Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9fa57015-0ff8-3bcf-849f-dc99bcf59618.roa
File:                     9fa57015-0ff8-3bcf-849f-dc99bcf59618.roa (raw, json)
Hash identifier:          iqebTUzdpRTKVLiaP2LayKOSgT/EAbWzweWwR7zpeOw=
Subject key identifier:   47:CF:06:EB:BD:6F:C5:A0:31:93:FB:E4:97:F7:4B:F1:CB:43:F4:EC
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285841E46D83B9A1A6C27F610EED80
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9fa57015-0ff8-3bcf-849f-dc99bcf59618.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sat 22 Jul 2023 04:27:32 +0000
asID:                     138156
IP address blocks:        45.62.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:83:b9:a1:a6:c2:7f:61:0e:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 22 04:27:32 2023 GMT
        Subject: CN=908d66cf-b4e5-4691-b247-4197d5eb1912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7a:58:f5:0e:22:80:4c:c9:e8:dc:43:2c:aa:
                    71:e6:ef:3f:da:77:d3:96:10:63:ac:d7:38:04:37:
                    59:c2:a6:32:50:ec:a2:53:9f:f7:e4:de:30:2a:cb:
                    4b:ef:fb:ba:8b:b0:8b:40:ba:70:9e:49:0c:dd:bd:
                    23:99:08:c6:aa:11:fe:61:d2:d5:3a:32:ce:dd:a4:
                    98:de:fa:43:f0:14:e0:4b:8b:49:68:51:26:e5:d1:
                    8c:3f:3e:c6:62:8a:ca:41:86:01:1d:eb:89:e8:0b:
                    18:40:6c:46:34:31:82:79:f7:e0:63:a0:d4:c8:50:
                    44:c1:8f:d2:11:43:8e:a6:48:c5:37:e3:7e:84:4a:
                    bc:11:89:ec:98:df:f9:e4:ae:67:7f:1c:f8:f5:41:
                    5a:d6:cc:8b:37:22:8e:2e:79:53:8d:9a:d3:3d:d2:
                    c6:df:db:35:90:1b:3f:44:cc:2e:5e:73:4b:4f:fc:
                    73:5b:4b:ce:0f:9d:c4:fa:78:bf:6a:43:30:0a:bc:
                    5e:f4:d5:60:5f:7d:e8:24:56:75:1b:88:24:b8:a4:
                    bf:c4:a3:5d:89:7e:06:69:da:94:02:e3:07:5a:8f:
                    2d:a1:d9:3e:94:7f:b5:28:a7:1b:c4:21:b1:78:6b:
                    98:a9:8c:88:c5:52:b0:a0:21:9e:8b:c4:ac:77:1c:
                    99:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CF:06:EB:BD:6F:C5:A0:31:93:FB:E4:97:F7:4B:F1:CB:43:F4:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9fa57015-0ff8-3bcf-849f-dc99bcf59618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:bc:0d:e6:28:74:64:cf:33:74:c0:70:be:9a:5f:7f:f5:cc:
         2e:17:6c:01:a6:27:1a:23:60:6e:36:b3:98:5a:b0:fd:d0:c4:
         c9:13:eb:c3:ab:7c:ba:40:d0:24:5a:dc:b0:26:a4:7f:2f:dd:
         4d:08:cf:c6:3e:6d:81:10:a9:51:b0:72:a1:43:67:8b:76:ae:
         75:5f:b2:ce:16:d8:a4:17:4c:2b:e3:9f:fc:31:16:01:36:8c:
         37:b4:20:ca:ca:a0:9f:91:66:d9:45:42:5a:d4:60:bb:54:41:
         0a:31:91:6d:82:90:26:53:c1:bb:5c:fe:c3:19:3a:54:1b:f5:
         4e:d2:ca:f9:22:fb:c3:c3:f2:5f:4b:13:01:e2:9c:b1:04:ac:
         2a:1e:57:cd:e2:45:78:63:92:69:b7:fe:19:24:06:8a:82:ef:
         14:c4:79:af:fa:f8:66:84:20:72:ba:5e:1d:27:17:88:94:8e:
         7b:61:68:55:d0:a9:0a:a2:4a:89:64:38:9e:1c:5f:c3:c3:c2:
         65:cd:0a:04:c5:ed:9f:f9:a1:e2:11:58:bc:60:97:b6:aa:7f:
         c4:01:eb:7b:1b:69:1b:ee:ec:fa:da:74:e5:5d:84:b6:62:c5:
         be:1c:00:e8:6d:7c:0d:08:86:1a:2d:84:51:5c:c1:29:6d:76:
         e4:d6:6b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----