Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c8a0eb-1400-31e1-9a2f-4cc3982c4f76.roa
File:                     25c8a0eb-1400-31e1-9a2f-4cc3982c4f76.roa (raw, json)
Hash identifier:          QYP3/YWy3LnVFDTI1G9kNrAwMfVo6b7GRwEpYzhuL5A=
Subject key identifier:   D4:2D:F9:0D:35:6E:2D:6F:06:8E:0B:29:40:1B:A1:7C:62:49:14:FB
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE3DC53C24E68E033651E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c8a0eb-1400-31e1-9a2f-4cc3982c4f76.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     7122
IP address blocks:        64.4.64.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e3:dc:53:c2:4e:68:e0:33:65:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=9f3de318-3ad7-42a4-8548-6075e1bebcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:60:2e:b6:f9:65:4c:e0:61:9a:9a:da:29:
                    87:22:08:b3:35:2e:93:c3:2a:ac:ea:2c:6e:b1:d5:
                    01:4b:76:73:e2:33:f6:f1:51:52:12:c5:bf:36:4c:
                    c0:e8:87:b6:d3:1d:11:2d:d6:5b:2d:48:60:01:a1:
                    05:9b:19:1a:1f:42:ab:e6:f3:34:9b:b5:e8:3e:4f:
                    67:eb:f0:9b:6d:fb:96:ba:42:8d:2d:bb:2c:39:61:
                    6b:f2:2b:ce:d8:7a:be:5f:62:d3:ef:7f:43:49:12:
                    fc:9f:fd:41:13:f6:8b:e8:95:9c:ff:e7:be:16:4e:
                    ca:82:45:73:3d:0d:a2:8b:d1:c3:4b:bf:ec:eb:93:
                    8f:b5:dc:d6:34:d3:87:9f:ec:88:05:08:4a:d0:bc:
                    ce:88:94:d3:a4:90:53:0b:2e:57:62:9f:87:f2:a4:
                    b1:44:86:64:cb:83:f9:4b:f9:4b:3f:18:6d:93:5c:
                    8c:13:56:ec:2a:d0:7d:e9:97:48:f6:9a:a7:e3:70:
                    5c:42:e6:24:76:ee:b5:ea:e4:98:11:90:11:5f:4c:
                    ac:2b:cc:7d:fb:86:0f:5c:eb:f5:7c:c2:29:d2:20:
                    ae:42:48:44:af:76:59:37:81:e0:55:4d:ff:4b:de:
                    74:d0:24:e2:ba:22:6c:25:90:63:d3:aa:5c:33:ce:
                    71:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2D:F9:0D:35:6E:2D:6F:06:8E:0B:29:40:1B:A1:7C:62:49:14:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c8a0eb-1400-31e1-9a2f-4cc3982c4f76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:50:c0:4a:42:f2:3d:6f:90:75:2e:0e:4c:7b:06:c6:4b:4a:
         f4:15:10:a1:79:43:02:3e:9b:2b:c6:32:61:54:31:65:a9:da:
         ca:41:51:77:1a:63:9e:41:55:64:17:cb:94:59:89:b3:90:12:
         6e:59:ed:00:81:12:ac:6b:3c:07:fd:89:28:ef:d0:36:0d:17:
         63:e4:b4:e1:10:4f:3c:97:e1:fb:7e:b9:a7:35:0c:66:7c:49:
         f6:26:a4:d6:36:6c:53:f0:b9:84:a1:ff:6a:e6:5e:2b:12:50:
         dc:e7:fa:e8:92:2a:a0:0d:e6:91:6c:86:93:c8:77:f1:4e:40:
         80:75:01:7e:59:5c:02:c0:f4:05:77:8e:90:b9:5f:12:a2:82:
         2e:77:fb:51:34:7d:10:7f:a1:4d:81:13:14:cb:4b:20:b7:a9:
         e1:81:40:4d:34:cb:22:4b:c5:d0:bc:1d:4b:71:15:fc:6b:63:
         1e:fe:da:20:63:79:ec:c1:a2:d8:0a:ad:f8:0c:4b:92:58:fe:
         b8:14:6b:97:08:ff:5d:15:62:1d:b7:24:e0:57:5a:b5:47:0b:
         6f:f5:98:5e:9f:87:2e:60:15:bb:3e:dd:cb:77:30:21:bc:22:
         88:d7:97:58:9a:59:b4:f2:6d:9a:47:79:75:9d:c0:d7:00:49:
         d7:88:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----