Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3edfb9bd-1dee-3dc0-ae1a-f342608a8dd2.roa
File:                     3edfb9bd-1dee-3dc0-ae1a-f342608a8dd2.roa (raw, json)
Hash identifier:          fNdgKYTqTMX4tHRCs1//XQr+ernUiLtBUZUZKbL5JT4=
Subject key identifier:   ED:2B:05:65:4C:FB:12:FF:A6:43:60:9B:90:9B:6A:B4:4F:31:B2:97
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA12DC443F472FE645025100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3edfb9bd-1dee-3dc0-ae1a-f342608a8dd2.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     40575
IP address blocks:        209.128.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:dc:44:3f:47:2f:e6:45:02:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=133ed15d-7889-4294-a49c-8c9e321907e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:40:3a:b3:19:34:07:53:24:d1:b0:47:60:
                    bb:9f:c7:3f:72:0e:ad:b4:85:3c:b5:7a:99:12:70:
                    ed:20:72:9f:a4:33:41:60:25:10:fd:37:c4:14:73:
                    74:7c:f0:59:f9:f6:f2:1f:74:21:d4:4c:bc:43:2d:
                    a4:f1:75:55:ef:d4:7c:bd:74:2d:aa:0b:b1:e5:b8:
                    09:68:03:e9:bc:8a:a3:f5:72:db:f0:02:14:56:34:
                    25:73:32:1d:3a:98:ff:9c:8e:07:a3:39:06:17:b6:
                    53:3e:6e:17:69:c1:ce:b7:26:cf:3f:32:f4:11:ba:
                    63:2b:85:3b:f3:47:08:07:be:7d:e0:e2:1b:27:04:
                    cf:f4:0e:61:7d:cb:08:91:e3:89:ae:9b:5b:ed:d6:
                    40:b8:06:06:f2:38:c7:48:e6:83:ea:02:49:2e:d8:
                    a0:02:f7:c5:ca:a5:c6:85:e7:63:8f:4a:3c:cc:9c:
                    b9:f9:de:81:5d:4c:e3:e3:b8:48:64:78:1e:69:fe:
                    b4:53:7d:6b:93:89:00:31:17:e3:f9:4d:a1:85:53:
                    18:c4:03:6f:89:fc:c4:2e:73:d4:c5:a6:1d:ad:fc:
                    be:60:54:76:ca:b0:88:61:d7:ae:34:ec:67:28:66:
                    18:0c:62:1c:6c:68:46:72:12:70:c3:ee:f5:5e:c9:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2B:05:65:4C:FB:12:FF:A6:43:60:9B:90:9B:6A:B4:4F:31:B2:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3edfb9bd-1dee-3dc0-ae1a-f342608a8dd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.128.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5d:fd:3a:ef:74:8f:43:d3:32:0e:f9:34:d2:bb:3e:ad:c1:
         4f:2c:c6:14:ca:ad:0b:0a:0e:65:79:7a:7b:9f:41:3e:07:c8:
         44:ae:da:b7:ec:aa:74:b3:15:f9:2d:2a:65:d5:ec:35:3c:7e:
         f2:5b:8c:b6:52:0a:45:7c:95:58:19:ac:59:59:88:f6:42:46:
         f5:ae:ea:74:f4:45:cc:24:d3:3a:cb:f4:5a:cc:eb:5d:3e:0c:
         22:51:a9:bf:cb:ca:07:0f:52:eb:fd:d5:b7:f5:eb:86:fb:65:
         98:19:36:39:f4:fd:32:6f:10:1d:d9:9b:26:c9:81:59:f7:f5:
         0f:de:d8:24:2e:71:8d:7d:db:c4:2a:95:c8:db:ca:57:9a:1b:
         89:d1:9c:17:f9:64:39:c4:dc:4f:27:e5:58:60:5b:f3:29:03:
         4c:50:1d:62:6f:ad:f1:e7:1a:96:fe:36:23:b7:7c:41:b3:83:
         94:bd:5d:b4:c5:fe:af:f0:97:49:90:73:42:c2:5e:51:3e:0b:
         2a:65:1d:45:1b:20:5d:2e:3b:e6:16:0d:88:86:e7:90:82:85:
         2f:18:fd:8a:a0:8d:f2:54:cc:72:c4:24:0b:bf:90:91:10:59:
         1d:54:b6:ba:b1:6a:fd:03:45:43:72:2d:b0:3f:36:1a:c3:cb:
         4a:52:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----