Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/582fbdd9-4225-38a7-bbb4-8ca207daa937.roa
File:                     582fbdd9-4225-38a7-bbb4-8ca207daa937.roa (raw, json)
Hash identifier:          JlHd+lmaxehoEjsEQYs/jYrFHKX+5htrJb8xZeM+jpw=
Subject key identifier:   C3:40:E5:50:F2:0C:8A:F0:57:AE:14:C7:59:4A:58:F9:A5:DF:7A:B2
Certificate issuer:       /CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
Certificate serial:       010D0C9F43285843B0B19088993813DDFCD20300
Authority key identifier: C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/582fbdd9-4225-38a7-bbb4-8ca207daa937.roa
Signing time:             Fri 27 Oct 2023 15:12:14 +0000
ROA not before:           Fri 27 Oct 2023 15:12:14 +0000
ROA not after:            Thu 25 Jan 2024 16:12:14 +0000
asID:                     395347
IP address blocks:        138.43.240.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b0:b1:90:88:99:38:13:dd:fc:d2:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c805d5-58a4-453e-b16e-c677ccb6b46d
        Validity
            Not Before: Oct 27 15:12:14 2023 GMT
            Not After : Jan 25 16:12:14 2024 GMT
        Subject: CN=faef310d-16fa-4901-8aad-984ab45c758e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:67:96:83:ae:a6:85:e9:28:92:02:65:6a:81:
                    45:7f:95:09:25:57:99:3f:d1:f7:dd:9b:fb:35:42:
                    f9:a6:a3:91:cc:e4:4a:4c:df:7a:1a:40:70:6a:c0:
                    fe:6d:cf:a1:76:fb:71:31:d1:83:b5:99:9f:22:44:
                    75:84:2e:e7:56:44:16:9c:83:c7:e8:e2:81:6d:ca:
                    ed:34:3d:42:35:d5:87:a8:05:a6:9c:c8:78:48:00:
                    9e:01:b7:1d:4b:d8:fd:6e:c3:81:4c:e0:92:66:0c:
                    c5:a9:0c:d3:4a:ac:7c:bb:5f:54:9e:8d:e2:17:3d:
                    30:ce:4f:4d:aa:70:b7:9b:70:0a:87:23:43:d4:7a:
                    24:11:c9:67:50:2a:4d:3f:ab:87:b9:eb:5f:99:d5:
                    18:5e:14:6b:c0:5b:29:b4:d8:4d:0a:ac:b4:a8:37:
                    21:20:ca:4b:bf:8b:89:0b:69:2e:79:44:d3:9c:d5:
                    ca:05:96:90:ca:b9:ce:f5:7d:99:6b:cf:ad:1f:72:
                    70:8d:54:74:2d:b5:72:d5:7d:22:9a:98:b3:b9:73:
                    ab:7d:22:22:d5:28:4a:b2:8f:e1:b0:24:10:c5:40:
                    65:c1:8d:46:f6:67:82:f3:82:56:9b:53:cc:93:f5:
                    22:d7:92:7f:aa:25:6b:9e:77:f5:37:bc:fe:2a:ef:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:40:E5:50:F2:0C:8A:F0:57:AE:14:C7:59:4A:58:F9:A5:DF:7A:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/582fbdd9-4225-38a7-bbb4-8ca207daa937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d/b7c805d5-58a4-453e-b16e-c677ccb6b46d.crl

            X509v3 Authority Key Identifier:
                keyid:C1:06:A2:F8:0D:B3:B7:93:4C:72:3B:1F:70:2A:B4:8F:48:52:AF:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b7c805d5-58a4-453e-b16e-c677ccb6b46d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:c8:d2:c8:c3:43:f5:cc:6b:60:96:3d:6e:3b:83:b2:a2:
         cc:e1:db:96:96:b6:03:a9:06:73:ce:17:fd:09:13:bc:0d:57:
         e3:4b:4c:ed:a6:c8:20:04:c3:9a:cb:2a:85:27:4a:41:e8:56:
         e5:ea:7a:f8:fa:69:c8:53:bd:07:47:70:99:5f:60:0f:c5:24:
         ac:12:60:bf:62:86:26:e1:a1:f1:5d:c3:c2:f8:ea:ca:5c:4e:
         b5:15:64:d8:25:80:1d:ed:f1:e3:5d:26:fa:57:8a:2f:6a:d3:
         ac:e4:c5:b4:c0:1f:24:09:4f:1e:ae:46:72:1b:f4:cb:13:d1:
         1f:41:6a:66:61:64:2a:20:5a:f1:62:36:31:0a:83:66:b5:c0:
         92:3b:49:ce:21:de:7c:54:4f:25:3e:4f:bd:c7:34:df:ad:f8:
         54:c2:4b:f2:8c:5f:66:c7:45:94:58:45:e3:fb:ac:08:54:ac:
         83:d1:42:19:19:6b:86:7d:4a:3c:d7:1f:77:82:c4:4c:af:8b:
         0c:09:c6:5c:13:9b:74:00:21:54:07:8e:ab:18:d2:ac:43:0b:
         19:29:6b:df:b8:49:2d:8d:35:09:e6:fb:6e:36:fc:0d:d0:c3:
         6e:00:20:7e:18:93:92:dc:13:8d:69:d6:1c:37:31:60:87:95:
         ba:cb:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----