Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac04e18-4bc1-36b4-af9e-8fba14a17833.roa
File:                     5ac04e18-4bc1-36b4-af9e-8fba14a17833.roa (raw, json)
Hash identifier:          30chqzp22cTkrVYPRuSctYaYr9L/JFZhU5tgMeldbGo=
Subject key identifier:   69:93:23:A2:2A:9E:DE:6E:9C:D2:04:03:FD:F6:11:FD:44:6D:7A:0A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D409538E5344D527EC9700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac04e18-4bc1-36b4-af9e-8fba14a17833.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        139.142.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d4:09:53:8e:53:44:d5:27:ec:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=1568acf1-f634-4cd0-8061-1b304687ef01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:7a:51:8b:52:f3:b1:d8:03:3b:cf:28:57:
                    5d:0a:e1:66:93:52:09:a6:13:74:90:3b:dc:e1:8f:
                    0c:b1:02:c8:11:2e:ab:61:2a:7e:e5:bd:fe:53:a8:
                    2f:88:e2:a1:5a:86:ca:00:7b:b1:96:38:c5:0b:3a:
                    4e:02:e3:1f:d8:1a:20:2d:33:01:78:4c:db:8f:44:
                    ef:6c:ea:8c:58:bc:7e:e8:e6:c1:a9:51:71:4a:51:
                    51:f4:a3:72:cd:39:df:fe:3c:ba:3d:8b:d8:da:4c:
                    5a:7d:cd:82:70:f3:d1:f7:00:2a:2b:1e:67:69:02:
                    18:9d:1a:c4:30:c4:ea:e1:45:7e:e1:02:fe:67:d8:
                    97:8b:ca:3d:98:68:27:ef:34:ff:a6:7e:d7:69:e7:
                    84:86:67:68:e8:50:4c:15:91:25:c5:e7:7a:a5:58:
                    4b:ff:de:3e:dd:94:4b:6a:37:11:67:e7:3d:8a:cf:
                    8b:08:fe:e2:e7:2f:94:50:d1:ea:93:37:56:74:70:
                    8e:9a:55:9f:7a:80:a6:97:4c:5e:c8:83:7c:22:42:
                    e9:b9:d6:0c:8e:06:bb:00:07:5e:70:50:f9:28:96:
                    4d:bd:0f:fb:02:1d:7b:86:12:19:b6:f6:06:1d:ea:
                    44:b4:10:6b:fe:e9:e7:a1:67:39:81:c1:bd:77:a6:
                    cf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:93:23:A2:2A:9E:DE:6E:9C:D2:04:03:FD:F6:11:FD:44:6D:7A:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5ac04e18-4bc1-36b4-af9e-8fba14a17833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:0c:c8:2a:2b:50:36:9a:7f:0c:2b:8b:e8:72:a3:77:7d:b5:
         e2:3e:18:86:f8:31:d4:98:99:4c:f3:5c:7e:d0:af:5c:bd:cd:
         e1:0f:2f:69:30:35:af:1d:c5:66:46:4a:7e:d0:f7:17:79:50:
         4e:08:18:f4:ae:31:46:54:92:53:6e:54:8a:c4:89:ae:22:ea:
         33:26:19:92:a3:9d:0a:3a:cc:11:1a:b7:43:e6:59:3b:65:7a:
         52:b4:b4:55:1e:3d:36:33:fb:40:f2:f4:19:43:b3:eb:da:68:
         60:61:e7:86:fe:a0:66:ce:bc:ec:44:4e:f5:86:0e:d6:99:51:
         43:ff:ca:70:ec:a5:81:56:7b:df:47:8a:46:6b:c0:09:d9:72:
         b1:46:e5:a8:e9:52:d8:ba:cd:7c:55:09:85:73:63:af:25:22:
         59:51:4d:c1:4a:78:86:ab:af:ca:6b:2b:f7:17:dd:98:86:5c:
         59:56:cf:b0:06:5a:7c:6d:b6:cb:62:da:4b:c3:fa:2a:49:d8:
         95:92:9d:30:a8:d1:9c:33:2c:32:05:bc:d7:f0:89:34:f0:ed:
         d1:83:4d:ce:82:a5:74:89:1b:19:41:03:c1:ce:93:19:e5:ce:
         27:58:ef:15:db:ef:45:07:0a:6a:16:8c:5a:e3:05:6a:de:fd:
         54:5a:bc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----