Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8ce56615-c439-3bc8-91a0-daee515d8467.roa
File:                     8ce56615-c439-3bc8-91a0-daee515d8467.roa (raw, json)
Hash identifier:          Qo4AtlGSTd/Gc1oemXuQLpdOU5KB25DxzTomoTHNMO0=
Subject key identifier:   AD:B8:9A:CD:D2:61:96:4A:4A:F5:44:58:39:7F:2C:B7:17:2F:39:06
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F43285841E446B6F6B2A7BEAEB83BCC00
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8ce56615-c439-3bc8-91a0-daee515d8467.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Thu 13 Jul 2023 02:48:34 +0000
asID:                     400269
IP address blocks:        142.190.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:b6:f6:b2:a7:be:ae:b8:3b:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jul 13 02:48:34 2023 GMT
        Subject: CN=c8ec1b8c-548f-4e34-97ac-f41868b076f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:6e:6b:ef:2e:e9:8f:b0:cf:a6:84:af:38:
                    ca:d9:14:46:f0:9a:97:dd:01:69:de:9a:75:cd:34:
                    fe:74:8b:6d:87:4a:f3:ce:0c:56:04:eb:ec:6d:30:
                    cf:06:fc:ff:8c:d6:b3:74:6c:f0:46:27:cf:2a:24:
                    ab:3e:58:82:ae:b9:90:5a:e1:d0:8c:85:20:4c:ae:
                    cc:3b:3b:04:18:ce:64:9e:dc:68:4c:44:30:6d:cc:
                    54:39:7c:b8:5b:14:8b:a5:ca:5e:7b:81:04:bd:73:
                    af:20:4d:18:6e:fd:10:d8:b0:c1:2c:7e:f7:89:c8:
                    0d:f7:9a:e1:10:d9:99:80:5c:1e:7c:33:05:48:ac:
                    66:5b:da:02:95:10:36:73:3c:c2:1a:2f:fd:17:fa:
                    cb:5b:f5:77:c9:37:70:a2:ba:0c:37:41:20:5b:e9:
                    92:c1:36:28:02:4d:cc:a2:f2:22:87:2a:4a:00:26:
                    e7:31:dc:1e:db:97:b0:d6:b4:d3:ee:50:51:92:ef:
                    e8:0c:9c:ee:ae:7c:e0:15:a9:ee:0b:2c:b5:00:40:
                    e1:3c:22:6b:8d:54:70:e9:67:82:f1:45:5a:76:3c:
                    56:ef:ae:85:3e:b7:14:b6:24:7c:bb:de:27:e5:ab:
                    b9:c4:ad:87:75:52:a2:53:11:56:4f:a4:62:7d:58:
                    47:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B8:9A:CD:D2:61:96:4A:4A:F5:44:58:39:7F:2C:B7:17:2F:39:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8ce56615-c439-3bc8-91a0-daee515d8467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b8:fa:7d:4b:b2:47:31:a3:fc:04:0a:9f:9b:a7:0b:8a:5a:
         55:0f:5c:4a:d4:07:84:41:1b:dd:ed:5d:65:3d:3d:6a:ec:41:
         80:d5:3c:d8:ab:65:53:95:1f:1e:87:a3:d9:f2:df:75:4e:66:
         15:c6:8b:a5:8a:8b:52:bb:99:82:25:43:c2:b9:33:2b:d6:69:
         00:f9:ba:89:1d:b5:a4:61:31:28:30:37:de:f9:ee:0a:f7:51:
         84:7c:fe:52:2c:ae:08:85:13:75:29:33:2c:18:f7:61:27:91:
         e2:fe:c4:5e:42:e4:5d:04:1b:e3:70:ac:33:f5:45:e5:56:34:
         c7:5d:11:b9:2b:06:30:6d:2f:a2:b2:b7:15:3a:7d:0e:e8:0d:
         e6:ba:77:55:bf:f3:98:ee:32:b4:4b:95:11:1e:56:99:23:ee:
         b9:bb:d8:81:57:bd:33:08:9c:71:87:8b:bc:2a:86:94:c6:6c:
         be:f8:ad:bd:50:2d:64:86:ad:f8:9e:b9:36:77:7c:6a:3b:c5:
         85:92:fa:c2:c7:2f:8b:af:83:32:2e:9d:04:0e:54:8a:f3:5c:
         ef:7f:36:b1:b6:a3:7f:8c:73:e0:76:10:23:82:e1:df:27:06:
         ef:a7:9c:81:00:f0:c1:20:52:73:95:f3:1d:c9:07:69:0c:d8:
         db:a7:fd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----