Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/77a9ae85-3056-3861-8cf6-997d4353e96d.roa
File:                     77a9ae85-3056-3861-8cf6-997d4353e96d.roa (raw, json)
Hash identifier:          KC7mtEsXWfiLjXjEwKFBCZcm7Qvb4ds1PJ3NiRItrs8=
Subject key identifier:   11:E9:1B:78:91:FB:72:F4:9C:0B:38:A8:A5:63:BE:A5:48:E3:2A:1C
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F432858436063B3E7DF51C297EDE86380
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/77a9ae85-3056-3861-8cf6-997d4353e96d.roa
Signing time:             Thu 28 Sep 2023 20:50:41 +0000
ROA not before:           Thu 28 Sep 2023 20:50:41 +0000
ROA not after:            Wed 27 Dec 2023 21:50:41 +0000
asID:                     0
IP address blocks:        69.80.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:60:63:b3:e7:df:51:c2:97:ed:e8:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Sep 28 20:50:41 2023 GMT
            Not After : Dec 27 21:50:41 2023 GMT
        Subject: CN=6081584b-e4d2-4840-881c-44837c4e13df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bd:f7:65:74:42:71:26:e5:96:1e:a5:61:2f:
                    18:ff:ff:96:90:04:bf:52:5d:9d:ba:95:84:f6:c4:
                    bc:2f:9e:ba:07:41:65:c5:d1:32:a4:ba:77:27:50:
                    d5:f9:47:e9:9e:72:17:f2:ad:c2:68:dc:ec:f7:59:
                    45:1e:a5:f7:8c:86:27:d3:3e:9e:a3:20:10:69:f1:
                    c0:79:9c:aa:94:40:f7:e9:18:b5:53:40:08:67:d2:
                    fc:72:f1:c1:0b:84:5a:80:c3:04:14:29:cd:95:20:
                    b6:ba:05:9c:36:b0:8b:df:ea:b5:a7:70:2c:55:b6:
                    c4:5b:2a:79:53:e1:7c:a6:b3:14:3b:ec:e7:11:86:
                    9b:94:8d:2f:ef:20:12:5b:9b:0c:c8:0f:a7:0f:fb:
                    c2:55:1a:d8:89:93:5b:1a:8b:e7:d8:3e:57:dc:d7:
                    b2:1d:8d:90:fa:01:e7:ff:51:60:c5:b0:3d:ad:a7:
                    ca:1e:fb:03:b4:9c:d0:93:cd:1c:44:35:f7:b5:f5:
                    b1:9f:52:23:0c:32:78:0b:26:2d:a3:86:44:0d:b4:
                    bf:c8:b0:73:4a:2a:a2:b3:96:df:98:33:29:09:33:
                    ef:20:91:c9:c1:35:c2:c5:61:f9:db:76:b4:f9:04:
                    85:65:67:ee:c7:80:1b:f1:14:9d:fd:61:34:41:dc:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E9:1B:78:91:FB:72:F4:9C:0B:38:A8:A5:63:BE:A5:48:E3:2A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/77a9ae85-3056-3861-8cf6-997d4353e96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:a8:5e:09:7e:ad:98:d0:29:ae:0f:19:a2:1b:c4:fd:11:
         3e:86:d7:f3:2a:77:78:5d:75:62:6f:e4:f6:e2:f4:bb:c0:ac:
         c7:f2:c8:c9:0c:18:1b:99:d0:c0:75:5f:c1:f2:09:49:18:d6:
         29:b0:3a:dc:73:a6:17:87:0f:a3:a1:9c:44:d3:1c:d4:a8:96:
         24:14:ad:cc:e7:31:90:78:a0:27:5d:0e:6b:bb:a7:de:f5:46:
         b5:bb:8a:c1:9b:93:4e:db:8d:42:75:18:c6:b1:a9:5b:a8:3e:
         07:bd:f4:f7:41:28:23:ee:d1:db:cc:90:69:e9:07:3f:de:f6:
         70:19:0c:54:bd:a2:f1:36:1b:84:d4:f1:5d:89:65:aa:71:06:
         b4:dc:cd:cd:80:ea:59:7c:a0:7a:d3:f5:eb:e1:7b:cd:09:bb:
         fd:98:b7:57:3e:21:a5:a0:fa:e2:75:cb:a3:30:d3:65:87:ad:
         22:b5:26:d5:6c:bd:4a:e3:ae:b7:7d:d8:86:69:5b:65:9e:ab:
         80:17:87:7a:8f:18:dc:0f:91:6a:c5:7c:27:76:59:15:1b:9e:
         7e:9b:4a:85:cd:5d:91:a0:4e:37:46:93:e1:91:96:7a:62:ad:
         b1:6e:24:16:e6:ae:b5:37:4c:84:67:41:2d:3e:5b:ff:6b:58:
         9e:1a:89:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----