Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06aa4a94-b610-3646-8dc5-3e7ca5d151fa.roa
File:                     06aa4a94-b610-3646-8dc5-3e7ca5d151fa.roa (raw, json)
Hash identifier:          gu/ckeTjbXpikOboBkktllD9nrC2eiS5BaO4430KZGM=
Subject key identifier:   68:DF:41:46:4C:CE:1A:FA:B9:A6:1A:9C:E4:B1:53:C5:0D:A6:8B:D9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A18A62101C18CCA53E4FA00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06aa4a94-b610-3646-8dc5-3e7ca5d151fa.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        104.197.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:18:a6:21:01:c1:8c:ca:53:e4:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=17c0665c-a613-4502-8922-2b4c0b9aa1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:13:f7:70:51:0e:0d:bb:10:95:63:50:89:cd:
                    d6:c5:a2:fd:3a:21:14:ed:97:9e:79:b9:99:a6:b5:
                    70:da:d3:81:4f:df:39:88:9c:d1:9a:2b:f6:86:34:
                    b6:16:1e:04:f2:7a:ec:dd:99:49:ee:50:05:17:7b:
                    47:16:a6:d0:17:ea:e5:49:a7:a0:34:ad:8a:cd:63:
                    04:95:2f:f6:7d:67:2c:ac:12:ea:94:a1:12:da:e6:
                    b3:70:3c:42:a5:2a:9a:d9:ad:11:c0:a9:32:1a:d0:
                    42:b5:34:f6:9c:05:eb:7e:31:a2:d9:f7:8b:51:0a:
                    75:f8:41:2f:2e:84:65:30:fa:ec:82:fe:4d:b2:24:
                    83:f9:17:a5:85:86:14:f3:c2:94:b9:0c:36:3f:ba:
                    5e:74:f7:c3:6e:81:3a:e1:c7:47:47:bc:3e:f8:cd:
                    f8:cf:38:d7:d2:ea:17:13:d6:6c:66:b2:7a:4e:e8:
                    15:4f:34:e4:c9:da:20:43:16:a4:02:9c:c0:ea:15:
                    3e:b3:e1:58:bb:48:03:7e:12:98:ae:51:d0:bc:e0:
                    f5:41:bd:9c:1c:2e:25:40:44:37:3e:a0:06:3b:06:
                    67:c4:e0:5e:aa:a8:b1:cf:ef:d3:76:48:b5:9b:d4:
                    0c:4e:b3:cc:7e:b6:79:9c:0f:ba:39:4d:aa:9c:ee:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DF:41:46:4C:CE:1A:FA:B9:A6:1A:9C:E4:B1:53:C5:0D:A6:8B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06aa4a94-b610-3646-8dc5-3e7ca5d151fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:c2:aa:af:14:bc:51:d1:46:6c:af:6c:05:8d:84:99:9d:
         c3:c8:e4:74:ea:f0:52:58:83:ac:14:3f:88:b5:a5:ab:e9:39:
         f1:81:17:c9:34:9e:cf:8a:cd:44:80:64:84:d9:5f:aa:ce:8a:
         a3:76:3e:6c:ac:b7:38:f9:52:a0:83:ff:bd:4f:a3:ea:59:09:
         82:88:34:0a:a0:29:ab:ed:41:32:9e:80:b8:17:48:6d:80:5c:
         cc:36:ae:bc:7b:bb:79:c9:f0:ea:bd:5a:4c:9d:a8:53:9d:6e:
         5b:a6:e8:bf:fb:eb:d0:21:3b:e9:20:d7:99:f8:b8:9f:0b:c6:
         1a:85:a7:f4:57:5f:21:9d:ab:5f:11:30:c9:4b:b1:5e:4e:ca:
         98:dc:a9:6f:91:ae:82:05:50:7c:83:e6:78:a6:4f:b9:26:8d:
         48:f6:61:e4:d5:be:16:c6:e9:4f:27:bd:b3:2b:86:3b:10:8c:
         fb:66:bf:b6:5c:e4:4c:1a:82:04:82:01:86:f5:a0:bd:85:04:
         2b:11:0f:a4:e9:6b:7f:86:d8:62:55:a3:6a:19:94:22:fa:dd:
         c5:35:0e:5d:eb:34:75:b3:47:72:94:6c:d0:7c:7f:31:9c:d2:
         0f:46:57:dc:04:90:56:a6:5c:f0:55:17:1d:b7:1b:17:4c:4f:
         cc:98:21:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----