Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/6875f125-ce02-3745-ab01-1d5e27bc645f.roa
File:                     6875f125-ce02-3745-ab01-1d5e27bc645f.roa (raw, json)
Hash identifier:          f9iurJOrl07jqugI4Rub8k3c5UX0loLLin1nOXxQv4w=
Subject key identifier:   55:2E:87:64:EF:D6:E5:4E:59:52:A8:1C:0D:2A:68:6C:F2:EF:87:B0
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F43285843019FD2CD5242014C374AC080
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/6875f125-ce02-3745-ab01-1d5e27bc645f.roa
Signing time:             Fri 25 Aug 2023 22:10:02 +0000
ROA not before:           Fri 25 Aug 2023 22:10:02 +0000
ROA not after:            Thu 23 Nov 2023 23:10:02 +0000
asID:                     0
IP address blocks:        69.80.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:01:9f:d2:cd:52:42:01:4c:37:4a:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Aug 25 22:10:02 2023 GMT
            Not After : Nov 23 23:10:02 2023 GMT
        Subject: CN=f0ad6fdc-9fbe-4a79-84f6-24c84ee43839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:e8:f3:a1:43:92:a8:32:61:09:2b:36:3e:
                    d1:9c:55:d3:71:c6:ed:36:eb:63:3b:f4:82:94:a9:
                    93:5a:e4:69:e2:0f:93:b5:6c:81:9e:08:f6:d3:10:
                    9e:63:e5:0d:3c:e0:43:4e:5b:c5:f3:8f:cc:a6:84:
                    9a:92:00:5e:7d:49:4f:83:e0:b8:cd:87:aa:4c:c8:
                    20:87:1c:12:b9:c9:89:1a:d9:44:a3:4b:cc:c9:0a:
                    48:27:12:bd:da:d1:1a:35:ee:2d:34:21:85:f8:da:
                    21:8a:80:92:ed:d5:a3:8b:fa:28:72:a3:31:ee:44:
                    8f:6c:3f:30:40:51:db:5b:e8:a7:4b:1b:d3:cf:08:
                    d7:8d:d6:73:87:5b:ee:cb:2e:2b:c8:de:8c:0a:4a:
                    0a:72:cb:76:0d:15:25:cb:2c:ae:01:e6:0c:84:18:
                    6d:f1:04:70:ac:9a:3c:3e:58:56:fb:d4:d9:02:bb:
                    b9:35:02:b4:39:78:6a:89:c3:02:ff:6b:2c:82:d6:
                    47:73:89:9f:2e:4a:98:22:ce:c7:53:55:77:25:32:
                    91:d6:1b:1a:7c:70:ae:8e:d4:63:b6:ee:eb:84:36:
                    b3:aa:1f:c5:71:ed:61:7d:64:29:62:9e:d2:4f:45:
                    f0:b5:f6:7a:c9:43:96:c7:73:f7:66:67:72:05:f2:
                    76:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2E:87:64:EF:D6:E5:4E:59:52:A8:1C:0D:2A:68:6C:F2:EF:87:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/6875f125-ce02-3745-ab01-1d5e27bc645f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:ff:e0:0e:bb:1d:e2:dc:11:a3:cd:05:70:5e:0f:fc:b4:8d:
         dc:0f:12:63:ad:c8:88:7e:7d:c6:03:d0:15:63:f9:0e:e7:28:
         f1:f7:41:ce:e2:42:96:fe:f0:95:d0:73:a1:9f:7a:54:7c:b0:
         48:16:1a:5a:e3:dd:9d:6c:0b:f5:a5:7b:2d:47:e6:aa:01:29:
         88:db:20:36:65:38:46:a9:1f:a6:a0:8c:20:6a:30:26:c6:f6:
         a3:33:8b:68:ad:f6:fe:4c:18:bd:92:87:88:4b:9c:b9:c6:09:
         36:29:87:db:00:07:21:b2:ea:d8:d4:43:a5:e7:e2:2d:ce:14:
         3d:e5:6c:18:c7:6b:1d:0c:2d:3d:90:93:a7:3f:da:47:44:52:
         e0:78:10:78:ce:2e:a9:29:34:61:65:3d:e8:88:89:dc:f0:40:
         e3:bb:e0:9c:40:5d:75:d2:d7:68:a9:ff:65:9b:70:a9:86:77:
         8f:4b:02:ca:94:62:01:b5:68:ae:d1:7f:f4:33:33:de:2f:21:
         2e:15:ce:61:5e:2c:f4:fd:9f:80:30:6c:59:dc:e1:47:d8:b8:
         05:d1:d6:ae:ae:b4:49:46:10:c5:a8:d0:bd:3f:bd:9a:5b:43:
         cb:46:1d:f1:e2:cc:5f:10:35:48:da:a6:df:7a:b2:33:a1:a2:
         84:be:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----