Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/761a469b-2064-39fd-a6a4-e67fb5fa40b3.roa
File:                     761a469b-2064-39fd-a6a4-e67fb5fa40b3.roa (raw, json)
Hash identifier:          d5EVD2XL6K4VVq7RW0eZJs498WRujM4AwXH1NqmMvvw=
Subject key identifier:   6F:A6:AC:16:EA:6B:4A:11:87:B9:0B:FD:6C:1A:4E:BB:99:C3:13:D7
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F432858435902C49C1BF7AA8B94F63B00
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/761a469b-2064-39fd-a6a4-e67fb5fa40b3.roa
Signing time:             Tue 26 Sep 2023 05:24:43 +0000
ROA not before:           Tue 26 Sep 2023 05:24:43 +0000
ROA not after:            Mon 25 Dec 2023 06:24:43 +0000
asID:                     57043
IP address blocks:        64.72.205.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:59:02:c4:9c:1b:f7:aa:8b:94:f6:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: Sep 26 05:24:43 2023 GMT
            Not After : Dec 25 06:24:43 2023 GMT
        Subject: CN=defbd26f-ced8-4a83-8bd4-335abb94871d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:4d:58:1d:97:ff:be:09:10:29:c6:b8:99:
                    2c:5a:f9:9e:f2:29:f1:cc:b4:9e:39:df:91:cf:c0:
                    3d:4f:40:6d:16:61:15:6e:ca:9b:4a:e9:c5:89:08:
                    f1:cf:fb:74:8e:b7:65:20:ba:ce:3e:aa:91:c2:41:
                    6a:74:e6:8e:34:86:26:65:eb:82:62:dd:d6:7e:c9:
                    8f:7b:18:18:ea:88:26:76:6c:bb:44:f1:dc:19:8d:
                    20:57:3f:bb:1e:49:7a:a5:33:c7:f1:da:25:7a:92:
                    f5:1f:da:2b:be:b3:13:e0:94:32:57:23:5d:52:d8:
                    de:57:11:3a:68:bc:9a:34:b4:72:bf:82:17:92:e4:
                    9d:2c:0d:83:57:5c:70:2d:50:18:ab:39:9c:1b:32:
                    5f:7e:a0:58:f2:86:4c:3d:f5:92:e9:66:c6:31:f8:
                    e1:3e:cc:c7:1d:2f:43:16:50:5f:d0:c2:43:68:d7:
                    6b:8a:85:a9:08:3b:e2:49:fc:5f:fe:29:a9:6e:05:
                    00:81:b4:fe:98:2d:b8:e6:51:a1:0d:71:d8:8d:44:
                    6a:dc:a7:b5:22:83:1d:03:97:f7:f3:6f:27:f4:15:
                    52:88:d9:9b:d9:70:82:b3:cf:a8:5e:3e:7e:29:88:
                    8a:cc:b4:0c:af:1a:93:5b:70:07:5c:92:81:58:61:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A6:AC:16:EA:6B:4A:11:87:B9:0B:FD:6C:1A:4E:BB:99:C3:13:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/761a469b-2064-39fd-a6a4-e67fb5fa40b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a6:d5:5b:03:25:42:df:c6:f3:f3:9e:a7:e2:8e:dc:2b:f5:
         8c:55:88:f9:18:57:90:a2:b8:fe:d1:9c:cf:e2:8d:91:56:a8:
         f6:43:74:f8:bf:89:57:c9:51:1c:fe:74:9b:57:5e:cd:74:02:
         d9:9f:fa:3c:d1:e2:49:1f:24:94:e0:aa:ce:fe:bf:9a:a3:8e:
         85:36:82:52:3f:de:d5:5b:c2:3f:00:e8:5e:b3:51:5f:2f:f1:
         4c:76:0d:37:18:6b:36:f6:55:6e:0b:7d:26:5c:a3:c2:21:2e:
         44:9d:60:3a:4e:0e:05:40:8e:a4:af:7e:d4:f6:c5:e4:88:73:
         b5:63:50:5e:6f:e2:4e:06:e7:31:2d:6f:19:9b:36:76:16:b5:
         3f:fd:76:ac:75:a7:ba:cc:1f:fa:8c:27:57:ef:e1:c9:5b:b2:
         e2:a8:d3:79:a0:60:b1:9a:9f:1a:a0:bb:4d:37:34:9e:62:25:
         fa:50:67:e3:58:03:cc:9c:88:dc:84:20:96:4c:6b:bb:9a:ba:
         30:da:e6:14:35:06:b7:50:37:b5:2c:15:2c:93:18:ea:54:22:
         b4:68:7e:4e:3e:77:b1:34:e6:f0:ab:af:a5:b2:12:2b:79:c0:
         e0:8c:ef:64:31:63:90:42:08:16:0f:09:95:0c:30:b2:0a:ff:
         d7:8a:88:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----