Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de34475d-e191-34aa-8880-f61682ef47ef.roa
File:                     de34475d-e191-34aa-8880-f61682ef47ef.roa (raw, json)
Hash identifier:          MTWU6qy5xvoXCwutx5qW4MUmHlutc02roljirVpZZd0=
Subject key identifier:   0A:F0:A6:4E:34:DC:BF:3C:16:D1:4F:08:B5:F5:29:D2:6B:AC:22:C0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493148CF64DAB98B8A816A500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de34475d-e191-34aa-8880-f61682ef47ef.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        184.151.60.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:8c:f6:4d:ab:98:b8:a8:16:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=9919bb80-b1f9-4b84-9381-99a95937fed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8b:c5:6b:c4:15:5a:15:a0:3a:b4:8e:22:60:
                    e6:45:a3:d7:06:00:ba:cf:88:a6:96:77:62:e3:ca:
                    b4:57:e3:03:f7:95:d6:d2:a4:63:3e:46:71:ee:c8:
                    61:d1:51:24:d0:80:5a:cf:2b:41:6b:a4:08:7a:c4:
                    7e:e5:03:f2:36:6f:bc:9c:b9:34:47:c9:e3:0f:64:
                    70:7f:c5:1f:32:33:62:f0:cf:ed:42:06:f8:83:71:
                    16:09:64:ef:43:9b:8b:8c:28:61:4c:20:d4:c3:fd:
                    93:06:51:f5:33:40:78:d2:d9:07:0b:c0:f6:51:17:
                    52:ba:cc:71:88:76:66:37:6e:be:92:c4:19:99:cf:
                    f4:32:ef:de:8f:3d:ee:8b:e6:83:b5:96:c7:ee:b4:
                    61:f9:ef:22:98:b8:6c:a1:c8:9e:6a:b7:32:de:b8:
                    0a:fd:52:b1:98:ed:be:46:6e:f3:6e:93:9e:6f:c5:
                    16:ba:e3:0c:aa:cb:3c:c4:38:9f:61:25:c5:13:fa:
                    e7:19:0a:d9:89:65:8a:41:1d:21:46:ad:36:a3:03:
                    91:83:69:4d:28:7d:08:ef:f4:3a:23:5a:8b:97:7c:
                    5b:08:be:11:d5:96:6c:82:53:75:40:19:66:50:12:
                    bb:60:69:1a:6d:b3:f9:83:ed:e9:46:de:1b:c1:a8:
                    1a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F0:A6:4E:34:DC:BF:3C:16:D1:4F:08:B5:F5:29:D2:6B:AC:22:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/de34475d-e191-34aa-8880-f61682ef47ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d4:5b:53:36:55:0c:fb:d0:3d:44:a3:e8:f3:c0:11:1c:37:
         97:bd:eb:f0:71:65:39:f9:5d:df:95:1e:c0:c1:e9:b5:89:ed:
         01:f6:6d:ac:7a:f1:5c:fc:f2:f0:19:33:ef:78:34:63:f4:f8:
         36:30:00:0a:3b:9b:33:a2:0a:8e:7d:b3:ae:52:77:ac:5b:f6:
         08:56:73:bf:39:a8:1f:72:39:13:6d:de:12:23:30:89:23:b7:
         3c:77:77:6e:29:01:ef:9d:53:2a:fd:8b:0d:75:03:58:ef:64:
         b8:d8:45:13:e5:f2:d3:95:1d:bf:5c:9b:ca:6e:f8:8e:a6:69:
         29:83:85:db:6d:a2:ff:7e:64:f1:69:7d:43:1a:4c:bd:8e:07:
         ee:d7:67:ff:aa:a8:8b:e0:12:c9:9b:c0:46:b7:07:19:74:28:
         4b:3f:54:68:f1:8a:7a:1f:f7:01:48:3e:dd:6b:5e:70:17:02:
         32:61:d4:eb:bc:e1:6a:c4:d7:a6:90:42:3c:40:2c:c3:80:a7:
         cc:66:94:0b:6e:40:c2:9a:00:d7:65:d5:b7:94:ff:5d:3d:a3:
         2e:c1:74:42:f2:17:c9:f6:67:04:24:0c:2a:25:57:0a:72:a6:
         67:86:81:63:3e:ab:c0:ce:86:10:c4:3f:6b:7b:21:5f:dd:45:
         9e:d5:ba:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----