Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84cb5061-89c8-3bb0-9b94-3e4b1c36b9c4.roa
File:                     84cb5061-89c8-3bb0-9b94-3e4b1c36b9c4.roa (raw, json)
Hash identifier:          qgmOvACRxT1jRcZbh7vdbkXerb25v4gvDL2JvNw+Xz4=
Subject key identifier:   8C:79:3A:B8:3A:84:6D:47:51:C6:20:FB:CA:5C:74:27:50:C9:38:C4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449313C3D01C10665803308090
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84cb5061-89c8-3bb0-9b94-3e4b1c36b9c4.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        70.27.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:c3:d0:1c:10:66:58:03:30:80:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=e43c0bb5-7e3a-4421-b9e3-e1d96173dc67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c4:66:f7:c9:e7:f8:66:78:ae:3d:bb:06:43:
                    b6:a5:89:1c:98:14:cd:94:36:15:9a:a8:90:67:b3:
                    d7:fc:22:94:77:54:c9:a3:7b:5d:0e:ee:32:69:e6:
                    c2:05:75:e5:39:cd:24:ae:3c:45:cc:b5:d0:db:37:
                    5e:d8:83:2e:9c:af:88:bf:03:4f:48:86:e4:f2:7e:
                    5f:2c:88:c6:b7:b0:c1:83:bb:8e:f0:1c:de:8f:03:
                    96:f0:07:fd:c0:4e:ac:df:fb:e3:d4:50:79:94:55:
                    2d:86:c9:f9:24:a6:bf:37:3b:4b:45:dd:b7:3d:dc:
                    dd:97:88:a7:c8:37:e0:b7:1e:ee:9e:04:0e:20:0d:
                    03:c2:85:27:dd:49:0f:71:35:1a:d2:44:8f:71:a6:
                    27:44:b4:15:ae:95:13:10:a3:08:51:1a:29:ff:49:
                    fb:da:c4:f7:d2:8a:e5:e1:09:70:a9:60:2e:c4:24:
                    6e:cd:0d:a4:81:c1:e0:d4:20:37:7c:11:32:dc:02:
                    ae:6f:5d:f7:95:c0:c7:f4:39:a8:50:00:bc:59:6d:
                    19:fd:c2:69:0e:35:ab:b9:2d:90:c0:8e:72:71:a5:
                    d7:f4:e8:4f:fe:57:35:29:09:74:52:d3:bc:27:2f:
                    9e:01:69:b3:85:82:d7:30:e9:3d:e9:b3:af:ad:08:
                    d6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:79:3A:B8:3A:84:6D:47:51:C6:20:FB:CA:5C:74:27:50:C9:38:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/84cb5061-89c8-3bb0-9b94-3e4b1c36b9c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.27.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c9:d6:a8:2c:85:c4:6d:d9:9e:4f:56:5d:cc:5d:42:2f:6f:
         e1:5c:13:f8:da:d7:89:e3:91:b5:7e:3d:d2:d4:da:6f:aa:95:
         e7:98:d9:de:cf:d8:3c:26:94:74:24:d9:1d:ea:a3:f8:7c:fe:
         57:27:6f:11:e8:e0:79:2f:c3:fc:e7:26:c9:93:65:71:9f:47:
         b0:0f:8f:ee:fe:01:77:2e:aa:13:c4:0b:9e:1c:e2:41:47:d8:
         2e:dc:c5:7d:e7:10:6f:e2:59:75:ca:0a:f3:e0:64:46:75:78:
         3c:06:0c:bc:a9:07:71:8f:7c:d3:17:3e:2c:a3:18:7d:b1:5c:
         5d:dd:4e:82:62:43:42:d6:9c:24:b1:f3:82:b8:75:de:cb:bd:
         d6:9c:b3:0e:af:d9:25:61:e9:b7:19:ec:fd:39:ac:42:b5:78:
         ec:c4:c1:60:ba:0c:d3:08:ca:fd:fb:bc:bd:6d:43:af:d8:66:
         40:2b:0c:82:f8:e2:bb:43:09:75:cc:80:92:ef:fa:39:99:82:
         22:c5:ef:da:c8:ed:d0:a0:38:c7:3c:4c:dc:4c:38:31:84:31:
         85:0c:8f:12:c1:dd:7c:02:e8:09:70:68:4a:1a:cc:94:ea:25:
         4f:12:a1:b7:17:5f:41:90:f1:8c:e1:b6:40:5e:91:63:bf:a1:
         e6:ab:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----