Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/c5426426-0d0b-346b-8c40-e231ac4e4d7e.roa
File:                     c5426426-0d0b-346b-8c40-e231ac4e4d7e.roa (raw, json)
Hash identifier:          SFQIqkjcIYhJd0LwGrA41CcbcYxJC4hAVWUwMNWoKn0=
Subject key identifier:   63:D5:E3:BC:34:CA:34:56:D1:92:F9:E3:4B:7E:4C:79:29:F4:A6:D6
Certificate issuer:       /CN=a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2
Certificate serial:       010D0C9F43285844447AF8BF63B77ABF12A81380
Authority key identifier: 99:EB:BB:7C:51:64:A0:B3:0F:3E:1B:08:53:94:79:52:DD:C5:AE:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/c5426426-0d0b-346b-8c40-e231ac4e4d7e.roa
Signing time:             Tue 19 Dec 2023 13:41:53 +0000
ROA not before:           Tue 19 Dec 2023 13:41:53 +0000
ROA not after:            Mon 18 Mar 2024 12:41:53 +0000
asID:                     393577
IP address blocks:        23.168.24.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:44:7a:f8:bf:63:b7:7a:bf:12:a8:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2
        Validity
            Not Before: Dec 19 13:41:53 2023 GMT
            Not After : Mar 18 12:41:53 2024 GMT
        Subject: CN=82db047b-165b-4821-8378-0b00a7cb338a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:fd:78:97:10:2d:34:fa:50:70:a4:21:10:
                    a2:f5:dd:08:ad:88:02:62:1b:40:52:09:93:0d:a5:
                    17:c8:c0:b9:72:8a:31:4a:24:ad:77:ad:10:22:04:
                    cf:dc:af:b1:8e:98:c8:25:d2:f9:04:76:16:78:80:
                    8d:b6:29:13:df:26:18:58:c4:25:70:10:35:8d:ad:
                    aa:30:dc:ef:43:c8:b8:71:d8:01:0c:8b:7b:57:5a:
                    f5:0c:58:2b:22:bc:fa:4e:98:0f:ac:67:8e:e6:2d:
                    02:38:01:b3:8c:43:6c:b8:b2:96:dd:8c:fd:64:79:
                    7f:73:67:ad:40:42:28:4d:40:23:5b:4a:5e:3a:d5:
                    a1:3f:b1:38:6b:79:0d:63:63:e9:d3:38:f7:5c:a4:
                    02:24:3e:7a:c3:bc:7b:ff:4b:56:cf:d5:ea:20:79:
                    ab:da:47:87:b6:4c:32:7c:ea:9b:b0:4e:35:fb:b7:
                    28:5e:51:0b:e4:6d:5e:58:46:d9:37:fa:fd:23:c8:
                    26:5d:51:c4:0d:b5:81:de:11:81:6e:c6:ad:ba:01:
                    75:1f:9d:d1:9b:55:5b:92:01:c8:e5:a1:da:84:e3:
                    8a:15:8d:dc:9d:eb:ea:4c:9e:ef:bf:40:64:dd:34:
                    10:41:db:65:55:0b:a9:b9:99:65:7a:e9:85:1e:17:
                    88:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D5:E3:BC:34:CA:34:56:D1:92:F9:E3:4B:7E:4C:79:29:F4:A6:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/c5426426-0d0b-346b-8c40-e231ac4e4d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2.crl

            X509v3 Authority Key Identifier:
                keyid:99:EB:BB:7C:51:64:A0:B3:0F:3E:1B:08:53:94:79:52:DD:C5:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a7d74fe2-e7b8-473e-b5f5-d1a259ed15a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:ef:ca:f7:ae:19:79:68:d8:45:5c:74:5c:ab:68:b9:0f:ae:
         b9:56:94:86:ce:be:2c:3f:c5:1a:eb:e8:0a:32:84:ec:2f:25:
         fd:b9:da:42:68:3d:43:75:4a:de:f3:63:d0:0b:cd:f3:fd:91:
         77:35:a3:7f:60:8d:bd:8e:92:56:a1:22:7d:59:e0:77:b6:df:
         d6:ab:31:80:70:9d:b0:01:34:eb:70:59:fe:5d:b2:8a:ff:cf:
         76:16:6e:5f:4b:2f:f4:53:16:3b:7c:0c:1d:2b:77:ec:84:21:
         e5:e9:20:fc:a1:33:74:be:64:d4:90:e0:d8:cb:dc:96:cd:f8:
         0c:2b:ed:8d:20:67:80:91:f3:8f:69:1c:f5:9d:75:72:21:6b:
         fa:a5:b3:d8:51:7f:ce:f8:bc:62:ed:60:6a:43:97:7e:e1:6d:
         60:d5:ae:dc:fc:f7:3b:07:22:75:96:9b:f5:a2:12:ab:a6:5d:
         55:90:95:4e:ab:df:8c:d1:5d:47:d8:c7:c7:8c:20:ac:a4:6c:
         3a:88:24:71:00:45:cf:f8:24:13:36:e6:87:41:4d:79:cc:4c:
         37:40:79:f9:78:6a:fc:55:9b:be:34:7a:ce:23:7f:4a:fc:f7:
         57:a2:6e:ff:5f:e2:f2:81:47:6c:11:fe:2b:7c:0b:77:b8:18:
         0e:8a:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----