Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/839d807b-1cb1-30f4-bf58-4ae9d7fe90ea.roa
File:                     839d807b-1cb1-30f4-bf58-4ae9d7fe90ea.roa (raw, json)
Hash identifier:          5qRCBZxTmfUL0cnDf6IwEV7EMMoLGDiWxfaAIyRd63A=
Subject key identifier:   EF:12:33:BC:19:C3:82:E6:8F:BE:8F:C2:55:D9:05:5E:33:1D:78:6D
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F43285843F6B882CCA25725A7C42B3640
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/839d807b-1cb1-30f4-bf58-4ae9d7fe90ea.roa
Signing time:             Tue 21 Nov 2023 17:12:49 +0000
ROA not before:           Tue 21 Nov 2023 17:12:49 +0000
ROA not after:            Mon 19 Feb 2024 17:12:49 +0000
asID:                     395594
IP address blocks:        64.120.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f6:b8:82:cc:a2:57:25:a7:c4:2b:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Nov 21 17:12:49 2023 GMT
            Not After : Feb 19 17:12:49 2024 GMT
        Subject: CN=e98d1aec-cd19-4cd6-99a7-2d1ef0789f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:3f:04:81:a2:88:3c:43:7a:1b:d4:9b:5f:
                    7b:c5:2c:03:eb:94:3c:d8:b8:f8:39:f6:26:64:d1:
                    a6:8b:48:59:27:bb:2c:73:f3:5f:a5:b8:93:b5:c1:
                    46:8b:fd:a2:6b:d9:4a:6c:9e:bd:f1:44:04:83:8a:
                    f0:5c:e8:e2:00:d8:56:a1:9c:57:26:14:97:ee:ce:
                    8e:c8:66:ba:2c:00:da:1b:73:cd:4e:4a:0d:8a:3e:
                    89:d9:66:fe:0a:2d:bf:b5:3e:e4:9f:45:1e:76:61:
                    70:21:9b:60:39:a4:f7:f0:35:1f:a9:82:2e:5a:d7:
                    d2:cb:51:b0:04:76:65:b3:a2:42:26:75:ee:0d:aa:
                    e9:41:fb:88:22:c0:95:db:40:ee:64:b8:cc:1f:98:
                    5a:c1:06:e8:30:0d:ca:03:4d:93:69:8c:85:74:79:
                    fc:1a:c3:d9:73:31:05:48:ff:3f:22:55:18:4c:df:
                    ac:23:38:49:93:21:ed:b0:1f:cf:51:9d:40:d3:69:
                    21:a1:37:53:24:e8:9c:8e:55:8a:c7:d2:90:f7:24:
                    75:af:44:cc:65:2a:68:8a:af:97:c5:e0:da:ee:fe:
                    97:b6:4d:11:40:68:6d:0a:fc:a2:8d:ed:a5:c0:cf:
                    47:93:9c:9f:c4:f2:b1:a9:74:2d:08:91:46:f0:83:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:12:33:BC:19:C3:82:E6:8F:BE:8F:C2:55:D9:05:5E:33:1D:78:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/839d807b-1cb1-30f4-bf58-4ae9d7fe90ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:2a:44:41:a4:af:ff:88:de:e9:9b:e5:00:30:66:0a:1d:74:
         cc:8e:c4:73:16:64:06:6f:15:ae:e8:c7:69:5f:77:94:4f:8c:
         9a:02:66:3b:03:7a:ba:1b:6d:fb:9a:0e:0b:78:53:fb:6e:b9:
         b3:02:2a:fd:62:48:cd:ba:54:dd:ed:8c:f7:6c:ae:c3:7b:f8:
         02:42:69:29:14:f0:1a:53:fa:c8:2b:c1:74:0e:4e:0f:f7:1c:
         0b:41:26:94:53:dc:a3:0f:13:d4:63:31:b0:9f:9c:33:f9:34:
         78:3b:9f:22:3a:a2:5d:33:4f:dd:83:3a:a1:ba:4a:d0:9f:21:
         1e:17:72:21:e8:25:ed:7e:ca:be:b6:5d:10:f7:b5:31:7a:da:
         8f:ee:db:3e:b9:c3:ff:38:bc:8b:e6:2e:84:f4:7c:b9:97:78:
         90:e0:16:f7:14:c2:e0:9c:e7:f2:d8:25:76:70:75:bb:a4:56:
         a3:59:04:84:1f:d1:55:3c:23:61:a5:97:4d:dc:ab:52:19:58:
         7e:16:53:f2:e1:0a:e4:28:04:03:5a:7f:07:4a:99:ea:75:ee:
         f9:2c:80:2d:8d:ae:31:1e:5f:e4:84:f7:8c:bf:b0:18:68:ea:
         27:65:b8:3c:80:7b:72:8f:5d:12:59:29:c3:c8:da:16:dd:f7:
         d4:ae:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----