Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/05d7cb47-ed91-3201-973a-c024dc34a64c.roa
File:                     05d7cb47-ed91-3201-973a-c024dc34a64c.roa (raw, json)
Hash identifier:          trUw5iDuGlvYnc6lbsHOmGeNYgZ9oBfXzejd8MDtknA=
Subject key identifier:   45:9D:79:C1:11:2A:1C:3A:C8:CE:1B:27:C5:BA:35:41:80:10:DC:51
Certificate issuer:       /CN=ce6a531d-4e38-485d-9236-07a5daf2b689
Certificate serial:       010D0C9F43285843CC78C31FC90C445AAF687800
Authority key identifier: D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/05d7cb47-ed91-3201-973a-c024dc34a64c.roa
Signing time:             Mon 06 Nov 2023 14:00:20 +0000
ROA not before:           Mon 06 Nov 2023 14:00:20 +0000
ROA not after:            Sun 04 Feb 2024 14:00:20 +0000
asID:                     396982
IP address blocks:        192.34.32.0/23 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:cc:78:c3:1f:c9:0c:44:5a:af:68:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce6a531d-4e38-485d-9236-07a5daf2b689
        Validity
            Not Before: Nov  6 14:00:20 2023 GMT
            Not After : Feb  4 14:00:20 2024 GMT
        Subject: CN=9ef54616-9bd7-4967-bc6b-697fd3d1271a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:27:52:57:a9:3f:cf:84:ba:ff:9c:e8:08:57:
                    1b:23:bb:a1:85:0e:23:36:40:b4:3f:f4:28:fb:5b:
                    be:f2:aa:d5:05:e8:47:ea:71:50:33:4c:65:b6:1a:
                    1a:fe:9f:71:d2:76:64:44:7c:65:9d:1d:e1:1c:47:
                    6d:0a:40:fc:27:f5:8d:ac:20:dc:e9:ba:d5:81:76:
                    8c:a1:3a:58:7b:ef:b5:fa:40:d7:68:46:3d:ec:9a:
                    c1:47:22:ef:45:1d:62:ae:72:67:a3:53:b8:ca:28:
                    db:f8:b6:c8:ac:b8:62:24:cd:0a:24:38:33:49:a5:
                    e4:4f:35:bf:6b:5c:6e:6e:3b:ad:37:b1:14:95:41:
                    fe:a6:e8:c6:02:75:23:3d:d8:52:e9:fd:98:82:47:
                    11:66:4b:ab:f5:b7:85:b1:4a:96:7c:8e:82:0d:0e:
                    cd:3f:1c:81:f1:63:a5:2e:c0:21:af:44:7e:7a:7e:
                    8b:d1:d4:8c:8c:d6:83:82:95:28:f4:a7:7e:1a:1a:
                    a0:65:8c:74:01:e7:d8:35:ec:b6:a5:c1:70:fb:e3:
                    3b:91:13:fd:d5:ee:a7:ae:03:99:9b:62:8d:9b:b5:
                    cb:e7:68:fa:5c:b2:47:fc:2a:a6:59:14:d2:83:1e:
                    c4:80:dd:bb:4c:6a:e2:86:4b:98:05:45:5b:5f:fa:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9D:79:C1:11:2A:1C:3A:C8:CE:1B:27:C5:BA:35:41:80:10:DC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/05d7cb47-ed91-3201-973a-c024dc34a64c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.crl

            X509v3 Authority Key Identifier:
                keyid:D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:70:c5:2a:6f:b3:06:56:e4:d6:6d:78:5a:98:f8:59:79:
         58:f7:26:13:13:c8:9c:58:29:93:23:f9:4b:10:78:fc:18:09:
         a2:58:d7:61:dd:9d:5b:2c:fc:20:64:f9:1f:ff:6d:26:ea:22:
         ca:73:da:23:fb:cf:be:e5:f9:c2:b9:fe:7d:07:0e:a2:ed:89:
         5e:f8:74:96:9e:10:9a:63:a9:0b:b5:da:a5:4b:1e:e7:1f:bc:
         6c:aa:81:49:f7:a9:98:a5:0a:5d:0d:51:dd:d8:30:52:0a:9f:
         d6:2e:84:61:14:15:12:22:4f:57:6d:fa:32:18:e0:d4:0a:bd:
         4f:f0:cf:0f:a7:39:ec:a8:75:18:f7:f3:e5:79:83:9d:1e:45:
         ff:76:dd:09:5b:49:95:c6:53:e7:e2:08:e1:84:a2:d6:83:50:
         b6:fe:ff:5f:dc:fc:02:10:00:a7:7e:36:c6:95:75:74:07:ea:
         04:6b:ce:76:33:fa:0f:3a:97:9c:3d:f0:8d:70:4a:f1:89:46:
         ef:ce:6f:e3:b7:90:4f:e1:32:05:c7:09:95:ea:0f:e8:fc:60:
         72:05:bb:75:6b:43:91:aa:84:35:a2:07:8d:9f:fb:0a:7e:79:
         66:2b:28:04:3a:53:d6:02:62:ee:d2:3b:72:53:c3:9c:a0:52:
         9d:9d:3a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----