Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/045cb9c0-afdf-37c8-8e23-8bdc9c28d579.roa
File:                     045cb9c0-afdf-37c8-8e23-8bdc9c28d579.roa (raw, json)
Hash identifier:          6Fd90ZOBe6xaBFdlJw2gdiHLffHy8duhnAwwskUqDQE=
Subject key identifier:   66:06:76:A4:CC:47:94:5B:3E:EF:DB:F8:93:BF:4F:06:10:BF:11:E9
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75581634356EAEA5ADD790
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/045cb9c0-afdf-37c8-8e23-8bdc9c28d579.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     855
IP address blocks:        156.34.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:58:16:34:35:6e:ae:a5:ad:d7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=ef01bb73-e516-4074-9488-608fe08425e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:4e:27:f8:e8:e6:cd:8c:5a:ad:86:a4:ca:
                    a9:18:95:0c:8a:a1:81:69:e1:83:92:ca:c3:16:a0:
                    01:94:95:32:55:02:46:79:aa:f9:07:c0:74:2f:0d:
                    2a:a4:77:75:d8:ce:89:14:59:ef:22:8f:df:ac:5b:
                    7d:42:6d:75:07:a9:23:95:13:0e:14:ff:1f:27:31:
                    14:e0:6c:9c:26:cc:b3:30:b7:56:79:70:2e:82:64:
                    05:85:b9:64:7d:be:7e:1d:e0:41:2c:a9:20:e7:e9:
                    8a:89:36:95:75:b2:72:11:73:0c:01:2d:0c:5f:7a:
                    95:d0:7d:d7:4f:88:db:fa:98:74:56:58:48:c9:29:
                    1f:ee:be:00:f1:8e:78:42:0c:02:c4:fb:5a:95:3f:
                    c4:5d:47:ef:b4:6c:d6:d0:e5:0e:a3:26:4c:5e:b1:
                    1b:5a:0e:f3:0a:01:c7:8e:2d:1a:b7:58:c8:41:3f:
                    69:2d:1e:81:9f:6e:cf:32:73:b0:dc:ef:9c:9f:39:
                    b5:60:60:61:57:00:8f:f7:40:35:69:15:bd:f9:8c:
                    11:99:2d:3d:ea:77:f5:14:9a:7e:34:4a:d7:75:3e:
                    de:c0:8d:34:7e:e3:fb:dc:3c:3a:dc:8a:23:b7:f5:
                    ee:5c:68:4f:7e:52:16:c0:10:f5:03:97:e4:3e:49:
                    b8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:06:76:A4:CC:47:94:5B:3E:EF:DB:F8:93:BF:4F:06:10:BF:11:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/045cb9c0-afdf-37c8-8e23-8bdc9c28d579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:15:ed:a5:fe:a7:5f:3b:7f:3c:e1:9c:93:76:12:a3:8b:f6:
         b0:2f:4b:d6:4b:f8:5b:ff:e2:26:39:fd:6b:83:1c:68:a5:c9:
         90:d7:f8:c1:47:d8:1f:e9:21:55:bf:e0:0b:19:1c:e6:7c:3c:
         b4:30:52:b7:6c:24:dc:ab:81:79:3a:c3:99:7b:62:59:96:cc:
         46:f8:1f:ac:0a:1c:97:da:c8:5c:b1:2a:5b:0c:7a:8b:bd:c8:
         0c:87:dd:6d:6e:e8:92:7a:c1:b3:fe:95:c6:0d:20:de:97:34:
         22:8a:47:30:de:00:d1:c9:0b:78:bb:82:2c:c7:38:c1:47:fd:
         54:13:45:56:6e:19:a1:fd:e1:15:32:d0:23:4a:a3:a5:98:d8:
         1f:d5:1d:cb:d6:d7:fa:87:fa:8b:3e:7d:13:d7:df:74:63:b5:
         f0:e9:00:a7:a7:59:c9:89:a3:0b:66:fa:e6:c7:83:1c:d8:13:
         1f:b9:31:4d:66:4f:e5:5a:f5:83:31:f9:17:39:89:50:11:df:
         d5:f5:b5:c7:55:42:b9:97:6a:ad:bf:69:86:85:40:a1:7c:c7:
         32:98:38:d5:e4:3f:10:dc:c7:1c:6c:39:eb:52:35:9b:bb:03:
         07:ac:41:2a:82:94:33:5f:ec:ac:1d:de:99:b9:10:71:a6:8d:
         e8:d6:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----