Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/3c6c8b1e-07bc-3301-8591-2899956913d6.roa
File:                     3c6c8b1e-07bc-3301-8591-2899956913d6.roa (raw, json)
Hash identifier:          Qgnmow57YVB1KYF5rnvU9IzvMhGudWbn6AGCvAuxi6U=
Subject key identifier:   1C:AE:CB:18:55:29:02:03:72:AA:B1:9F:CA:B2:37:16:1A:86:95:17
Certificate issuer:       /CN=77836eaa-7214-4a69-8b5a-41b55d93e689
Certificate serial:       010D0C9F4328584398E7C66A704D85A59F532600
Authority key identifier: 33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/3c6c8b1e-07bc-3301-8591-2899956913d6.roa
Signing time:             Thu 19 Oct 2023 02:42:04 +0000
ROA not before:           Thu 19 Oct 2023 02:42:04 +0000
ROA not after:            Wed 17 Jan 2024 03:42:04 +0000
asID:                     2707
IP address blocks:        168.92.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:98:e7:c6:6a:70:4d:85:a5:9f:53:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77836eaa-7214-4a69-8b5a-41b55d93e689
        Validity
            Not Before: Oct 19 02:42:04 2023 GMT
            Not After : Jan 17 03:42:04 2024 GMT
        Subject: CN=fe950942-4472-45a0-b75e-a964a63b8512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:69:45:4b:4f:30:aa:34:24:60:d5:68:dc:
                    c5:19:04:33:45:03:e9:0e:ff:b5:f5:32:56:12:23:
                    e9:cb:82:9d:ac:36:b2:42:f6:7f:19:1c:c7:ce:68:
                    f6:0b:8a:f7:61:ea:8a:ab:52:d5:aa:dc:a5:20:ba:
                    c6:4f:2f:17:95:80:c9:c6:f8:3d:89:be:23:3f:7f:
                    ed:b7:7b:f4:00:10:d8:f0:fd:07:c3:dc:31:d8:bc:
                    f6:7a:3a:01:e1:fd:f8:49:5f:4f:b7:62:9d:8b:b6:
                    d5:f2:83:2b:22:b4:24:18:20:6f:95:b9:d8:47:33:
                    07:be:95:ee:19:5a:b5:d8:55:a5:db:35:f5:67:ab:
                    ac:8f:6e:8d:d6:8d:59:62:a4:62:8f:72:b9:a0:76:
                    61:bf:f7:d9:bc:db:ed:d0:79:f4:80:23:9f:53:b5:
                    7f:d7:3c:aa:3b:00:cf:54:d7:b9:b6:79:1c:db:42:
                    f5:13:7b:46:4d:30:98:36:50:5c:ca:40:7f:ca:b7:
                    fc:6d:62:bf:22:27:3c:ba:13:c9:ec:76:af:4a:b2:
                    b7:e8:09:ef:c2:aa:d0:41:24:e3:27:26:74:fb:f8:
                    86:8f:11:26:7e:be:4c:6a:59:85:d4:f8:c2:33:f5:
                    fa:5d:8f:e5:ce:d4:e4:b8:cf:2f:0b:08:8d:c8:e7:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AE:CB:18:55:29:02:03:72:AA:B1:9F:CA:B2:37:16:1A:86:95:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/3c6c8b1e-07bc-3301-8591-2899956913d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/77836eaa-7214-4a69-8b5a-41b55d93e689.crl

            X509v3 Authority Key Identifier:
                keyid:33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.92.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:f5:dd:df:71:b4:84:f9:7f:21:e8:6b:f0:ad:db:20:30:25:
         85:ed:31:00:6b:6d:fa:4f:7f:45:da:12:f5:d9:fc:7c:46:26:
         ed:28:dd:b4:4f:2e:3b:86:ce:04:d7:25:60:48:50:d5:7d:81:
         9a:4e:42:a6:15:47:e7:ad:76:fb:2c:5a:6d:75:ed:a1:44:56:
         f0:6d:25:7f:a2:be:2a:6d:cd:e7:cf:fd:49:0f:82:22:5c:f9:
         cb:90:65:9f:f0:b4:1d:f0:4e:7f:9a:45:f7:72:98:2b:96:f8:
         b6:c0:3e:3a:25:0c:73:5c:3c:15:b5:1b:a2:8a:7f:cb:fb:57:
         2b:2a:ff:40:57:15:23:12:ef:3c:5d:4e:d7:09:29:1d:8b:d9:
         c9:15:6e:18:a6:d4:50:8d:f8:ef:74:41:4e:f2:c8:8c:42:5c:
         71:8a:5a:e7:57:5f:ad:c0:12:54:00:f9:0b:65:46:27:28:40:
         dd:11:10:b7:91:f1:a4:16:46:cc:db:13:ac:90:71:27:11:ad:
         84:cb:c5:f7:c3:c4:6c:b9:b2:1d:84:15:7e:47:b2:bc:a6:56:
         b0:0d:5d:f2:95:2f:d1:91:78:b6:2e:eb:09:60:da:80:c7:34:
         97:8c:1e:b8:b2:e8:ae:38:c2:d6:a9:c1:04:6b:58:05:0e:cc:
         35:12:e3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----