Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01ec2630-6f26-3b20-acd3-e74de3a91e39.roa
File:                     01ec2630-6f26-3b20-acd3-e74de3a91e39.roa (raw, json)
Hash identifier:          /7iJ68tL/8SAkXvebMruinTTk3AA+peuLAak28oP9Tk=
Subject key identifier:   44:94:F7:F0:E4:AA:84:F5:E5:4D:3C:9D:24:76:86:0A:AE:82:35:B3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493139ED111BCE97751E1E440
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01ec2630-6f26-3b20-acd3-e74de3a91e39.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:9e:d1:11:bc:e9:77:51:e1:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=9ef9551b-b3e5-48f4-984c-4fba7a43b5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:8a:17:54:cf:17:2f:23:5a:bb:d0:8a:77:
                    a4:b6:97:66:04:27:04:61:68:2d:de:02:ad:00:29:
                    f0:11:95:40:91:c4:ba:cd:f7:90:81:3f:8e:09:87:
                    78:d1:cd:3e:81:75:65:60:89:d3:df:ba:e9:37:3b:
                    84:ac:68:cc:26:37:ce:d9:f3:24:a1:2e:ad:52:ef:
                    86:a2:56:fa:e8:52:d7:03:a9:95:92:d7:ed:c2:b9:
                    61:85:de:68:7c:6b:ad:90:3a:b6:f8:52:e0:ed:0d:
                    a4:9f:7c:4c:97:07:94:21:fe:80:5f:c4:7b:52:cf:
                    c8:c4:f5:16:df:30:25:bf:27:3a:d6:86:cb:1d:09:
                    90:d1:fd:f0:c6:1d:d3:e2:7e:09:02:61:27:ac:ed:
                    0e:68:6e:03:6c:4c:95:d5:f9:2b:36:3e:6c:86:c9:
                    95:df:25:3f:29:3b:cb:98:df:ac:c7:75:1e:f4:f9:
                    45:65:49:e5:e8:64:aa:54:ba:1d:4a:98:0a:d4:a8:
                    19:fb:57:55:d9:92:80:21:84:44:a5:11:6f:54:0b:
                    6a:c9:05:6d:62:0b:25:12:6d:3a:d2:f1:a3:01:65:
                    1e:fe:37:6d:83:87:86:38:cc:c6:18:1a:5c:28:9d:
                    af:d0:fb:61:89:ab:f5:62:e4:44:1c:d5:97:02:5d:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:94:F7:F0:E4:AA:84:F5:E5:4D:3C:9D:24:76:86:0A:AE:82:35:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/01ec2630-6f26-3b20-acd3-e74de3a91e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:de:6b:44:67:e4:e8:0e:f8:81:6f:af:c1:36:13:e7:aa:
         5a:a1:8e:d1:7f:d7:13:87:59:3a:70:77:b4:88:4e:65:22:60:
         30:25:53:37:1a:83:b4:8b:1d:c4:db:5b:81:ca:41:50:7d:53:
         e5:aa:38:84:2c:92:2a:fc:4d:5f:23:4b:21:1e:90:95:9d:56:
         41:90:3c:d2:54:1c:41:6d:d9:94:18:39:4a:7f:fa:8d:d4:06:
         c0:51:23:fc:06:d6:25:11:f9:23:f5:21:be:2e:c2:6b:68:a2:
         7d:4d:a7:f6:ed:e2:84:c5:82:9a:05:08:1f:e3:a6:8b:e8:d6:
         a2:df:25:43:37:90:49:73:68:a1:31:7b:e1:07:cc:cd:bc:81:
         b5:ea:f8:5f:60:e6:b2:6d:c2:b0:3d:b4:16:1c:aa:3c:fe:5d:
         9b:02:60:51:66:64:21:c0:23:fc:56:17:54:0d:67:e6:a8:1d:
         74:e9:ea:3b:d6:04:46:58:2f:53:57:5f:ac:35:a6:71:be:80:
         16:c8:7b:52:c0:27:55:88:a5:5b:c1:65:dc:68:3a:7b:47:69:
         c4:52:d0:2b:7f:d2:a0:39:14:32:6b:b9:1f:8a:36:03:25:53:
         df:21:d4:54:23:72:56:66:7e:84:05:00:d0:7a:7f:d5:ed:0e:
         6c:2e:52:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----