Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/1999c3e5-e5c1-32d2-a7d2-8a87f87f5435.roa
File:                     1999c3e5-e5c1-32d2-a7d2-8a87f87f5435.roa (raw, json)
Hash identifier:          qZpxC4hAJW5aB4mHs8J/oEZu0hwx5vd6hz6zTIB84sQ=
Subject key identifier:   80:88:FC:A8:41:C8:30:A3:98:2F:68:D1:EA:31:C3:65:72:83:EA:1E
Certificate issuer:       /CN=d9f752bf-5611-40d8-90f2-7c7c59c005f9
Certificate serial:       010D0C9F432858483A8723EC58D1AB6A1DE70300
Authority key identifier: E4:F6:44:14:85:F4:F3:BF:C9:05:75:AF:CA:C3:D0:7D:40:67:EF:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/1999c3e5-e5c1-32d2-a7d2-8a87f87f5435.roa
Signing time:             Mon 16 Dec 2024 19:16:04 +0000
ROA not before:           Mon 16 Dec 2024 19:16:04 +0000
ROA not after:            Sun 16 Mar 2025 18:16:04 +0000
asID:                     53271
IP address blocks:        24.38.136.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3a:87:23:ec:58:d1:ab:6a:1d:e7:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f752bf-5611-40d8-90f2-7c7c59c005f9
        Validity
            Not Before: Dec 16 19:16:04 2024 GMT
            Not After : Mar 16 18:16:04 2025 GMT
        Subject: CN=5e0ee8eb-0b50-47ba-91ca-54e228472a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:89:a3:73:a7:3b:d8:f4:15:97:6a:2e:62:
                    4c:2c:a0:84:08:0b:3a:11:b5:26:33:5b:84:28:39:
                    3f:1e:19:03:07:c4:e5:6d:32:67:97:77:24:b6:cb:
                    4b:9c:d0:27:a4:84:37:79:57:5c:40:62:07:d9:16:
                    19:51:9d:dc:55:8e:81:0a:36:cf:32:02:c3:07:ae:
                    1a:06:06:9c:dc:5e:c1:73:fb:44:58:f7:9d:26:2b:
                    b1:e0:46:80:ae:60:5a:ba:36:05:22:96:8c:11:36:
                    fc:38:43:4a:64:d6:91:c8:91:51:45:f0:64:2d:fc:
                    7d:e8:c3:6c:fa:ba:96:ff:80:98:36:b7:b2:ef:0b:
                    c0:5c:e0:60:5d:3e:30:fa:50:53:e2:2f:a7:b2:2a:
                    aa:ce:f1:16:71:5c:05:22:48:42:34:1a:bb:0a:ad:
                    6f:4a:07:9f:fb:b4:d2:f7:6d:b9:68:52:12:89:9f:
                    aa:29:03:df:bf:5e:26:7e:aa:c9:09:19:91:1d:4c:
                    48:2d:42:b6:94:e3:dc:8c:dc:cc:7f:21:4a:0a:54:
                    b5:50:ee:d0:8e:f7:ae:18:d4:79:85:f8:14:6d:9e:
                    e8:67:ef:a8:b2:7b:21:1f:a3:35:df:05:11:dc:a2:
                    e6:ba:68:78:68:14:28:ca:d3:ba:5e:a1:0c:03:dc:
                    6b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:88:FC:A8:41:C8:30:A3:98:2F:68:D1:EA:31:C3:65:72:83:EA:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/1999c3e5-e5c1-32d2-a7d2-8a87f87f5435.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/d9f752bf-5611-40d8-90f2-7c7c59c005f9.crl

            X509v3 Authority Key Identifier:
                keyid:E4:F6:44:14:85:F4:F3:BF:C9:05:75:AF:CA:C3:D0:7D:40:67:EF:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:62:da:07:e9:4b:88:e1:6e:f6:86:8b:bc:5a:e9:c4:4c:6b:
         b1:82:76:88:a7:74:7d:e9:d4:61:13:d7:47:5a:43:c7:ae:8b:
         e2:4d:a4:c1:ac:44:99:ae:33:5c:35:70:6f:90:bb:fb:c4:2b:
         d8:a6:b2:64:8f:fb:72:16:af:9b:e9:c3:ad:82:da:7e:8c:93:
         31:a0:e9:17:44:22:ac:65:e5:81:ce:0c:03:35:3d:9a:d0:bf:
         d8:e2:a3:f8:a7:9c:f5:99:bf:8d:18:b8:c9:3e:ab:11:f5:44:
         62:0d:15:e1:a2:43:41:88:ec:81:3d:da:1e:da:7e:6e:61:d1:
         9f:48:b6:72:c2:2a:4f:78:e0:a9:19:ff:c0:93:28:c4:cf:e0:
         a2:3a:26:c8:0c:ef:76:ac:b8:f0:cc:70:73:e8:c5:9b:06:57:
         2d:ab:96:12:19:eb:a6:17:22:43:17:c8:8f:7c:84:cd:6e:c1:
         39:18:bc:53:24:75:f3:ec:e5:a2:49:a8:85:d7:dd:41:f7:48:
         42:3d:ba:3c:79:cf:d5:12:bf:9c:b1:51:0b:5d:26:c9:e0:8d:
         a8:ef:d5:b6:0a:3d:2e:9d:19:7f:a0:54:f7:a5:d6:c1:56:6d:
         de:5b:1f:bd:11:ab:03:32:e7:05:7b:79:1e:49:46:f6:3f:1a:
         3c:c8:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----