Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/761342fa-2421-3228-8427-275c810c4402.roa
File:                     761342fa-2421-3228-8427-275c810c4402.roa (raw, json)
Hash identifier:          CS0AJPJz05u6un8nMrgi+SsmHlO0lw+yifPTLxoFN04=
Subject key identifier:   C6:E7:D8:2F:40:9D:EC:50:7D:36:95:22:39:C5:2B:5C:8B:93:EA:6C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493145FBED23BF78BEB5932C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/761342fa-2421-3228-8427-275c810c4402.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        174.92.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:5f:be:d2:3b:f7:8b:eb:59:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=6568c708-4280-4055-bfa7-170d898638ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:32:1f:e0:dc:16:69:88:45:a6:21:c7:b6:
                    30:81:90:2b:77:e8:b5:b7:83:37:c0:3c:2d:8d:43:
                    cf:ff:97:87:09:9d:96:b9:d8:08:d0:8a:c7:69:40:
                    16:c3:90:43:91:02:a8:c0:f0:67:66:d6:6b:e5:19:
                    c7:1b:8f:d2:39:80:24:10:5c:18:dd:e2:0d:3e:48:
                    d1:87:f1:ea:fc:95:f5:63:db:2e:a5:ce:9c:fd:82:
                    2f:e6:93:84:41:63:bd:f4:f8:a6:98:8b:4b:cf:8d:
                    06:8b:fd:ee:d5:71:88:cc:46:13:4e:c1:37:bd:4b:
                    fa:d0:eb:dc:25:6d:c3:44:89:15:e0:2f:3a:53:ae:
                    f8:b6:4d:c0:29:f0:6d:16:97:7a:36:1f:da:40:5c:
                    3a:92:81:70:0a:9f:fb:c0:cc:ff:b4:02:ac:1d:6d:
                    d2:f2:1e:bc:c0:73:37:06:ef:f6:50:59:c8:b9:fc:
                    87:bf:4c:76:80:0f:ec:89:99:8a:e7:b7:00:9f:cb:
                    58:e2:5a:2e:80:9e:4f:01:88:76:f4:16:81:5b:04:
                    28:87:d4:89:02:f5:e3:e7:5a:a7:70:86:f9:51:d6:
                    f2:75:fd:9d:b9:7c:3f:ff:de:84:b1:1f:3e:a2:32:
                    22:f6:d3:9e:1a:d4:22:ec:97:98:a2:11:67:39:aa:
                    d8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E7:D8:2F:40:9D:EC:50:7D:36:95:22:39:C5:2B:5C:8B:93:EA:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/761342fa-2421-3228-8427-275c810c4402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:68:40:97:40:8a:d8:c9:20:93:02:93:de:2e:45:cc:3a:fd:
         e3:20:a5:24:6a:35:7a:32:da:ce:9b:32:7f:82:e9:81:58:77:
         af:89:74:aa:6f:c4:5d:6e:de:e6:b8:54:41:96:08:ac:db:7f:
         5c:59:b8:0f:6c:86:2d:d3:38:4c:43:c9:0a:9d:80:ea:b4:de:
         19:9f:c6:63:b8:1e:43:4d:c6:8b:42:78:6d:33:1f:9f:01:fe:
         94:15:28:4f:ce:8a:bc:4e:4b:a9:e7:80:5f:8a:67:bc:a4:7b:
         c6:f7:ad:12:d4:91:cd:e0:1d:d4:2e:ae:25:b8:cd:d7:91:33:
         72:75:2c:f3:fc:3a:9e:dd:96:13:90:25:9a:cf:7e:5e:b0:c6:
         f8:bd:4a:a5:1c:52:33:1c:bd:de:97:33:80:0c:72:44:e2:90:
         0c:29:8b:e7:19:69:38:26:be:47:69:59:99:94:2f:d0:5f:9b:
         60:b8:a9:bc:27:5d:29:72:78:7a:93:ce:3d:28:30:23:4d:1c:
         db:b6:31:9a:88:6d:ff:01:23:17:2b:5b:dd:62:6e:d4:2d:08:
         ff:46:53:7c:7e:c0:c5:ab:96:52:13:10:ae:3c:ef:bc:db:7d:
         3e:2b:99:ad:c7:1b:71:ee:0b:1e:72:9e:c5:1e:96:5b:36:ca:
         eb:7b:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----