Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0404b22b-6052-344a-81ae-f371ec244f46.roa
File:                     0404b22b-6052-344a-81ae-f371ec244f46.roa (raw, json)
Hash identifier:          0vRVDqJ+NzIIzkoEGJQ8D15wMwcmigsjhsPfvtPWfNw=
Subject key identifier:   49:FE:6F:8D:22:8F:9A:99:CB:D8:72:4E:B9:E2:18:30:AF:81:B0:FB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449315A9B62182942F4CBD0C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0404b22b-6052-344a-81ae-f371ec244f46.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        207.61.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:a9:b6:21:82:94:2f:4c:bd:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=9f940ed9-b56f-416a-9e24-462d2cf6b5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:5c:b2:2a:f4:3c:42:83:81:c0:53:04:70:
                    44:e1:2e:ad:4b:64:f0:46:19:d4:2c:78:3c:17:c4:
                    28:ac:a3:c1:ce:06:5d:9b:64:27:95:b4:85:15:3c:
                    ac:e5:28:e3:20:4e:e9:9d:35:36:d5:0d:cb:bc:7c:
                    d5:a7:74:31:8b:b9:d7:65:ea:aa:60:be:22:40:24:
                    a4:34:01:3a:96:4c:e4:6f:a1:3d:7f:8e:a2:45:ce:
                    a8:c2:0e:3a:c3:fe:35:43:e4:59:8f:69:13:bb:df:
                    8d:17:c5:12:fe:b4:6f:d3:d4:38:90:e5:c7:0c:a3:
                    0f:ed:55:4b:9a:09:57:0f:af:0f:17:68:e6:cc:4c:
                    24:8c:b0:3d:96:5e:d3:55:98:d2:51:02:e9:a6:fc:
                    15:22:e0:30:f5:9c:7c:5f:dc:c4:45:65:ee:4d:c9:
                    d0:bc:a8:51:b2:37:b2:85:82:09:a3:63:26:08:d3:
                    c9:36:88:76:42:ac:71:d8:69:eb:05:13:ab:2f:3a:
                    93:86:49:ac:ee:49:d2:5e:0a:de:c2:fe:b9:54:48:
                    b6:44:92:5d:e2:fa:d3:1a:6f:60:e8:d3:1e:ce:4b:
                    c8:10:6e:53:03:df:d2:8b:14:7f:af:3c:3e:06:35:
                    54:4a:6c:a7:3b:a6:9d:75:b4:22:38:3d:08:4b:ad:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FE:6F:8D:22:8F:9A:99:CB:D8:72:4E:B9:E2:18:30:AF:81:B0:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0404b22b-6052-344a-81ae-f371ec244f46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:af:7a:9e:a6:2d:1f:2f:73:80:38:70:52:0f:6e:7a:a4:
         3b:ba:3c:d9:16:8a:92:f3:06:95:24:c5:bd:e7:23:73:7f:0a:
         27:ca:bb:f7:f1:1e:66:12:a3:c5:6f:4f:c9:0d:0d:9d:cd:5a:
         e3:7f:0f:e6:84:db:af:85:43:77:52:cf:b6:73:ab:58:2f:38:
         d1:eb:a1:f8:37:1a:41:f2:77:f2:6e:4d:dc:9b:9e:87:8d:af:
         05:ad:eb:ef:5f:08:06:e5:a5:10:35:8b:8c:fd:e1:c8:0c:c6:
         9d:c5:8c:17:13:cb:e2:89:42:2a:4b:21:3d:8d:6f:80:93:ed:
         37:f9:e0:fd:a1:2f:28:39:cb:32:4c:cd:bf:42:7c:78:55:aa:
         fe:4e:0e:af:a2:21:55:17:81:1a:0c:3e:4a:48:fb:8d:ab:c4:
         79:74:96:c6:39:ca:b1:c6:8f:98:90:4e:93:e1:bc:11:27:35:
         d8:88:52:fa:64:17:fc:60:e4:78:ed:e6:57:f4:28:41:86:a4:
         2d:c5:59:97:f7:3c:35:f7:5e:dc:df:8e:22:e7:ee:d4:6b:f9:
         21:03:cd:f9:71:39:5e:27:ef:70:74:cb:e7:19:6d:3f:bd:45:
         c0:d1:f4:f7:64:19:c1:cd:ef:bf:17:f5:cf:11:04:cf:2e:8e:
         60:3b:ae:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----