:34:8d:ec:87:b9:03:3a:1f:28:f1:29:18:ad:30:82:08:39:
         57:27:99:df:53:95:79:8f:bd:f4:8c:6c:38:53:61:9f:12:17:
         97:a7:cf:71:d4:8f:da:5c:be:86:b1:ce:b1:bc:c6:2d:cd:f6:
         eb:82:df:15:04:b2:93:02:ea:7a:42:40:5e:c4:88:1b:2f:4f:
         c8:b6:a5:ed:81:b1:28:60:33:0b:1d:8e:06:d7:ce:1c:08:ed:
         d8:f7:73:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----