Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/69f4267f-65ca-368b-862a-d97ef0d644d2.roa
File:                     69f4267f-65ca-368b-862a-d97ef0d644d2.roa (raw, json)
Hash identifier:          QDVG7mQx3FFewljzHd5AbA3iPRSv61WrgHoUE3Qn85s=
Subject key identifier:   E3:DA:E0:D2:34:E3:69:E0:E3:8A:C8:75:98:87:5E:2E:FF:1B:50:1E
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F43285842E76EE447D64D4901C0BF6880
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/69f4267f-65ca-368b-862a-d97ef0d644d2.roa
Signing time:             Wed 16 Aug 2023 13:00:25 +0000
ROA not before:           Wed 16 Aug 2023 13:00:25 +0000
ROA not after:            Tue 14 Nov 2023 14:00:25 +0000
asID:                     20303
IP address blocks:        104.251.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e7:6e:e4:47:d6:4d:49:01:c0:bf:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: Aug 16 13:00:25 2023 GMT
            Not After : Nov 14 14:00:25 2023 GMT
        Subject: CN=c80df4a7-5d73-40f2-b5b4-72eaf01179fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:2c:9c:d1:4f:a8:d5:63:0d:8b:b3:38:d1:
                    42:ee:a2:62:4d:76:1f:77:1d:41:91:eb:84:61:f3:
                    71:7e:55:9a:2e:42:41:d3:77:6d:09:db:fa:8f:20:
                    12:3a:eb:9f:de:4d:14:c3:db:99:03:bc:75:c9:83:
                    83:2c:ea:1b:ca:ab:73:07:1a:c0:30:37:0b:82:c6:
                    98:13:a6:0d:13:c9:bf:1f:b0:e6:6b:fa:ad:7f:be:
                    51:d1:07:6b:d5:a0:81:2f:90:3e:09:01:95:84:d1:
                    22:7c:0d:3e:12:c1:ed:4e:77:7b:f7:1a:b0:ac:a9:
                    fa:24:b1:be:f7:6d:6a:98:9d:1c:d2:b1:38:a6:2b:
                    76:97:ea:8b:12:fe:89:72:d2:21:cc:75:1d:c5:fe:
                    80:22:e7:a3:45:7e:7d:f7:5c:50:4c:a9:b5:81:09:
                    6b:12:d6:4c:c3:1d:cc:14:89:d3:ca:6c:de:0e:47:
                    de:9f:d4:b9:53:5a:36:65:0c:0c:f2:47:f9:5a:81:
                    19:fc:c0:b4:c4:0f:03:25:78:65:5d:20:fb:cd:f5:
                    9b:fd:90:5c:bf:d8:10:43:27:75:a5:19:ae:48:3f:
                    58:f8:e0:15:4e:40:e4:7e:2c:53:dd:9b:9f:ae:e9:
                    ca:ca:65:cf:6b:16:9b:3a:20:20:bf:bb:9e:6f:f4:
                    7c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:E0:D2:34:E3:69:E0:E3:8A:C8:75:98:87:5E:2E:FF:1B:50:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/69f4267f-65ca-368b-862a-d97ef0d644d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:29:96:4c:22:c2:f1:4b:bb:41:f8:67:34:6b:51:f3:99:23:
         e0:e3:f4:ff:b7:7f:38:dd:89:93:03:46:fb:9d:51:31:45:41:
         d6:be:ef:37:a0:98:39:90:d3:81:7f:8e:3e:d1:be:27:9f:28:
         50:a9:5d:da:79:25:68:b3:2c:d7:38:d6:b1:c8:18:f0:8e:8b:
         68:61:f1:6f:89:cc:7d:3f:bb:fd:5e:df:c0:1f:b5:dc:6c:cb:
         ec:02:7f:d9:09:2f:77:22:d8:a3:c0:f5:11:ec:73:7b:ac:04:
         fa:8b:8d:ff:85:a1:b4:67:e2:00:08:10:cf:dd:1e:07:35:ae:
         08:f3:ea:3b:8b:a5:a5:ab:0c:4f:0d:0c:e2:15:81:7c:f4:64:
         be:49:20:30:dd:93:1d:fa:3e:88:72:98:ca:a2:1c:3c:54:e7:
         a7:23:41:d1:8a:a7:77:a8:17:e5:42:ef:e6:c6:cb:2f:2e:69:
         3e:99:3b:27:5b:4c:0d:a2:1b:4c:e7:e6:bc:35:b2:94:d1:f1:
         af:6a:72:fa:2d:95:c8:83:98:1a:d3:7c:ea:8e:45:3c:39:2a:
         33:3f:e4:a9:da:b1:fb:f7:69:5b:93:42:64:49:ee:50:06:8c:
         74:53:75:a6:cf:1f:5e:b4:95:64:44:65:03:28:0d:2b:d1:51:
         9c:6a:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----