Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7eddd763-4121-37ed-b7c2-74d800eecde3.roa
File:                     7eddd763-4121-37ed-b7c2-74d800eecde3.roa (raw, json)
Hash identifier:          3M6hnpkwVNvVv7Sqj6Zn3QVfSzG8I36lyU1n9OzFXFQ=
Subject key identifier:   4E:A7:28:11:AD:06:42:C3:0B:12:03:76:B8:2E:97:B2:13:52:9A:A3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE4313D75D436CA8C611BA0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7eddd763-4121-37ed-b7c2-74d800eecde3.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        70.25.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:31:3d:75:d4:36:ca:8c:61:1b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=5fc4f82c-c151-4234-96ea-e34a08971e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:6b:53:ac:a9:a0:4d:a5:c1:08:6b:49:11:
                    89:62:c8:c2:76:5d:b5:2f:61:94:87:f4:5f:12:35:
                    3c:f2:8b:ad:fd:b7:87:35:f9:5b:fe:a2:36:53:62:
                    f4:0c:26:be:9f:1f:a4:e6:6a:ce:13:d1:71:23:97:
                    bc:4b:fc:fd:f2:c8:8b:b2:83:88:d5:e6:ec:08:1a:
                    2a:ec:9f:ad:e2:43:7b:48:4e:e1:64:ea:ba:d1:3c:
                    01:1f:24:bc:ac:8b:c2:9c:f5:a6:9d:ea:0f:a9:a1:
                    02:04:ec:96:c0:36:4b:36:3f:1a:58:e9:73:a2:46:
                    fb:ba:67:b2:b8:5e:25:95:13:42:51:65:8f:ff:34:
                    57:12:76:6e:f6:96:70:be:c2:a7:ec:31:1e:0c:45:
                    b3:80:e0:2d:5e:3e:df:c8:5a:9d:66:75:fc:52:31:
                    f8:64:a2:c5:c0:5f:7b:74:84:58:29:72:b7:ee:6b:
                    14:f4:d5:08:35:3c:fc:00:1c:e4:86:52:29:e0:58:
                    4f:cd:c1:7b:d8:51:47:37:b2:c9:1d:3a:c4:54:bd:
                    b8:bb:13:2e:1a:45:3b:96:be:f5:b7:34:61:61:af:
                    a6:96:91:e9:92:41:b5:72:49:28:96:02:9f:0a:ec:
                    c7:76:44:ff:05:41:4d:75:c2:43:32:c6:04:fc:22:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A7:28:11:AD:06:42:C3:0B:12:03:76:B8:2E:97:B2:13:52:9A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7eddd763-4121-37ed-b7c2-74d800eecde3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.25.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:16:f7:d6:76:67:4f:c7:26:95:67:27:37:1d:c5:9c:a7:ed:
         59:32:9e:38:f2:94:16:f5:67:1b:c2:8c:75:f7:de:5c:71:04:
         22:4c:27:a9:9b:4d:a2:81:39:21:b6:98:87:e4:3b:80:cf:5e:
         cb:70:4b:b1:e4:90:69:dd:25:db:c1:fd:7d:44:20:c3:15:12:
         86:8f:66:60:9f:74:67:77:23:b6:c8:c2:14:83:bb:b2:b3:bf:
         81:24:a9:31:e8:4e:0f:1d:2a:6b:ea:59:10:d4:25:a3:ec:b0:
         30:ee:b1:e1:16:3f:e5:6c:1a:19:3a:2b:b9:96:cf:71:49:20:
         46:24:99:cb:2d:d5:e6:df:34:85:f0:a3:ba:f4:03:2a:e4:45:
         c4:af:85:18:f4:98:39:6e:6a:f4:32:0a:98:ab:a2:3b:93:ec:
         5a:04:a3:a8:af:34:00:b5:9f:2f:a8:0a:65:bc:16:df:19:b5:
         a9:74:c8:a5:e3:c1:c9:5b:df:ae:4a:65:5f:02:bd:98:85:64:
         05:eb:68:68:4c:c9:cf:2c:87:7e:b8:47:97:b3:e8:48:49:00:
         36:91:ad:61:b7:1b:ed:39:9a:e0:78:35:a4:48:f9:be:23:4c:
         c9:65:44:98:31:7f:45:31:31:42:ec:a4:f1:bd:67:99:52:41:
         c4:5e:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----