Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1353d716-dc56-30d4-b90a-0092bd29677a.roa
File:                     1353d716-dc56-30d4-b90a-0092bd29677a.roa (raw, json)
Hash identifier:          CUzf53Fvzg1x4poLygQMZ3LmNO7fcey2R7Bbt/ewkrc=
Subject key identifier:   E7:58:1C:4A:11:AF:D9:1D:02:84:C1:2A:A6:23:35:6E:03:2E:1E:79
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA12074C08BA708AE60B6B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1353d716-dc56-30d4-b90a-0092bd29677a.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        174.90.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:07:4c:08:ba:70:8a:e6:0b:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=ad580fd6-73df-45b8-ac41-16cd7e5d6876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:49:bb:ff:91:18:b5:64:ab:d3:5e:50:bd:
                    43:12:7b:93:71:28:98:a7:c0:47:e8:d5:8e:7e:c7:
                    a2:40:cc:e2:46:c4:b2:1c:74:b4:1e:80:03:7f:99:
                    a8:56:32:65:73:16:a2:0d:0f:28:1b:3b:be:f3:6b:
                    74:95:5d:57:43:e2:1e:bd:9b:bb:51:54:84:d0:b4:
                    77:2b:fb:b6:b7:34:a6:e7:e6:c7:b2:5e:18:86:e7:
                    ed:b3:d5:a2:35:b1:f9:4d:ff:bc:eb:d3:d9:ca:db:
                    9b:7d:aa:bd:b3:7f:59:02:15:96:08:79:33:36:13:
                    c6:bd:f6:67:94:5a:23:f5:92:6a:1e:71:34:20:a1:
                    8b:f2:60:38:3c:58:72:5f:96:fd:80:85:f9:6f:7d:
                    05:15:67:d6:e0:56:85:1e:66:9b:b1:00:fc:ce:fb:
                    95:cd:92:62:bd:bb:a5:ce:7e:b2:07:3b:29:0c:0f:
                    41:05:b9:68:84:48:69:95:92:de:2d:6c:d3:00:ff:
                    9f:11:c6:a0:0a:86:15:66:e2:2c:8f:6d:32:b1:09:
                    ee:25:ea:ab:05:f5:36:00:fb:5f:8d:4d:3f:66:52:
                    9c:4f:de:06:db:2c:68:72:98:98:ff:e4:ba:7d:87:
                    3e:36:35:c5:79:74:fa:03:bd:03:e9:e5:75:2a:d6:
                    f5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:58:1C:4A:11:AF:D9:1D:02:84:C1:2A:A6:23:35:6E:03:2E:1E:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1353d716-dc56-30d4-b90a-0092bd29677a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:65:4b:43:32:ea:f5:3f:b8:ab:9b:c6:04:f0:a8:94:8f:d3:
         a8:67:60:29:58:9d:55:31:7a:ca:74:95:df:87:a7:8a:d4:36:
         e9:5f:2b:b6:00:4c:65:72:c9:d0:ab:98:92:85:81:39:3e:35:
         2b:d2:f5:b8:9e:05:af:7e:ff:d5:8e:6a:b6:ef:0f:cc:b3:16:
         8e:2d:2d:fe:7d:39:b0:4f:9d:83:d0:44:4a:3f:22:11:4b:9e:
         4e:1b:13:ed:44:03:49:60:38:3a:68:a9:34:32:a1:ee:a0:8b:
         dd:7c:a6:cb:69:2f:f7:d4:a0:20:94:75:ec:5f:d6:ce:2f:24:
         34:a4:ff:39:d7:ac:66:bf:43:39:1a:8d:87:88:fb:a1:87:01:
         5a:57:d9:18:0c:f8:a1:c0:cf:d3:c0:5c:3e:49:53:a0:be:23:
         3e:f9:96:2c:04:05:71:49:2a:af:5c:af:c8:67:3e:c3:65:21:
         c9:58:3b:61:3d:a5:24:cd:64:a8:42:c4:cb:aa:fa:a0:f8:4f:
         3e:f3:57:55:ac:63:cb:ed:8e:89:a7:65:5d:20:f7:2d:83:ab:
         0f:c9:d4:70:ad:2f:f4:e9:cb:99:e7:75:15:54:bd:27:0e:52:
         4e:6b:6e:2d:31:30:0a:88:d4:48:77:22:43:09:d9:9e:bb:5a:
         a7:9f:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----