Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17338669-2fdd-3777-8fa7-f61f2b37b44d.roa
File:                     17338669-2fdd-3777-8fa7-f61f2b37b44d.roa (raw, json)
Hash identifier:          S2hk/6JgWDKspOrgtpzNoRA2urq7DLbeaf4TEZa+HjY=
Subject key identifier:   30:CB:43:94:46:9E:B1:DB:97:48:B3:7E:83:FB:3E:7B:7E:5B:9B:49
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA14E0AEF20FC5CB94E9A9A0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17338669-2fdd-3777-8fa7-f61f2b37b44d.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        216.209.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:14:e0:ae:f2:0f:c5:cb:94:e9:a9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=146babf0-3d99-4fc0-8977-d2ab36674e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6c:f3:00:53:60:bd:95:0c:cf:9f:6e:5c:cc:
                    19:4b:05:34:9b:38:79:6a:c5:9b:9c:4f:c2:6b:e8:
                    67:0c:a7:44:90:cc:72:8e:82:dc:7d:2f:33:7c:d5:
                    fe:bd:fb:4e:cc:04:96:e5:ca:91:22:88:80:de:bc:
                    9b:8f:db:61:7e:2e:4a:a6:50:37:d9:92:e4:45:16:
                    b7:ec:7b:0f:48:01:b5:cf:1e:b9:bc:07:42:01:e1:
                    89:b3:c6:a0:ae:6b:d7:52:a7:43:ef:30:7d:4a:9e:
                    db:f9:97:02:36:96:9c:4b:21:da:c2:44:bb:82:8b:
                    59:9d:bf:e2:10:94:4c:ae:8b:86:8a:75:d1:1c:d7:
                    bb:0d:7d:8a:52:ae:89:e7:ac:86:64:b5:14:fd:4c:
                    c8:65:ae:79:e4:17:dd:a3:39:31:ae:a1:3e:0a:f2:
                    48:b5:8f:2c:85:5a:d1:5d:20:7a:d0:ee:d9:26:61:
                    86:c8:cb:a5:44:9f:22:eb:f3:b0:1d:96:16:8a:e1:
                    68:9c:41:69:79:cf:df:0a:7e:86:e5:1e:56:dd:91:
                    c2:6f:0f:d5:d1:75:34:38:a1:93:91:70:2a:7c:2b:
                    e4:4f:8f:e4:11:59:4a:cb:5b:a5:c2:42:60:4f:ba:
                    8e:90:8f:4b:41:a0:91:11:e0:60:d4:21:74:c8:e7:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CB:43:94:46:9E:B1:DB:97:48:B3:7E:83:FB:3E:7B:7E:5B:9B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17338669-2fdd-3777-8fa7-f61f2b37b44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6b:a1:fe:9d:80:01:29:d2:1f:3c:e2:df:fd:42:68:28:9a:
         c7:0c:d7:5c:19:03:2e:55:26:cc:b5:6d:60:e9:ac:09:0a:97:
         c9:80:86:51:ea:fe:0f:ec:5c:cc:3b:7f:53:18:4c:e5:1b:45:
         ea:3a:c5:4d:bd:59:12:3f:d2:ae:55:ca:bf:4f:dd:64:72:14:
         80:68:ea:45:6f:c0:52:d7:c8:20:11:5b:85:ef:b6:c3:e3:1a:
         15:b3:1f:5c:8c:26:02:f5:d9:28:d5:45:dc:90:d5:4d:db:0a:
         d3:d9:a7:cb:1e:ac:74:08:d7:a0:c7:ce:f6:c6:18:19:54:2f:
         f5:e3:a4:56:db:3e:17:9f:24:54:b8:b4:5c:68:31:da:29:e8:
         c3:0b:1b:b8:94:f0:cd:c5:22:62:0b:8d:27:7f:00:c0:d7:31:
         6a:41:11:6f:16:60:78:04:14:49:fe:85:c0:8e:7a:50:79:9a:
         d6:e7:42:e0:7e:48:7b:b1:ee:a1:e5:ae:60:34:3c:74:ad:72:
         d8:08:9a:eb:cb:71:28:9f:60:5b:66:f3:e8:8d:b5:ff:aa:cb:
         46:3c:89:0c:b0:d2:d1:4f:00:33:7b:ea:02:67:4b:a2:27:0b:
         c4:57:79:ba:ef:aa:97:cf:b3:ba:17:fa:8e:27:65:1b:50:08:
         22:a9:df:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----