Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/dcf73caa-f5b2-30fb-8bca-b618382ca5bb.roa
File:                     dcf73caa-f5b2-30fb-8bca-b618382ca5bb.roa (raw, json)
Hash identifier:          p1JOkJLiRVFkSGhaD37zs4syeQZRktBa8QV9NKlCo+8=
Subject key identifier:   1F:7D:35:8A:48:EE:07:9D:D5:CD:33:66:9D:9E:D2:AF:BC:FC:53:F8
Certificate issuer:       /CN=e0b35546-769e-41a6-987e-2a9732555de4
Certificate serial:       010D0C9F43285844E1284ED1B3AD7F6D04655500
Authority key identifier: FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/dcf73caa-f5b2-30fb-8bca-b618382ca5bb.roa
Signing time:             Tue 13 Feb 2024 16:37:14 +0000
ROA not before:           Tue 13 Feb 2024 16:37:14 +0000
ROA not after:            Mon 13 May 2024 15:37:14 +0000
asID:                     62246
IP address blocks:        23.146.72.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e1:28:4e:d1:b3:ad:7f:6d:04:65:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0b35546-769e-41a6-987e-2a9732555de4
        Validity
            Not Before: Feb 13 16:37:14 2024 GMT
            Not After : May 13 15:37:14 2024 GMT
        Subject: CN=3dbab0e3-49b5-465f-8f65-78f792b75536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b2:73:44:0e:5b:a3:25:bb:ac:05:53:76:44:
                    f1:01:06:73:33:8f:f3:bd:18:5a:1e:81:25:b5:56:
                    ba:51:b6:0e:37:22:1c:65:2b:1e:54:e2:c7:31:c7:
                    bb:ff:86:68:1b:1f:b7:45:4a:ca:30:a1:1b:ce:b0:
                    d0:0d:c8:f2:35:da:3f:99:be:48:fb:b1:4b:a5:eb:
                    e3:ab:4d:f5:17:73:f1:26:8e:4d:e2:71:8e:c2:e2:
                    c3:de:a5:44:17:ab:3d:af:95:1c:bc:1d:05:2e:6c:
                    a2:9b:4e:72:07:dc:ba:2b:37:dd:f0:0b:e8:38:4f:
                    df:bf:20:f9:b0:32:09:8e:6e:7b:eb:cb:52:70:35:
                    a3:9f:32:b0:72:1a:c5:82:e9:5a:bd:0d:0c:64:ac:
                    48:0a:cd:24:de:ef:27:25:05:e4:6b:8b:9d:d7:09:
                    63:d0:91:1b:56:7c:3a:b1:ac:18:44:78:6c:12:19:
                    c7:06:1f:f6:f5:b8:eb:1d:b3:b7:92:26:68:3a:13:
                    70:74:0e:d2:2e:fa:76:42:59:4f:cc:3f:b4:19:21:
                    6d:87:90:0c:62:85:e5:37:31:d8:66:25:1d:94:87:
                    74:71:84:14:82:36:ce:7b:7a:de:b8:a7:d9:b0:5d:
                    15:b1:bd:16:1b:9c:90:86:e2:a2:93:03:de:ad:a8:
                    26:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7D:35:8A:48:EE:07:9D:D5:CD:33:66:9D:9E:D2:AF:BC:FC:53:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/dcf73caa-f5b2-30fb-8bca-b618382ca5bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4/e0b35546-769e-41a6-987e-2a9732555de4.crl

            X509v3 Authority Key Identifier:
                keyid:FD:F6:17:A5:81:7C:B3:18:B7:E3:11:FF:B0:FC:DF:D3:EC:CC:08:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0b35546-769e-41a6-987e-2a9732555de4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:94:43:be:1f:3d:0e:d5:0f:4f:e8:28:62:9a:b8:e5:38:
         89:83:b7:af:50:81:4e:f6:a9:39:45:c8:fa:7a:92:17:fa:a0:
         4a:5e:20:91:d5:8e:9b:61:c6:a5:ec:ef:64:ca:12:a5:ee:aa:
         9c:c5:37:87:0d:15:31:04:a4:99:68:4b:8e:64:5e:be:77:07:
         be:e0:06:b7:8c:09:f1:13:fa:b3:0c:6a:77:e2:d6:77:0e:9d:
         ae:6f:2a:34:6a:1a:ae:8e:25:c2:dd:d1:a1:50:ba:f8:43:01:
         22:c2:81:1d:0b:50:10:ed:f6:cc:4d:6d:f5:e7:5f:12:e4:42:
         e0:ca:42:45:38:c7:69:ae:0c:43:e7:5e:16:14:bf:be:e8:f9:
         4c:7e:a3:2f:ba:cd:e9:f6:7b:b1:dd:29:88:85:5c:5f:1a:56:
         e8:2b:b7:ba:0f:ee:f2:3a:de:dc:4d:59:52:91:79:7b:1b:ff:
         03:c4:2e:01:89:02:28:91:77:8a:39:21:51:05:5c:e3:b2:3c:
         f4:f0:db:59:df:95:32:25:d1:49:66:4d:54:fe:ff:bd:8c:83:
         34:a5:09:a8:f1:79:05:77:3e:53:44:f1:30:83:cf:a1:ed:d9:
         b4:b0:5f:27:17:4d:b9:02:f9:d6:15:d1:1f:ae:fe:74:eb:00:
         34:17:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----