Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/95ae9dbf-4a70-3b11-984b-c1014b301ffc.roa
File:                     95ae9dbf-4a70-3b11-984b-c1014b301ffc.roa (raw, json)
Hash identifier:          FUTg8v4r1uoyrwGUw5PXH5eP7++TaDoICGhhfSbOJ6g=
Subject key identifier:   22:78:C9:95:B3:0A:C6:AF:FA:11:54:3D:6E:0E:A7:01:0C:FE:0C:DB
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285844474EDF193F9D77DFCDAEBD40
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/95ae9dbf-4a70-3b11-984b-c1014b301ffc.roa
Signing time:             Wed 20 Dec 2023 14:00:21 +0000
ROA not before:           Wed 20 Dec 2023 14:00:21 +0000
ROA not after:            Tue 19 Mar 2024 13:00:21 +0000
asID:                     39521
IP address blocks:        64.22.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:47:4e:df:19:3f:9d:77:df:cd:ae:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Dec 20 14:00:21 2023 GMT
            Not After : Mar 19 13:00:21 2024 GMT
        Subject: CN=a847cd69-a377-41ee-b9fa-aeb3848a2e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7c:87:82:2c:01:a7:08:19:48:0b:d2:22:52:
                    8c:f9:e7:13:a8:13:fe:b0:03:c3:b4:89:3d:db:e2:
                    4e:43:a2:18:ed:6e:6d:ac:6e:ec:34:99:2f:7e:13:
                    ab:16:fc:31:21:6d:35:25:e2:68:09:75:b7:71:41:
                    14:ae:09:4f:07:1e:51:e4:e1:56:91:fe:28:e3:b8:
                    06:61:b5:06:6a:b4:a2:ef:ad:78:89:f3:85:b6:48:
                    a7:39:ee:12:32:a8:eb:54:f8:e9:4c:4d:b8:20:82:
                    6f:ba:ce:b3:6d:21:4c:2e:47:39:00:9a:1b:0f:9b:
                    ec:d9:77:44:4e:43:82:3d:36:91:d5:91:94:f5:9e:
                    21:78:7f:00:d5:99:0f:f1:e8:a3:e4:dd:78:18:4f:
                    45:16:d0:7c:ca:07:83:d3:5f:8b:6b:db:d3:78:c5:
                    79:5f:ea:d5:51:fc:48:05:4d:13:7b:e4:b9:30:28:
                    cc:d3:ad:45:4e:0c:b7:a3:d3:bb:f0:10:bb:1a:94:
                    25:8c:68:19:ce:c3:6d:09:64:9c:22:08:fc:9d:7b:
                    4b:aa:62:da:4f:96:1b:31:89:3e:ef:8b:d1:54:79:
                    8e:f5:45:6b:e7:ec:22:4e:c8:a4:42:d9:f1:6c:99:
                    06:d1:55:20:ae:fc:3f:6e:21:9b:19:c5:48:41:35:
                    e6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:C9:95:B3:0A:C6:AF:FA:11:54:3D:6E:0E:A7:01:0C:FE:0C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/95ae9dbf-4a70-3b11-984b-c1014b301ffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f6:3e:8c:09:59:e1:86:f6:23:27:8a:cb:38:7c:90:dc:49:
         60:09:44:d2:68:5b:cf:44:e1:e7:04:d7:c2:87:fc:f8:f4:36:
         7f:d4:59:7b:e2:a1:cc:81:32:32:e8:b8:65:60:14:1d:28:b3:
         87:e9:ef:3e:f4:2d:ec:bb:c8:9b:06:87:0d:36:5b:9b:77:e0:
         3f:7c:fe:d1:e9:ef:42:87:6c:79:5b:5d:fe:5e:b7:a4:42:bd:
         b8:27:2b:ab:4a:3f:a6:1b:fa:50:74:d3:bb:51:e7:54:d3:a3:
         9e:9b:d3:b6:cb:d7:c4:09:22:aa:67:3d:1c:87:fa:97:7b:b4:
         1a:25:5a:8f:ca:01:29:2b:ba:fa:be:4c:24:4c:b1:ce:8e:b2:
         7a:34:09:b1:eb:09:a7:74:de:ab:21:e3:ed:81:cf:66:22:d6:
         ff:71:df:3c:fc:0c:64:f2:99:cb:84:91:45:5e:d8:06:45:25:
         4d:26:49:8d:b6:2d:95:75:7e:7c:b8:bf:02:93:9d:2e:6a:e3:
         8d:43:37:33:2b:ff:9d:47:16:c2:e0:2a:38:b5:43:b9:e8:d7:
         a6:0e:e1:0f:d8:e3:60:47:d6:7b:f7:c4:9b:98:75:53:33:df:
         e4:0f:34:f8:44:0e:0f:d7:cf:d8:9c:29:26:07:67:4f:ca:35:
         d4:3f:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----