Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea9e9c3b-7480-38c0-95b4-471be4ec0dbb.roa
File:                     ea9e9c3b-7480-38c0-95b4-471be4ec0dbb.roa (raw, json)
Hash identifier:          OpdbQGlcts3gvD4JSYnDtTzWwGvbEEMxA6DbtoAXjGw=
Subject key identifier:   BC:97:43:D2:D0:B4:15:F8:66:18:4F:13:BB:96:66:29:2B:62:4A:81
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE4617E5AAD28A01E4ACE00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea9e9c3b-7480-38c0-95b4-471be4ec0dbb.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        70.53.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:61:7e:5a:ad:28:a0:1e:4a:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=f9dbde80-e702-4a56-a1b3-7d1c188a9f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:0e:92:dc:ef:ac:71:92:e5:91:71:54:9f:
                    8c:dc:f3:98:17:89:76:96:20:05:d6:66:0c:2d:1e:
                    11:c5:6a:37:7f:6f:94:1c:59:10:82:a2:a9:1f:1a:
                    f0:43:1d:4e:f5:72:3b:aa:55:26:e4:98:80:97:88:
                    0b:79:5d:f0:93:d8:2a:3e:db:37:6b:27:45:c5:2c:
                    fc:cd:64:ba:2f:75:6b:29:b8:3c:f1:8e:13:dc:3f:
                    12:af:16:78:cf:81:d5:1b:b2:df:59:a1:fc:eb:04:
                    7b:c9:12:35:0c:37:3b:a2:ae:fd:53:71:81:6b:9b:
                    4a:80:0f:91:76:95:12:da:e0:ab:26:b8:13:6d:b0:
                    c5:fc:19:ba:ce:2a:1d:d2:a0:ec:13:11:57:21:bb:
                    f9:c1:20:6d:71:8b:23:d7:b4:d0:a8:cc:44:ad:96:
                    73:82:65:f9:53:03:69:f9:ad:d1:2b:6a:cc:b2:a4:
                    0c:3f:92:5d:b1:ec:b1:e2:f3:64:c9:bb:2e:c7:73:
                    b3:ce:80:33:c5:71:3f:38:cf:60:f4:db:e0:81:db:
                    f0:c4:b5:6f:ee:92:a9:90:15:b5:43:23:3d:36:eb:
                    b0:88:e7:6f:30:a1:1b:28:3b:ac:91:8b:67:4d:7a:
                    95:7c:1a:d4:b4:c5:5f:31:7c:d4:0c:ba:27:60:86:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:97:43:D2:D0:B4:15:F8:66:18:4F:13:BB:96:66:29:2B:62:4A:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ea9e9c3b-7480-38c0-95b4-471be4ec0dbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:74:d1:1c:d5:8a:4c:08:e2:47:81:4d:5b:38:71:44:0c:e9:
         f4:e7:7e:38:a5:64:0c:04:21:88:43:48:7e:82:3b:5f:00:a6:
         f9:fd:c9:33:56:94:e1:d0:0b:95:6d:b3:e7:06:54:3f:40:f4:
         ff:15:b4:41:42:93:57:ef:ee:c1:85:75:8d:3d:be:86:2c:56:
         9e:3a:21:b4:36:6e:83:74:82:d0:57:83:44:78:27:04:b3:49:
         98:9a:56:02:c2:3f:eb:91:df:32:e1:67:12:5b:31:55:f0:36:
         0d:45:32:6e:83:9d:e2:8a:98:a6:cb:c5:b2:39:f8:a9:52:b6:
         05:de:ba:52:85:5d:24:9d:8e:32:85:25:b2:39:f6:11:c5:9b:
         a9:85:a7:ab:af:ec:7c:6d:80:9a:76:d0:4f:11:a9:18:b6:a6:
         01:e8:91:e6:9e:ff:06:6a:08:07:60:e7:b2:9b:3f:b7:86:30:
         1d:23:28:f5:91:5e:1a:64:7f:36:70:22:c9:72:10:07:5a:5e:
         b7:43:d7:eb:cc:03:c7:b4:41:f3:b8:1a:4c:41:95:e7:77:1a:
         a8:42:21:b9:84:ca:6f:ed:25:9c:97:4b:f1:55:93:ab:6a:65:
         69:39:14:c8:4c:2c:9c:45:3a:2e:81:90:99:58:39:c7:b4:02:
         1c:63:e0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----