Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/4f3d374d-ab8d-3ef2-a58a-967d3c391eab.roa
File:                     4f3d374d-ab8d-3ef2-a58a-967d3c391eab.roa (raw, json)
Hash identifier:          u/iMCBP/TpNLuolZx7Kb6mU0zh6yAK0gC78AE4TFFVI=
Subject key identifier:   13:92:EB:C1:E9:82:62:A2:33:B1:82:BB:03:F9:2E:C2:F6:2A:8F:AA
Certificate issuer:       /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
Certificate serial:       010D0C9F43285844DB0B3A1182B8C25B06F00F00
Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/4f3d374d-ab8d-3ef2-a58a-967d3c391eab.roa
Signing time:             Sun 11 Feb 2024 12:03:47 +0000
ROA not before:           Sun 11 Feb 2024 12:03:47 +0000
ROA not after:            Sat 11 May 2024 11:03:47 +0000
asID:                     11472
IP address blocks:        216.7.66.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:db:0b:3a:11:82:b8:c2:5b:06:f0:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
        Validity
            Not Before: Feb 11 12:03:47 2024 GMT
            Not After : May 11 11:03:47 2024 GMT
        Subject: CN=17ad7235-d896-4dca-af61-de4a62cdd070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:7f:17:68:71:b6:aa:36:49:49:30:32:24:
                    a2:dc:46:7d:0f:f0:f6:60:8d:58:7d:42:b2:bc:9e:
                    26:98:32:af:3b:03:e5:e1:b1:42:c4:42:05:6a:da:
                    44:c8:e8:05:4e:33:6d:6a:2b:68:a9:ea:f7:4e:f0:
                    ea:60:30:6e:a0:8e:3d:78:83:1f:f1:2e:72:13:12:
                    a1:d2:45:42:45:d0:35:04:52:00:c4:d3:11:b8:dd:
                    54:e5:1c:9c:0a:57:f9:19:ed:e8:67:d5:f0:b3:bb:
                    7f:8f:8c:6a:f9:3f:fa:a2:c4:26:d4:2b:d9:9a:9c:
                    ca:85:d3:ad:ec:ff:00:bc:34:9d:63:59:02:0d:cd:
                    2c:c0:79:b7:19:42:e8:3f:05:bf:2a:0d:36:66:4d:
                    88:8c:59:0f:1f:2b:3c:da:f0:3f:81:6e:f6:c1:e2:
                    35:b8:4e:08:8b:ee:8b:ec:3e:c7:db:0c:a1:d4:ae:
                    7f:95:12:bd:df:e5:c4:8a:9e:47:44:d4:b1:41:b7:
                    b7:54:23:f3:6f:75:e6:b7:3f:4b:b5:16:c0:a2:e7:
                    3d:70:7b:b8:35:5a:8a:82:ad:01:0f:1f:cb:ee:75:
                    76:e7:e0:37:3c:35:01:ba:43:5a:ba:81:59:e3:b5:
                    e8:3a:2c:1b:30:3d:06:fa:a6:6c:5a:b0:64:5b:6c:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:92:EB:C1:E9:82:62:A2:33:B1:82:BB:03:F9:2E:C2:F6:2A:8F:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/4f3d374d-ab8d-3ef2-a58a-967d3c391eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl

            X509v3 Authority Key Identifier:
                keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.7.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:df:25:53:32:7f:f1:2d:34:61:fd:7b:58:89:b3:02:64:f8:
         a1:ce:cc:18:e0:59:da:c1:d3:85:79:e5:62:f9:a1:e0:9e:f8:
         02:cb:0d:9e:58:b7:93:3e:98:f2:90:62:29:93:2c:27:4f:8e:
         ad:3d:d4:f5:3b:bf:2a:e8:e6:7f:ae:06:89:26:91:bd:25:7a:
         c3:57:f5:ee:20:29:50:90:dc:1f:5d:32:6b:64:ed:53:a5:e4:
         58:93:4b:1f:f7:15:59:c1:7f:77:66:9c:a7:68:9c:95:30:9c:
         9b:7c:ba:30:9e:c2:7e:b8:b8:8f:ca:a8:6d:67:5d:85:84:f3:
         f9:22:f8:11:3b:0a:a1:41:15:e6:97:03:3d:de:13:9d:87:0f:
         5f:e9:b5:43:86:2a:74:14:98:58:61:45:1c:79:05:69:13:a6:
         30:dc:08:9e:8b:de:cd:9b:87:c2:24:b5:5f:c7:a0:86:ac:33:
         7d:27:6d:f0:1c:3a:80:f7:68:30:52:ba:14:d8:87:12:a4:ed:
         d4:f6:1c:5a:c5:fb:32:ac:e0:dd:12:cf:e6:09:16:5b:11:37:
         cf:71:a0:8a:e4:11:ca:26:56:fe:24:2e:ac:ac:87:ad:38:dd:
         a7:a6:04:59:0d:84:94:f4:46:02:9c:a4:96:da:9e:ff:50:a1:
         d0:31:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----