Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9556e070-7f81-3235-a167-d490e32e30da.roa
File:                     9556e070-7f81-3235-a167-d490e32e30da.roa (raw, json)
Hash identifier:          IN6dGTb0KzHebw0YOdjiOWSRyO/MJFNdqcP3mBm99Uo=
Subject key identifier:   B7:65:E0:72:BC:63:E0:1C:85:43:73:67:6F:25:05:BD:81:15:8A:69
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A1C0AA7C6B4C1461DD64480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9556e070-7f81-3235-a167-d490e32e30da.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        104.197.0.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:1c:0a:a7:c6:b4:c1:46:1d:d6:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=7f07dc62-ad1d-44e9-9bf0-c0987e4c11c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ea:cf:99:ca:e0:06:29:62:39:f1:a0:a4:85:
                    d5:49:ac:b2:09:91:b3:35:82:aa:80:23:c7:b7:26:
                    8f:e7:47:08:7b:33:4e:19:ee:32:4d:3f:b6:66:44:
                    ac:88:41:47:ad:58:0d:91:64:12:3d:b1:ac:f1:1c:
                    b2:2f:e9:cf:5b:93:ca:ee:1f:17:61:4d:b9:ad:0c:
                    70:73:34:db:9b:eb:be:95:88:ee:4e:a9:c7:2e:da:
                    3e:40:7a:bd:2c:26:05:76:32:28:d7:9a:51:c6:c8:
                    6b:11:d6:23:7b:b4:e7:f6:13:a0:b2:86:e7:9b:e0:
                    0c:a8:61:66:a6:bb:e5:45:cd:fc:c9:9b:c1:f4:6a:
                    00:e4:2a:09:8f:80:e8:d9:31:b8:4f:17:01:a9:1e:
                    73:1d:87:2c:c0:fb:e4:49:af:be:34:27:6d:49:88:
                    26:9b:fe:fc:95:9c:5d:b8:f6:72:ec:d4:c7:f1:2f:
                    9f:fd:89:27:44:31:d6:77:35:4f:70:7d:df:9c:56:
                    a9:b1:ab:b7:7b:41:86:c3:c5:58:3d:03:44:ce:1c:
                    20:db:9c:87:74:aa:32:08:89:dc:fb:52:8b:db:cf:
                    2a:70:63:57:d6:ff:54:70:30:9c:b3:30:65:8a:a2:
                    48:91:13:c1:c8:d4:ef:08:88:f6:0d:f5:b3:96:a3:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:65:E0:72:BC:63:E0:1C:85:43:73:67:6F:25:05:BD:81:15:8A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9556e070-7f81-3235-a167-d490e32e30da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:83:5d:dd:66:dc:66:05:ab:96:9c:64:70:97:25:f6:76:fb:
         f8:68:a9:5a:75:7d:5f:2b:a2:57:d4:46:dc:ea:9a:92:20:3f:
         9c:0c:18:b4:d9:41:87:a1:04:10:83:17:87:52:d2:29:67:c8:
         89:ba:6d:11:66:f7:44:bf:05:8b:e2:97:53:89:1b:68:77:70:
         d7:7a:28:0a:b9:53:d5:37:b3:69:e9:9b:e8:6d:76:3e:87:dd:
         02:86:56:14:dc:dd:52:6b:b9:39:2a:9d:55:88:ca:b8:3d:bb:
         20:56:cd:f8:39:89:d9:44:f5:d9:2c:70:39:65:04:18:d5:6b:
         72:90:85:fe:d9:2c:8e:0a:10:58:dc:c3:47:d6:c1:1b:21:82:
         b6:69:e7:cd:55:45:82:f5:c5:47:be:f7:ce:2a:b4:35:e1:0b:
         e5:68:64:eb:ad:98:57:eb:76:c0:aa:fd:4c:16:a7:76:fc:89:
         b2:02:e7:b5:ee:dd:34:c3:73:9c:c9:3f:55:1b:02:66:01:de:
         db:b5:e5:b5:b6:dc:51:76:35:cd:27:f3:e9:10:de:25:21:74:
         c8:21:2c:cf:8b:3e:4e:b8:7b:1c:bd:90:34:1b:1e:2f:87:99:
         05:11:90:6d:7b:6e:39:8b:a9:c3:47:5c:1f:ca:1d:52:b8:43:
         c8:81:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----