Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/243ef2ca-12ba-37a1-87f9-625b6928bb36.roa
File:                     243ef2ca-12ba-37a1-87f9-625b6928bb36.roa (raw, json)
Hash identifier:          hxv/kev2Wf3lsrbWH+QV0qjtufk8T7E+Ct37LEKUEwA=
Subject key identifier:   DB:40:A2:68:B5:EF:3A:C7:30:A1:99:81:A6:09:E4:AC:3B:40:70:97
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FED26F112DA40A18E95589480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/243ef2ca-12ba-37a1-87f9-625b6928bb36.roa
Signing time:             Tue 15 Nov 2022 12:00:00 +0000
ROA not before:           Tue 15 Nov 2022 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        74.13.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ed:26:f1:12:da:40:a1:8e:95:58:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 15 12:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=ac248f34-9daf-4f6a-80ee-1524124408c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:38:a6:81:f3:79:66:f0:5b:0a:81:d2:ff:ba:
                    f3:6a:55:d9:d2:5d:0b:fd:6c:88:b4:f6:5b:28:f5:
                    a7:73:95:dd:f2:55:1c:37:b2:f9:3b:8a:b2:75:85:
                    79:b2:27:e6:0b:0f:1c:1a:37:0f:3d:1b:c5:09:5e:
                    a4:58:0d:fc:2c:a4:38:78:dd:94:be:b3:96:cd:71:
                    56:38:f1:f2:db:e2:f2:ca:40:31:a5:c1:a7:10:e9:
                    20:e0:a3:0d:6f:5c:5a:33:19:d2:67:e4:33:2b:1f:
                    8a:fc:17:b0:08:b1:f7:85:9a:11:c9:ac:35:20:33:
                    38:00:6b:89:ba:22:d9:b3:ce:9f:b2:24:a9:8b:4d:
                    f8:8d:8c:be:4e:26:a1:7e:fb:cf:fa:3d:f7:c5:98:
                    18:2d:4a:c1:c5:0e:fb:9f:fc:3d:90:8b:b8:8e:98:
                    97:f1:b6:e5:23:b7:e5:d8:7d:d0:e1:c4:58:46:df:
                    98:25:83:aa:34:e5:46:d9:b4:78:37:be:59:fb:38:
                    2c:be:f0:c9:e4:07:bb:5e:bf:a2:08:af:7e:bd:ba:
                    25:dc:25:25:fd:4c:44:db:33:59:0d:28:04:c5:af:
                    f7:10:38:18:c8:92:f9:b8:a1:d1:d7:4f:ac:e4:54:
                    83:9f:63:a0:0e:79:5e:6a:4c:66:4b:5d:05:57:d9:
                    6c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:40:A2:68:B5:EF:3A:C7:30:A1:99:81:A6:09:E4:AC:3B:40:70:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/243ef2ca-12ba-37a1-87f9-625b6928bb36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.13.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2f:9f:04:4d:f6:1f:97:79:95:0a:40:24:1a:c3:db:d7:03:
         96:16:fd:3b:67:17:8b:82:06:01:e2:19:f5:b9:38:06:8b:1e:
         65:60:f8:5e:b5:0a:e3:e5:c3:2e:4d:ce:c2:cd:9e:a2:26:b4:
         eb:d7:55:e9:59:75:0f:af:da:f1:9a:de:20:6d:d9:9d:d8:cd:
         c8:4c:ee:b3:4a:59:76:ce:4f:6a:c7:08:8b:aa:05:b1:fb:e4:
         58:e4:64:62:6d:1e:c6:68:87:29:7c:cb:95:d1:6e:5d:61:b7:
         86:60:ce:3e:54:e0:f9:5d:ab:a6:d8:22:69:6e:c2:e3:67:be:
         7d:2c:38:fb:9d:06:12:93:c9:df:1e:6f:85:5a:1d:43:70:08:
         8d:8b:99:ee:65:4f:80:b5:24:6a:c5:9d:57:4e:37:d7:89:72:
         f2:cf:9c:ca:00:a9:3f:7b:ab:af:77:ea:87:d9:09:65:7e:eb:
         34:bc:3b:18:90:55:8e:93:a1:5f:87:37:97:a4:f5:aa:86:18:
         9f:e3:4d:89:84:f7:86:eb:a7:e3:2d:fb:12:20:1e:b0:14:9b:
         ed:cf:b7:9d:30:1e:13:55:94:61:5f:90:57:ad:8d:ca:e9:50:
         8f:d6:c9:6c:bc:e4:ab:8d:47:c3:d0:b0:0e:c2:3e:cb:cc:b6:
         6e:b6:57:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----