Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/1b8e5459-3fe0-38e7-8040-e6b296c56d51.roa
File:                     1b8e5459-3fe0-38e7-8040-e6b296c56d51.roa (raw, json)
Hash identifier:          VnmjhmY46TBQZdacVgPOY4WrD0F8opEosVUIiU0B3Ug=
Subject key identifier:   41:B5:2C:05:3C:23:61:4D:4C:FC:BB:1E:91:69:E3:AA:7E:FA:32:C0
Certificate issuer:       /CN=f8c8c076-f01a-4032-b27d-2c8117227f2a
Certificate serial:       010D0C9F43285843B00588008D74F73D3CF04F80
Authority key identifier: E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/1b8e5459-3fe0-38e7-8040-e6b296c56d51.roa
Signing time:             Fri 27 Oct 2023 09:25:37 +0000
ROA not before:           Fri 27 Oct 2023 09:25:37 +0000
ROA not after:            Thu 25 Jan 2024 10:25:37 +0000
asID:                     147008
IP address blocks:        216.120.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b0:05:88:00:8d:74:f7:3d:3c:f0:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8c8c076-f01a-4032-b27d-2c8117227f2a
        Validity
            Not Before: Oct 27 09:25:37 2023 GMT
            Not After : Jan 25 10:25:37 2024 GMT
        Subject: CN=091686d1-eb5f-44ee-a7e9-e83d514fc0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a2:0e:84:c4:9d:50:04:03:85:63:94:11:4b:
                    2d:17:61:f0:37:88:63:97:e7:6e:ae:7f:6e:33:65:
                    fd:cf:24:5a:da:06:f8:28:b4:09:79:08:d9:4b:52:
                    2c:0e:f8:a5:1a:cd:85:ed:bc:a4:30:37:15:42:8f:
                    9a:e5:e6:32:af:3f:4c:96:5d:77:1e:b7:6d:bb:78:
                    eb:09:d2:f8:e3:d9:7f:0f:d8:85:6e:94:64:3d:ed:
                    52:6d:90:ef:49:fe:1a:d3:f0:9a:1d:cf:52:1c:0e:
                    5d:3d:d0:2f:fd:9a:03:3b:43:f3:c8:ae:0c:eb:04:
                    e7:08:b1:73:f1:a8:53:64:88:52:35:24:dd:7f:70:
                    a5:6b:ee:68:6f:7e:16:38:42:9a:a3:23:ff:61:d1:
                    ce:36:79:75:e5:8c:5b:2c:d6:d1:44:bb:54:c7:67:
                    fd:5c:4d:9f:12:6f:a9:61:00:0b:45:fe:3a:ef:0e:
                    6c:5e:80:d3:41:56:56:e3:14:f0:53:17:f5:db:fb:
                    75:3e:b0:c9:45:67:3d:11:75:2d:13:28:6a:82:9d:
                    30:37:af:1d:a0:67:f9:05:28:7e:e9:31:ec:05:77:
                    82:fa:15:53:94:b2:9c:f9:18:29:d6:9b:66:e3:27:
                    3a:2f:41:68:f3:76:04:65:bb:f5:ff:00:5c:ec:f7:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B5:2C:05:3C:23:61:4D:4C:FC:BB:1E:91:69:E3:AA:7E:FA:32:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/1b8e5459-3fe0-38e7-8040-e6b296c56d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a/f8c8c076-f01a-4032-b27d-2c8117227f2a.crl

            X509v3 Authority Key Identifier:
                keyid:E2:F9:A8:6F:E7:F0:F9:B7:71:AC:2E:54:9D:CF:7F:B8:39:81:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8c8c076-f01a-4032-b27d-2c8117227f2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:56:ed:79:a3:01:b9:a3:50:f5:93:e1:cd:43:84:e1:f7:70:
         ad:fc:9a:24:41:09:1d:03:be:33:6d:9d:9b:e7:45:55:d1:0a:
         0b:0f:41:99:ad:53:39:4d:d3:69:f4:64:37:6b:7b:6b:b4:f0:
         a9:de:17:f2:17:8f:bc:00:9d:65:1a:04:30:39:64:95:6d:46:
         71:aa:a4:a8:1f:ce:2c:de:07:54:f2:a5:4f:49:0a:2c:68:ed:
         eb:4f:ab:00:96:d0:4f:f6:65:b9:1a:fb:12:1b:a9:7c:2c:81:
         02:a2:9e:76:91:2d:94:88:32:89:49:23:39:4e:d3:d1:02:83:
         f5:33:a6:ab:9e:b3:67:1b:f7:36:19:b1:69:91:ff:5c:6f:09:
         c3:52:45:36:fb:00:96:eb:de:32:4c:77:13:87:ce:eb:41:c0:
         53:14:04:8b:af:ba:02:97:f4:d8:3a:a9:20:b5:50:b2:c0:ab:
         4f:5f:ae:93:16:12:8d:0f:ba:76:95:4d:9c:fb:9c:93:7d:42:
         9e:1c:7d:1f:c3:dd:76:a1:42:de:95:31:64:36:34:da:a1:d0:
         c9:0d:f9:a6:6a:45:cf:06:01:3a:a1:e1:cf:52:2a:33:28:7e:
         6a:54:4b:db:a6:00:e1:b9:c0:64:1b:4f:00:5b:14:d8:71:2f:
         9c:3e:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----