Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2365a4e9-e245-3394-9cfc-cc6c8b841d20.roa
File:                     2365a4e9-e245-3394-9cfc-cc6c8b841d20.roa (raw, json)
Hash identifier:          Q3KQUOEgZO0Lo+RdqsUasiJjd2TdkdrSi721D3F4y00=
Subject key identifier:   88:48:53:9B:7D:15:2F:D2:07:0C:C4:FE:FE:31:D6:33:D3:AF:50:A3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE4C9C24B826D11329480E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2365a4e9-e245-3394-9cfc-cc6c8b841d20.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        142.186.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:c9:c2:4b:82:6d:11:32:94:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=a304690a-9482-466c-885e-b11d4ec29679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1d:ab:90:af:47:4a:c9:87:a5:0f:11:b0:04:
                    88:7e:69:7c:dd:18:3b:f9:a9:66:7b:c1:a5:5e:ad:
                    a9:59:51:d2:e2:3f:26:1c:f5:2b:fb:55:dd:cc:6b:
                    ca:e0:74:b0:c3:61:45:28:5b:38:f8:79:88:ad:f1:
                    ab:ff:d1:85:41:41:c4:a7:27:72:92:38:bd:96:77:
                    94:c3:1b:81:fd:ca:bc:87:5d:81:ce:85:f1:f6:75:
                    cc:21:57:2c:97:67:f6:42:f2:b8:a0:36:3f:79:a0:
                    e0:3e:c8:b2:df:bb:8f:a4:2f:a6:6c:3e:59:f5:61:
                    37:d3:c6:2f:6f:68:00:b4:28:13:58:f7:e3:4d:9d:
                    78:7c:00:c5:ff:a5:34:6e:b4:3e:f4:07:0c:3c:7b:
                    13:2d:6f:6b:76:bd:54:06:6f:5e:fd:fe:97:44:57:
                    4d:3b:e0:4f:c0:f7:a3:9f:60:73:03:e1:62:7a:62:
                    b9:9c:8f:d6:dd:2a:2f:11:f1:d8:41:39:cd:3e:c1:
                    f0:cd:68:d0:dc:c6:b2:03:16:73:44:ed:1d:7d:45:
                    f0:26:96:e6:76:25:41:86:a5:55:83:62:6a:b5:8d:
                    4a:f1:36:95:ca:36:b0:9f:ce:b1:b1:60:f3:f2:76:
                    82:ef:dd:e2:8f:b5:25:7e:84:b3:b7:99:83:04:2b:
                    fc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:48:53:9B:7D:15:2F:D2:07:0C:C4:FE:FE:31:D6:33:D3:AF:50:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2365a4e9-e245-3394-9cfc-cc6c8b841d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.186.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:67:dc:ac:64:45:5c:a9:52:db:82:4a:52:b1:a1:e8:4e:37:
         45:84:ba:db:a1:de:72:4e:4d:58:bb:a3:79:10:52:a9:18:f9:
         04:a2:36:1e:34:71:a8:cd:55:83:55:1d:07:f8:e1:03:8f:d8:
         c1:d0:a6:a8:dd:f3:aa:f0:c4:2c:a0:74:0d:1c:59:fa:cb:a3:
         16:14:24:9b:01:02:13:9a:60:79:9a:0b:81:b9:73:57:f1:ac:
         2d:ab:d3:ed:8d:39:9c:fd:13:d9:93:4c:40:a9:77:d8:ee:21:
         d6:f2:2a:a9:09:7e:34:c9:c4:6d:92:ab:e4:8f:33:2b:a5:78:
         85:35:59:f8:61:9f:24:ed:bf:c8:e3:35:1a:68:a7:5c:67:d7:
         8e:0f:a5:ed:1b:c9:72:00:cd:12:fe:47:47:15:40:56:26:07:
         b2:d5:6f:0c:47:e5:57:f2:79:6e:85:97:31:76:30:17:4a:51:
         fd:0c:ee:7f:37:a0:7c:e2:12:74:18:2c:25:99:a4:64:97:04:
         e9:7a:53:cc:b2:51:14:36:0b:92:7f:1c:be:a0:76:b4:09:4b:
         a8:62:9a:0f:ef:08:86:99:e6:cd:06:4e:a1:17:89:9f:d8:52:
         7b:c7:bd:cc:49:04:33:15:dc:7f:8c:5b:40:5a:fe:3d:3b:4d:
         f9:f0:16:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----