Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7722ec27-20ea-3890-977b-473eb2908388.roa
File:                     7722ec27-20ea-3890-977b-473eb2908388.roa (raw, json)
Hash identifier:          RQ52EjWXzberjrYaau/AK2LKC9X2yiLm11DmFokVzXQ=
Subject key identifier:   A4:5D:2A:A0:46:C0:CA:6A:FC:C8:F9:1C:9B:F4:09:1D:3C:D7:17:35
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858419E8CCB0BFB3DD09804C0FD80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7722ec27-20ea-3890-977b-473eb2908388.roa
Signing time:             Sun 23 Apr 2023 12:00:00 +0000
ROA not before:           Sun 23 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Apr 2023 04:00:00 +0000
asID:                     397224
IP address blocks:        156.154.58.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:9e:8c:cb:0b:fb:3d:d0:98:04:c0:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Apr 23 12:00:00 2023 GMT
            Not After : Apr 26 04:00:00 2023 GMT
        Subject: CN=4f419e04-9aab-4163-8e5c-554e8b851409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:84:59:90:7e:68:92:c8:16:10:33:75:ec:
                    9b:69:42:7f:47:cc:66:dc:0c:1d:b6:1d:9d:55:e8:
                    37:cf:35:2e:d6:9d:44:f8:f0:7e:fd:a9:dd:dd:c1:
                    2f:9c:a5:ca:79:40:48:e4:97:1d:ba:0a:c2:92:27:
                    95:11:8b:19:10:7b:64:f4:ed:97:f7:a3:72:bc:cf:
                    26:ae:b4:5b:6a:73:12:71:26:46:ff:a5:35:17:07:
                    40:c3:3a:91:fd:73:67:c0:97:cd:a8:85:b0:c3:4f:
                    8c:dd:0a:23:17:50:2d:3a:88:81:22:0d:72:73:d5:
                    48:04:d8:2e:3b:1d:9c:b0:18:46:58:36:f4:c5:ae:
                    23:da:b6:10:4f:0d:74:70:27:20:99:88:06:d0:53:
                    c9:7d:e4:0d:22:09:4e:51:4a:5f:d9:ef:d8:77:62:
                    e0:d0:c9:c2:c8:8d:ba:3c:e6:67:e0:60:56:2d:45:
                    d9:c4:62:df:94:93:b2:bd:0c:5f:7d:c4:48:15:c0:
                    e1:7e:cf:df:f8:07:52:b2:51:03:5b:a8:26:d3:31:
                    4e:1d:8c:0f:b9:4f:df:c2:82:95:8e:87:27:de:eb:
                    75:e6:96:74:1b:46:d5:68:d3:90:14:6f:80:01:e4:
                    94:cf:31:0d:dd:49:98:dd:5e:20:94:c9:3c:b5:e6:
                    2f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5D:2A:A0:46:C0:CA:6A:FC:C8:F9:1C:9B:F4:09:1D:3C:D7:17:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/7722ec27-20ea-3890-977b-473eb2908388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.154.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5b:36:53:2c:4b:91:bf:c5:d8:54:6b:57:9e:7e:76:6e:23:
         ce:d7:82:73:01:e4:75:d8:a7:d3:9a:cf:eb:0a:cd:94:4f:c4:
         eb:09:e2:d5:e7:6b:2f:0e:ec:83:ed:e3:1a:8e:0e:02:a2:57:
         dd:2f:9c:01:3d:9d:65:68:b1:62:55:11:0f:9f:32:00:6f:48:
         6c:8e:7d:fe:a1:27:f8:d5:ae:43:e3:64:19:07:dc:98:84:39:
         b9:44:10:24:b5:72:43:ed:61:e2:7d:a7:b8:b7:9a:1e:1a:69:
         a4:0f:8d:86:2a:6c:46:9f:d6:4a:6b:b3:eb:51:c7:93:41:95:
         ad:89:dd:78:45:75:ea:4b:4d:7f:aa:c3:62:01:0f:b9:2f:dc:
         32:ea:5f:4b:43:8b:ff:c3:66:3f:9e:4d:e5:89:8c:74:27:50:
         68:78:5f:2e:e3:b1:f6:fe:c6:1d:a5:02:f9:24:13:d8:78:51:
         1f:0b:27:85:7c:7d:fa:ba:a6:18:e7:f7:1b:b7:e1:67:39:c6:
         63:5c:d8:4f:b3:25:28:0c:9b:b6:09:98:48:14:cc:c5:ad:df:
         70:4b:f2:39:b3:cf:48:4a:a8:df:61:00:df:17:a6:8f:8c:c1:
         26:49:72:4c:21:95:ec:c7:52:6c:1c:35:1d:61:5f:5f:98:f8:
         3d:d1:a7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----