Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/5931fdcf-8eae-3d26-b902-50f53f97a713.roa
File:                     5931fdcf-8eae-3d26-b902-50f53f97a713.roa (raw, json)
Hash identifier:          coR32V7kemLVUsg3ihWWhlqNP8pbE1nQrBtBy3rcmjY=
Subject key identifier:   EC:D3:BA:0D:A1:0E:85:71:50:91:1B:55:E2:45:66:26:5A:E1:7F:3F
Certificate issuer:       /CN=8adbc307-9e15-47ff-abb8-570dd88539f4
Certificate serial:       010D0C9F43285841E4873CF6B97CBAAA3FF5C100
Authority key identifier: 54:CC:85:65:6D:D8:16:EF:C0:01:CC:85:73:03:3D:60:B6:90:FD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/5931fdcf-8eae-3d26-b902-50f53f97a713.roa
Signing time:             Mon 15 May 2023 19:15:07 +0000
ROA not before:           Mon 15 May 2023 19:15:07 +0000
ROA not after:            Sun 13 Aug 2023 19:15:07 +0000
asID:                     397294
IP address blocks:        74.80.236.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:87:3c:f6:b9:7c:ba:aa:3f:f5:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8adbc307-9e15-47ff-abb8-570dd88539f4
        Validity
            Not Before: May 15 19:15:07 2023 GMT
            Not After : Aug 13 19:15:07 2023 GMT
        Subject: CN=450d7a5c-2a99-4dc9-94f7-11f3c63835e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:11:3e:d5:3f:05:74:11:57:50:d6:33:c3:42:
                    62:7f:4e:dc:98:f3:0b:1a:56:8e:08:cc:96:ce:59:
                    33:2c:74:02:be:8a:b3:db:3c:9c:d3:32:3f:60:a4:
                    cb:13:7b:51:ca:0f:01:cd:db:17:6f:64:d3:6f:04:
                    13:6e:1d:12:f7:50:13:30:52:3b:df:86:91:e9:b6:
                    34:c1:dd:26:da:41:6c:1c:16:4c:2e:fa:c0:47:84:
                    b7:b9:81:86:58:cf:f9:eb:b1:0e:7b:9e:5a:f1:58:
                    8a:e7:7f:17:e4:70:cc:ed:5c:66:9f:91:af:91:1a:
                    5d:7a:27:a4:06:3b:c3:e1:f5:2e:4c:e9:63:f7:5f:
                    70:1c:cd:42:b3:34:b4:00:f3:62:5c:e9:14:1d:d0:
                    2b:19:a5:e4:e3:8c:ed:b2:8a:30:45:4d:d0:e3:48:
                    01:ea:94:73:39:d5:2d:34:3f:ff:2a:5d:6e:27:fd:
                    8e:31:03:4f:71:a8:7f:51:b7:f1:ad:34:67:60:c7:
                    d9:25:8d:d0:d8:c8:c0:87:3f:f5:45:f1:c9:d7:eb:
                    54:5f:e9:7e:a2:71:df:a1:0b:17:2f:c5:8a:e6:de:
                    ec:30:98:36:8c:d3:78:3c:7a:ec:75:04:8a:f7:c1:
                    89:cd:98:a3:9c:1c:87:4e:bf:fb:66:89:ee:03:ba:
                    b9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D3:BA:0D:A1:0E:85:71:50:91:1B:55:E2:45:66:26:5A:E1:7F:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/5931fdcf-8eae-3d26-b902-50f53f97a713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4/8adbc307-9e15-47ff-abb8-570dd88539f4.crl

            X509v3 Authority Key Identifier:
                keyid:54:CC:85:65:6D:D8:16:EF:C0:01:CC:85:73:03:3D:60:B6:90:FD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8adbc307-9e15-47ff-abb8-570dd88539f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b8:1f:b4:42:2a:d3:7e:02:48:fb:58:7e:5a:02:d8:67:07:
         7b:15:08:b1:c8:eb:6c:d2:62:80:e4:5e:0f:ae:45:c7:da:d5:
         c7:50:0b:e0:73:b0:4d:3f:94:3c:53:40:0b:6c:44:78:fe:68:
         26:c3:48:48:1d:28:8e:aa:a3:07:95:a8:b1:62:00:93:88:81:
         79:53:df:3a:df:8d:2a:8a:c5:97:bf:36:34:82:ef:95:61:27:
         5e:be:ba:31:1f:49:61:76:cf:c9:f2:34:59:e7:05:2d:5e:ac:
         f5:97:f5:73:96:af:24:43:d5:b0:55:73:c4:6e:47:52:5f:46:
         fe:fe:3e:1d:73:6c:3c:79:0f:7e:c8:61:5e:68:00:7e:25:3f:
         bb:00:6e:17:ef:f3:52:fd:39:11:d2:fb:21:8b:fe:40:03:8f:
         e2:bd:9b:aa:cf:68:66:09:d4:ed:f8:85:b0:8d:ad:83:3d:2f:
         b8:3c:18:6e:4c:e0:e8:0e:5a:c4:48:d9:76:f0:b4:a8:10:29:
         c5:c3:1c:3f:c8:99:f4:63:47:d6:75:5e:f8:e4:21:49:b7:a9:
         bc:ff:bb:95:b2:3b:8a:77:41:9b:3d:d7:be:cb:e0:27:d2:ac:
         0e:ad:8e:03:a5:57:f1:10:0a:5a:ec:2c:44:2c:e5:ba:dd:09:
         57:bc:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----