Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/86dc9ef0-4850-3e30-8d98-b9726f8156c4.roa
File:                     86dc9ef0-4850-3e30-8d98-b9726f8156c4.roa (raw, json)
Hash identifier:          hXH5MNePD6+YopdIe1bIuItG9VMl3MktD9YvNiUSmVo=
Subject key identifier:   87:6F:0D:AF:35:10:58:78:8E:8D:4D:F4:96:E9:47:35:9F:57:BF:3E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF76476517C5B30BCEB3D280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/86dc9ef0-4850-3e30-8d98-b9726f8156c4.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        2001:4958:314::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:47:65:17:c5:b3:0b:ce:b3:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=ebe365b4-262d-43d7-9e5d-597c631e64b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:09:34:74:57:c4:0e:c1:1f:d8:db:3d:0f:
                    da:35:8f:07:7b:26:24:5a:a0:d2:08:b5:45:98:6f:
                    60:88:91:11:8b:d5:40:53:11:c7:59:c8:bf:d0:f8:
                    0b:d2:bd:3c:ab:15:7e:0b:ae:71:e1:b1:8e:a1:c7:
                    69:46:7b:f9:3a:c9:b5:52:d8:9d:2b:72:f9:fd:87:
                    6e:5c:e8:49:04:6e:bb:da:86:19:fa:16:14:e7:46:
                    41:39:92:90:ac:81:7b:57:99:d5:6b:c4:02:e4:bb:
                    ec:62:79:43:3f:ca:77:12:dc:49:d9:b5:d9:0a:e7:
                    5e:33:e0:44:1d:b9:4e:35:f4:08:f7:63:bb:f3:27:
                    d5:c7:59:18:a7:75:ac:4d:ca:3b:2c:f0:d9:20:5a:
                    22:51:21:48:bd:30:37:b5:68:b2:84:01:6c:32:c1:
                    5b:11:fb:b8:82:14:44:9c:28:64:0d:0f:c2:b8:cc:
                    6a:9c:ad:a7:35:a3:ff:ad:f4:2b:70:de:bb:06:1f:
                    6c:72:3c:28:bf:cc:bf:9a:97:6a:83:15:dd:d5:95:
                    27:7a:f4:b3:f6:25:11:d2:15:3d:fc:e8:09:0e:bd:
                    76:98:24:f7:66:d7:8b:b4:bf:1a:91:49:79:52:fd:
                    b8:3d:68:bf:9e:d2:11:0f:43:3d:26:71:94:4e:86:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6F:0D:AF:35:10:58:78:8E:8D:4D:F4:96:E9:47:35:9F:57:BF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/86dc9ef0-4850-3e30-8d98-b9726f8156c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:314::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:bb:32:70:1a:05:3d:3d:5a:a1:b9:73:62:3b:93:20:d5:db:
         ca:d6:21:26:3a:e4:ed:ae:79:b7:60:56:64:39:82:6b:5f:be:
         20:ff:d4:b6:35:45:6c:26:8d:c2:8e:42:6d:8c:ad:f3:cb:65:
         38:8a:d1:6c:af:de:96:eb:7a:50:4f:3b:4a:9b:0f:43:e2:bc:
         50:2b:f6:cb:17:bf:26:23:e9:b4:cf:23:12:21:41:ec:d6:1d:
         99:b2:d7:40:aa:5b:4d:63:75:09:a1:d9:f4:01:9e:cc:a8:4e:
         41:3a:ba:12:3a:7f:77:29:44:5d:e9:56:a1:f2:2a:09:98:83:
         97:a9:17:0c:04:71:93:8b:67:92:a3:65:2d:98:b5:d0:a5:76:
         48:6a:05:f9:5f:39:2a:cc:8d:47:cd:99:91:2d:a5:20:02:fa:
         e1:d1:6c:ba:57:24:81:ae:b3:57:11:8a:47:a4:36:7a:08:b6:
         97:4b:01:17:79:ea:8b:21:f4:29:a5:83:ab:68:cc:8d:0d:d5:
         dc:05:a5:4a:3d:9b:0d:89:7a:96:94:1c:4e:ac:44:42:a2:30:
         3d:87:76:eb:d2:89:81:6f:e8:34:de:a6:78:38:12:68:30:22:
         8e:b2:30:b3:8c:37:91:49:4a:21:30:e9:aa:62:ec:b7:67:79:
         8b:f1:d4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----