Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a2bced7-1fc2-35f0-b1e6-13c3aeee3171.roa
File:                     1a2bced7-1fc2-35f0-b1e6-13c3aeee3171.roa (raw, json)
Hash identifier:          tVxcqxbdI3ecWuIUDHl7H7Scj04UWqtsDNWuoXFE3LU=
Subject key identifier:   58:BF:39:71:99:0A:96:01:E2:2A:AA:A3:58:38:55:F0:3C:72:AB:7A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE3DF3E40549AB5B6B81500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a2bced7-1fc2-35f0-b1e6-13c3aeee3171.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     10965
IP address blocks:        64.4.90.208/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e3:df:3e:40:54:9a:b5:b6:b8:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=515c9b7f-c238-410d-8fca-a58535c071ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:72:23:16:51:99:82:55:b9:1a:fd:f9:ce:3f:
                    8d:c9:86:91:65:28:35:1d:0f:67:d4:38:6a:cb:d4:
                    54:69:8b:a1:0d:b0:b9:46:b2:9a:b7:11:4b:ec:49:
                    be:5b:2d:fd:22:e2:12:30:71:01:3c:f5:1d:1b:a4:
                    9a:5f:88:d1:1b:00:2d:c8:e7:64:4f:94:fd:11:69:
                    42:f6:51:b0:69:d7:ee:be:d1:70:d0:25:ba:f7:2c:
                    ed:45:7f:cb:56:f1:66:52:10:06:3f:ca:47:b1:13:
                    f0:85:97:42:fa:f8:24:42:9e:9e:ab:a8:d9:b7:d6:
                    64:88:51:b0:de:72:ab:83:de:aa:6c:b1:47:e2:ec:
                    2d:4b:2b:4c:70:46:19:ac:01:e7:ef:36:d6:47:3e:
                    55:49:74:02:b9:7b:0d:c9:0b:f3:ae:e2:3e:d9:1e:
                    03:3d:d5:7f:28:45:70:03:64:ec:7b:f7:82:0f:92:
                    c7:0c:17:df:d6:96:c9:29:5c:31:a3:24:6e:0f:e7:
                    29:e6:47:e1:d8:63:50:dd:08:0b:63:2d:3c:48:8e:
                    ee:64:4d:58:ca:4d:5b:14:f4:b3:93:82:92:03:60:
                    17:12:59:d2:9a:86:52:87:5c:e4:ba:41:73:42:68:
                    af:7c:24:ba:42:d8:f0:e8:2a:30:66:3f:25:1f:cf:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BF:39:71:99:0A:96:01:E2:2A:AA:A3:58:38:55:F0:3C:72:AB:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a2bced7-1fc2-35f0-b1e6-13c3aeee3171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.90.208/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:15:62:b6:d4:ff:48:95:25:87:d2:51:cd:b9:8a:bf:e1:11:
         9b:be:4f:19:0a:b2:f3:d7:e5:0d:f7:31:b4:e1:19:09:88:5a:
         48:80:bf:db:b8:59:d2:1d:0c:72:f9:b0:4d:d0:97:b2:08:30:
         8a:9c:90:08:f9:a7:d6:d3:fc:db:ac:0f:53:be:85:ab:23:af:
         82:55:a8:37:47:18:31:f9:b1:1f:f7:d4:8e:04:8f:53:85:77:
         e8:02:9b:11:5b:b0:d1:ed:7d:82:b9:de:70:5e:ee:e0:f2:06:
         46:68:e0:4e:6b:ad:a5:5e:0c:2d:64:69:0f:78:8f:7e:cb:08:
         b1:5f:e0:23:e4:8b:60:73:52:50:8b:8c:d5:79:f4:cb:8f:ec:
         d8:78:9a:1c:8a:fd:ef:6d:b2:be:51:a6:02:8d:05:3b:69:a0:
         1d:d1:df:5c:fa:ac:b9:b2:32:a2:3c:2d:ab:1c:89:bd:f9:34:
         19:2f:21:58:7e:97:0c:a8:c7:50:48:12:31:24:2b:f7:d3:d4:
         53:13:9f:a8:fe:1a:b9:06:eb:47:f6:84:02:8e:dc:4d:81:74:
         38:81:86:3e:6d:da:c7:b9:cd:58:ed:18:a2:70:b1:f7:b6:d9:
         ee:dc:f7:06:ab:5b:96:5b:47:be:5c:a6:42:c6:dd:75:cf:57:
         5a:b0:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----