Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/756ec332-1cc0-3943-a4fc-79356520751b.roa
File:                     756ec332-1cc0-3943-a4fc-79356520751b.roa (raw, json)
Hash identifier:          LQRMnF2N/fkUXWVUSJOZqZTiRLFT4qAlCw6cvt4hpH4=
Subject key identifier:   B8:47:0B:33:2E:D6:28:03:C5:5E:6F:0B:11:B9:1F:3C:9E:16:E8:7D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FED26EAA0A82846A7EB6AEE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/756ec332-1cc0-3943-a4fc-79356520751b.roa
Signing time:             Tue 15 Nov 2022 12:00:00 +0000
ROA not before:           Tue 15 Nov 2022 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        70.30.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ed:26:ea:a0:a8:28:46:a7:eb:6a:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 15 12:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=ed5cd65f-eb54-445f-b425-ba200fcc4e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5b:d7:f8:1c:a6:8f:1d:80:4e:1e:d9:8d:22:
                    1f:2c:76:b5:16:b3:0c:9d:60:09:f6:ee:a9:f1:64:
                    ae:ee:68:a9:82:07:c2:f7:25:98:60:03:53:00:a1:
                    60:ab:81:4f:0c:b2:2a:a2:55:a6:f5:6e:3d:21:bf:
                    54:0e:3d:f5:ca:9b:e9:93:83:be:a3:f2:cb:71:b1:
                    97:95:86:d6:b3:0c:c5:fe:2a:5e:57:95:2b:8e:4f:
                    75:22:82:39:a5:f0:8b:b7:09:31:99:ed:ab:b4:b4:
                    78:b4:ad:df:2e:10:c9:37:ff:15:54:54:99:d6:b7:
                    9a:59:78:6a:91:df:31:f0:48:48:3e:20:78:6d:a1:
                    ca:b6:37:bc:ed:af:76:55:af:54:b5:64:10:c2:94:
                    23:8f:01:68:fe:42:ac:f1:74:de:3b:7b:87:b9:f0:
                    3a:56:70:ff:6a:46:6b:b8:46:1b:6e:a9:c5:30:b9:
                    bc:7c:61:71:3d:fe:5a:01:a6:51:3d:ba:6d:98:f5:
                    bc:19:5d:3b:a1:f1:d0:a1:6f:1b:b0:d0:81:66:3b:
                    85:d2:a7:86:de:9e:8d:54:1b:c8:09:3d:a6:1b:7e:
                    2e:ab:d1:a3:fb:c3:e6:fe:72:e2:39:42:5c:8c:a0:
                    12:34:14:78:85:4b:69:81:30:98:56:0d:9e:d2:fa:
                    a0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:47:0B:33:2E:D6:28:03:C5:5E:6F:0B:11:B9:1F:3C:9E:16:E8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/756ec332-1cc0-3943-a4fc-79356520751b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:39:af:83:3c:73:c0:89:46:62:ba:a0:7d:08:01:5e:ad:db:
         d0:74:4b:ba:bd:2b:8b:51:99:7d:c7:ff:14:0a:4c:4b:7b:78:
         3e:d2:2b:ce:86:89:d2:e5:b4:88:25:c9:36:cf:f8:b8:48:87:
         28:86:fa:3b:b2:9a:b2:51:e2:e4:4e:4a:a1:a7:c2:11:ec:d4:
         91:25:b3:29:a8:c7:05:c4:95:9f:08:52:fb:65:e7:d5:d6:04:
         b8:e1:bc:fc:1f:40:48:b5:8b:79:3e:69:67:2c:44:a7:49:3f:
         ee:8c:3b:0c:03:e2:d2:7d:f8:89:04:a5:5f:17:4a:0b:25:c5:
         97:f2:73:78:78:d2:46:8e:19:9f:d8:b2:47:3e:03:6c:31:dc:
         43:ea:4d:2f:0a:15:7e:26:cb:91:f1:47:24:a8:12:64:1b:b8:
         88:b5:bf:c4:59:c9:3a:5f:c4:46:a0:d9:f3:0d:22:5d:15:c7:
         82:2d:90:cd:21:0e:bb:00:d8:3d:1f:37:e3:78:96:19:bc:6c:
         9c:9e:b3:38:78:23:8e:53:7a:b4:1f:fa:ae:93:a1:72:74:dd:
         64:61:f8:d7:fa:4e:fc:fb:7c:c8:ff:53:48:15:4f:85:06:11:
         08:8c:54:15:31:17:8d:09:3e:d8:19:ed:53:bf:e5:5e:b9:d3:
         8c:f3:22:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----