Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b475f5bd-0677-383c-b203-4044eb74563c.roa
File:                     b475f5bd-0677-383c-b203-4044eb74563c.roa (raw, json)
Hash identifier:          uSst5VwHuReeGXjSMFvrwOabrpiqFSnluwVvhIHkjwk=
Subject key identifier:   55:32:E0:A3:76:57:5A:F8:7F:99:D7:3B:A3:77:59:56:8C:BB:E8:B4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF752F2AA6E4915772466200
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b475f5bd-0677-383c-b203-4044eb74563c.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        76.70.208.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:2f:2a:a6:e4:91:57:72:46:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=72c0b3fd-348f-45ef-8b1a-0614e6d4b5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:e4:01:7e:2d:80:65:2e:1f:ce:fd:a6:1e:
                    e1:83:d6:ec:c6:d6:c8:17:2b:b7:75:df:19:20:f1:
                    44:40:31:34:26:c8:8c:0e:bf:62:fe:4c:34:e3:b3:
                    a6:9d:bf:f2:6b:01:ed:10:38:3a:7a:ba:1d:68:57:
                    7a:40:2e:21:fe:73:cb:26:fc:45:55:13:fd:15:9a:
                    49:3e:29:3a:e5:e0:53:ff:fd:1e:88:af:e2:d3:d8:
                    22:22:5e:db:c8:1c:28:0f:dc:3a:64:48:9b:bf:dd:
                    6e:8b:64:af:13:fd:e7:f8:70:b1:20:77:e9:1c:dc:
                    ee:ed:17:66:52:58:86:0a:b4:02:f3:48:ab:dc:cb:
                    3e:9d:2c:59:72:0b:95:37:31:c6:9a:b8:40:f1:96:
                    6f:24:c4:94:fe:d2:ea:0f:45:5b:da:2d:0e:15:1e:
                    cf:c4:ad:0f:3b:67:f4:c8:39:fb:b2:9c:48:4f:f5:
                    72:48:eb:5b:56:33:af:03:eb:93:50:dc:5e:03:5d:
                    5c:d8:20:e2:12:e1:93:fb:e5:60:c2:7f:08:17:4e:
                    b5:99:9d:bb:94:14:c9:2e:ec:c1:6f:20:76:f9:4a:
                    e4:a9:52:bd:14:94:5c:5f:5d:29:cf:90:3f:1d:84:
                    7c:72:62:ed:e9:87:fd:be:55:20:79:10:c9:cb:b2:
                    81:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:32:E0:A3:76:57:5A:F8:7F:99:D7:3B:A3:77:59:56:8C:BB:E8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b475f5bd-0677-383c-b203-4044eb74563c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:60:9a:bd:ec:8c:c7:e7:07:b4:ae:73:eb:15:17:e3:18:0f:
         3e:af:09:97:fa:60:bb:fc:79:d3:05:f2:fa:71:89:13:a8:8d:
         9a:31:60:88:75:b6:a7:80:0a:df:a0:a5:13:87:3d:00:b2:6e:
         cc:38:f5:2a:67:0b:e3:26:55:9a:92:de:9e:d5:ec:ac:07:21:
         8e:bd:52:23:54:91:ea:42:11:bf:a1:8b:b0:ce:91:48:5a:ea:
         39:0f:9a:94:18:aa:dc:7f:af:68:9d:82:9a:96:3e:5c:10:7c:
         2a:94:b1:04:b5:11:d2:4a:65:e8:2a:6d:7b:a3:6a:8b:bc:fc:
         7d:03:03:7b:a8:9c:32:a6:af:8b:9e:77:65:d4:fe:2c:c3:55:
         6b:44:b8:bf:d3:82:3e:c7:85:81:97:22:a9:1c:e7:94:a4:b7:
         f0:09:ca:3e:8d:7a:ad:d7:82:59:1d:6c:88:c5:f0:f7:2c:62:
         d0:74:68:d5:63:70:9a:65:6d:e3:8e:70:df:6c:46:70:2d:14:
         34:cc:21:30:55:2b:57:d9:a5:53:a1:9f:d4:60:5b:11:41:bb:
         0b:13:1d:bb:8f:a8:9d:c2:de:c2:ad:94:ea:4f:70:74:09:b8:
         90:fb:18:d0:e8:6e:67:8f:fc:3d:63:f9:a0:4a:c8:e3:0e:3f:
         e7:6d:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----