Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c65917f-a190-3014-ad22-ccd73e5f9e8a.roa
File:                     3c65917f-a190-3014-ad22-ccd73e5f9e8a.roa (raw, json)
Hash identifier:          mA4+GzVlZG3c/s+MvPArq6xM7izzA5jRyQpFkknGh5o=
Subject key identifier:   65:6E:E4:A5:75:3E:DE:5D:52:D4:03:18:C7:5C:89:A9:D6:1F:32:71
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE48F494A26D17E99879B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c65917f-a190-3014-ad22-ccd73e5f9e8a.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        76.71.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:8f:49:4a:26:d1:7e:99:87:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=ed0fd9a7-f41b-4e4e-88d1-11c30116fe5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3d:b6:e0:77:b0:7a:98:95:b5:12:b8:3b:72:
                    5f:5f:c2:bb:9d:7c:20:30:e7:fb:21:59:55:71:4c:
                    01:28:fd:ff:4b:ee:8e:31:29:99:b1:17:6c:bd:d0:
                    28:25:81:1e:d2:eb:54:40:90:37:33:1d:78:72:76:
                    b9:54:bd:b0:24:f1:6d:74:8a:97:cb:62:f7:1c:ce:
                    d8:ca:09:99:42:c5:84:a5:eb:ec:bd:66:ed:f8:df:
                    1f:e6:cd:ef:60:ff:03:27:61:b0:5c:93:4e:47:34:
                    d4:44:cc:46:8c:f7:b4:04:e8:41:d2:2f:73:94:16:
                    40:fa:0a:7d:fb:4b:5e:8b:37:a0:b3:f0:5c:85:69:
                    08:ce:57:80:f5:bd:78:cd:a4:ee:c3:99:83:ae:04:
                    09:ee:29:cf:4b:00:70:60:f9:39:ac:c9:cd:9c:e4:
                    bf:c3:7f:dc:15:ef:dd:52:bf:46:d8:83:48:d0:e9:
                    e3:e3:df:ef:65:ca:e7:4c:6d:a2:a2:55:64:11:52:
                    cc:ff:d6:bf:eb:c2:86:5d:28:e3:48:33:16:5e:1a:
                    bf:27:1d:4a:94:ef:60:6c:91:0f:89:16:cd:1c:0b:
                    ab:db:83:e8:78:22:d8:bd:6f:e9:30:1a:85:50:b8:
                    b7:5b:0b:d3:5f:88:f8:1e:ec:9a:19:ed:e4:4d:24:
                    a2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6E:E4:A5:75:3E:DE:5D:52:D4:03:18:C7:5C:89:A9:D6:1F:32:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3c65917f-a190-3014-ad22-ccd73e5f9e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.71.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:3f:c5:97:7f:27:2c:dd:3e:59:42:cc:67:e3:6f:68:a3:1b:
         e1:b0:89:ed:0d:6e:a4:7e:38:eb:4e:f6:fb:4f:fc:03:15:19:
         47:26:b0:0c:cf:e5:94:44:42:04:9a:da:0e:3f:5d:8b:75:47:
         ee:ba:7c:6d:ed:16:6a:ad:e3:42:58:d2:9a:d2:cf:8d:d3:50:
         bd:ce:94:61:fd:d6:63:d7:37:ae:dc:c4:6d:ee:ec:6b:99:ad:
         1d:77:b6:3e:a1:59:1c:40:83:46:24:f6:3e:a0:c6:41:db:a7:
         64:b9:c5:50:bb:00:05:fb:8e:56:13:a6:9b:8a:c0:c9:88:19:
         70:19:ce:ac:02:36:54:ec:01:97:00:27:7d:70:e5:f2:16:f1:
         54:8f:64:7e:1e:81:46:61:90:d3:15:eb:f5:5d:02:b4:0e:96:
         2e:3b:44:82:41:e8:42:27:6d:f5:dc:29:10:63:68:f8:ed:24:
         79:f9:bc:b1:6f:7e:ed:00:3c:81:b8:f8:c6:6f:33:8d:d7:18:
         80:d7:ff:3c:7f:c9:8f:93:97:3d:f3:de:31:d4:3e:f2:5d:29:
         de:57:71:32:ad:9b:f9:cd:95:52:f7:b5:e2:f6:14:ff:9b:35:
         5a:65:1a:a3:f9:cf:89:cf:73:c2:00:1e:94:16:32:75:63:7a:
         98:4b:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----