Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e98d183-2da2-3111-8eb0-2026446f8ba0.roa
File:                     7e98d183-2da2-3111-8eb0-2026446f8ba0.roa (raw, json)
Hash identifier:          cvmY9WT5GWAeO7LdG8N8by5eAVmVp0FS5jF89C4tMXc=
Subject key identifier:   A8:71:31:A7:54:FF:F4:A8:4A:B2:87:CD:A2:A5:AC:7A:4C:B0:B9:10
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D3D684EFA1C640FA0A4C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e98d183-2da2-3111-8eb0-2026446f8ba0.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        2001:4958:314::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d3:d6:84:ef:a1:c6:40:fa:0a:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=7756c90d-413e-4153-859a-f9b476ff3844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bd:6e:fb:ab:2e:0c:e9:e1:6f:fe:e1:2d:fc:
                    e0:22:9d:6c:38:b6:0e:c9:e2:29:15:61:fb:eb:f4:
                    c7:35:83:41:67:c7:2d:0c:6a:ef:b1:5f:04:71:c9:
                    43:e8:b2:2d:8e:fa:8d:05:04:a5:26:81:94:0c:c4:
                    04:92:f3:15:53:4a:4c:7b:40:61:70:b9:bf:9a:89:
                    b0:6c:28:7f:39:da:cc:d2:84:af:29:7f:a2:ae:db:
                    8f:d4:34:1f:cc:d7:93:53:18:84:35:9f:bb:ac:36:
                    94:70:d0:a5:5b:df:73:23:bb:12:3a:88:a3:0c:ee:
                    12:c3:9d:28:d7:4b:fe:25:a6:53:2e:4f:64:3c:ea:
                    8a:7d:2d:c0:44:8d:05:2f:35:7c:da:cf:3e:6e:7d:
                    1a:ed:6c:06:02:52:6d:f2:ec:41:ac:28:80:37:9d:
                    35:88:a8:fe:42:62:9b:9a:ea:0f:d9:70:96:6a:3f:
                    b9:a5:47:f7:e2:ee:71:24:a7:3b:e5:22:e4:bd:a8:
                    3c:de:ac:2b:ff:81:ec:db:5b:80:4a:43:cb:6d:69:
                    ba:a3:84:7f:29:72:a6:3e:8b:48:02:8f:87:30:d4:
                    b1:2e:44:95:a2:bb:02:49:66:94:1b:7f:56:18:cf:
                    ea:19:75:0a:9b:43:59:9a:fc:ae:ba:db:a5:d2:96:
                    17:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:71:31:A7:54:FF:F4:A8:4A:B2:87:CD:A2:A5:AC:7A:4C:B0:B9:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7e98d183-2da2-3111-8eb0-2026446f8ba0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:314::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:49:b8:19:21:45:b6:56:ea:e6:16:06:0c:ac:e8:47:f7:8f:
         f0:05:12:a4:80:59:30:09:35:c5:eb:17:97:d0:eb:08:0a:14:
         3b:d1:8c:3f:8f:9a:c0:04:b7:21:3c:5e:4b:63:ec:f6:9c:c4:
         17:a7:f5:fd:29:85:fe:ab:63:99:33:3d:38:5b:9f:18:b4:0f:
         96:84:03:d0:8c:5e:45:d8:29:6e:7e:4c:fa:51:be:01:99:af:
         2d:2f:92:d5:08:b9:8c:09:ed:ec:31:87:7c:ad:93:9b:53:af:
         28:b7:24:da:86:7b:a4:2e:c2:0b:2d:d9:cd:82:23:a2:2c:14:
         55:c1:b9:0c:49:96:25:2c:97:dd:ad:d3:ab:52:9e:b7:48:60:
         ac:85:59:2e:96:1d:cb:22:28:2f:f2:04:13:0e:eb:60:39:30:
         c9:2c:8c:96:04:49:77:d8:ad:3b:33:3d:c2:b1:79:3d:93:4c:
         d0:17:66:f8:38:6e:55:af:0d:3f:10:7b:d0:09:e6:10:38:e1:
         ec:64:81:3e:26:d3:40:f5:0a:91:ce:93:c7:34:46:ce:8b:fa:
         1c:77:dc:39:5d:47:bc:01:b6:93:76:f7:1b:c4:65:67:17:56:
         00:1c:7e:ca:01:06:d7:d7:25:ed:0f:db:7c:2f:bc:ed:7a:e5:
         21:15:01:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----