Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/e48be980-666b-34c6-8842-80aa0d223f33.roa
File:                     e48be980-666b-34c6-8842-80aa0d223f33.roa (raw, json)
Hash identifier:          4yifFV5yiVmhQN0eMQcf43Tgl0SdolEB6Ut0JIqEi5s=
Subject key identifier:   F6:CE:77:F4:08:2B:69:5D:7A:2C:76:35:24:4C:40:1F:07:CB:E0:85
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F43285843FBF7F47E4C04B773A4BFE680
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/e48be980-666b-34c6-8842-80aa0d223f33.roa
Signing time:             Thu 23 Nov 2023 14:19:42 +0000
ROA not before:           Thu 23 Nov 2023 14:19:42 +0000
ROA not after:            Wed 21 Feb 2024 14:19:42 +0000
asID:                     3209
IP address blocks:        47.70.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fb:f7:f4:7e:4c:04:b7:73:a4:bf:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Nov 23 14:19:42 2023 GMT
            Not After : Feb 21 14:19:42 2024 GMT
        Subject: CN=4a54b8ae-0998-4395-94d5-8868dc4adddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:9f:2d:55:c1:08:9f:7d:dc:43:05:a0:10:
                    2c:9b:91:fe:50:64:e1:0c:87:e6:76:bd:2e:ae:70:
                    67:88:bc:85:f5:a0:1b:1f:36:b2:ba:a8:71:7b:5b:
                    5c:4e:76:ed:8f:1c:a1:f5:c5:8e:62:0f:77:4d:56:
                    17:cc:5f:e7:dd:4c:02:7c:8a:8a:cd:f1:9c:ce:2a:
                    8c:6f:e1:0f:7f:31:94:c7:b6:d0:8f:cb:b7:b9:11:
                    38:e9:ae:05:8b:f6:3f:41:f3:d7:10:e0:1a:c5:8f:
                    ed:58:53:41:55:9f:16:b2:3a:d2:48:45:fc:4d:44:
                    30:c7:a2:37:ac:c6:70:e3:3a:fe:42:27:72:62:ba:
                    45:d9:eb:62:d9:6a:b4:1d:59:83:54:f2:27:11:27:
                    65:6b:d2:05:8b:4a:25:20:58:4a:9b:25:aa:08:56:
                    e0:e0:1d:61:ff:91:59:0e:9f:8d:27:c9:3f:60:68:
                    48:47:38:3a:13:14:c0:06:9c:9e:de:97:81:7e:b6:
                    c9:e6:7f:05:d1:1c:10:73:c9:73:a4:2e:3c:4c:4b:
                    7b:1e:f5:34:ca:64:f4:36:46:f0:d3:ad:e1:b5:12:
                    1f:5c:a8:bf:42:86:78:2e:71:4c:59:4c:57:b7:95:
                    aa:30:99:3d:ad:15:13:77:a6:1f:b8:19:cc:1f:41:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CE:77:F4:08:2B:69:5D:7A:2C:76:35:24:4C:40:1F:07:CB:E0:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/e48be980-666b-34c6-8842-80aa0d223f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.70.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:f0:08:95:cf:6b:0d:49:77:ea:9e:b9:a4:88:84:43:ef:
         6d:e9:48:ed:72:67:4e:e8:9b:3d:39:76:39:e2:08:7f:b9:00:
         3b:95:16:c7:7e:91:d1:93:d0:50:77:17:fe:b0:dc:72:ee:e5:
         f6:b7:a5:c6:e9:2a:8a:37:f6:2e:f3:1b:58:3e:d3:c3:ca:fa:
         aa:c3:15:cd:6d:ba:20:d1:6d:bf:f9:7b:86:89:80:6a:87:b7:
         3d:62:20:e9:96:20:d2:3e:8e:00:75:94:b9:10:b9:53:fb:5b:
         1f:52:b3:a2:6b:c3:17:eb:87:3e:63:e5:61:77:5e:e7:d3:4c:
         d2:79:90:6c:1d:8b:e6:9b:5b:ee:f5:b6:cd:11:e5:d2:9a:c8:
         92:81:d2:e5:bd:82:cd:76:30:fa:ba:e2:e8:49:cd:b7:b4:49:
         c5:a0:f2:c8:c2:9b:3e:4a:1a:f7:6f:0f:b0:93:4d:18:4c:d9:
         5d:ed:88:24:6c:a2:b0:a9:cd:53:58:3b:8d:91:51:0d:a5:fa:
         8a:5d:ce:bb:71:64:12:f8:67:38:de:85:cb:f8:0c:96:6d:c9:
         9b:9b:aa:51:31:af:46:5d:c5:ad:ee:52:57:f9:61:a3:f7:b7:
         9d:1c:00:2f:a1:c8:34:42:c7:fa:63:b9:5f:17:58:42:9b:06:
         24:2f:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----