Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a70df7d-a790-3246-b5a8-732e33d49847.roa
File:                     2a70df7d-a790-3246-b5a8-732e33d49847.roa (raw, json)
Hash identifier:          9kg4oF1NR7GmA4AyQ/1D5dy72p/MEguxNpHdO7X7T/0=
Subject key identifier:   2E:0D:EA:08:92:D8:D9:D6:4F:43:F2:AD:81:ED:0F:76:02:8E:76:F1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE671A338D6F4B7F3CA2840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a70df7d-a790-3246-b5a8-732e33d49847.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:8002::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e6:71:a3:38:d6:f4:b7:f3:ca:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=51fd2aca-3fe4-4991-b1c6-31b4207d0394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2d:31:39:60:71:14:e4:79:e5:b1:0c:0d:14:
                    9b:f9:15:75:b6:ce:6d:64:66:b0:ab:d0:82:32:a3:
                    dc:54:6f:b5:26:9e:22:07:ff:91:19:e6:2e:10:0c:
                    88:6b:0d:14:99:8c:d0:8e:4b:63:b5:54:ea:3b:93:
                    86:96:b7:7a:b6:bc:f7:7d:06:78:a3:9f:e0:88:5d:
                    ee:9b:79:e5:2d:da:29:f3:a2:68:53:f2:22:a5:1f:
                    9b:1d:a0:96:f9:64:4c:6b:22:67:16:a7:ee:e5:7c:
                    4b:83:00:91:99:ea:39:fa:44:0e:d3:9f:1a:53:66:
                    11:d9:fd:71:53:98:a0:c0:73:78:1c:f4:b2:13:41:
                    84:0c:79:62:ed:ba:83:c1:c0:89:83:e9:63:46:13:
                    ea:d1:a2:72:b0:20:fc:10:b2:7e:c4:d9:c7:ca:cd:
                    07:fe:df:97:c1:52:96:7e:3e:40:05:ca:e4:d1:e1:
                    e2:f0:02:8d:9e:80:a1:28:6c:52:69:f6:7c:39:0b:
                    98:81:05:45:7b:65:ca:45:9a:99:a9:c4:f1:3f:5c:
                    83:28:18:86:b2:33:63:00:45:cd:e3:60:07:45:08:
                    9f:8d:6c:30:c4:04:64:f2:cd:f9:45:96:7d:d6:b8:
                    1d:ba:30:e6:38:20:6d:d8:f9:f2:b2:70:ef:ae:ac:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0D:EA:08:92:D8:D9:D6:4F:43:F2:AD:81:ED:0F:76:02:8E:76:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2a70df7d-a790-3246-b5a8-732e33d49847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:8002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:48:00:cb:02:8c:e2:fa:c2:ff:8b:bd:9d:f3:ef:20:e1:6f:
         9d:4f:fe:ac:90:29:1d:0e:56:9a:e2:8d:2a:39:c8:92:17:f5:
         b2:1c:7c:2e:9a:bd:79:c0:82:a0:55:be:c2:86:d1:5e:a2:be:
         c3:74:6d:f1:76:22:63:d2:86:77:0c:c8:81:9d:45:0e:97:fd:
         59:50:ec:7b:08:c5:3a:85:57:61:ca:e6:78:a2:4e:9c:b6:0c:
         29:2b:0a:a1:e1:76:fd:b1:7c:9f:c8:f3:16:5e:45:13:5a:ea:
         22:a9:aa:86:b0:f8:4a:38:e6:af:ec:63:bd:0a:18:36:f3:40:
         bd:e4:ec:e0:17:3d:f2:3b:4c:bc:2c:66:de:2a:e8:37:a6:54:
         5e:e4:6f:ae:4f:03:ef:7b:9f:5d:ae:71:28:37:fe:37:43:1d:
         f1:8f:fc:a1:12:1f:a6:da:3d:11:c5:f4:3d:43:c7:4d:c0:21:
         46:67:e1:8c:29:b6:be:8a:f1:65:5e:69:2a:02:b9:9b:40:03:
         80:b8:ab:b4:fe:a4:97:1d:fe:04:8e:88:fe:57:ac:5f:9d:24:
         d7:89:7f:ed:b9:da:8a:14:92:74:9b:96:45:01:9e:85:5c:27:
         dc:3e:17:04:e1:8b:e1:28:78:d2:20:bd:a7:d2:82:bc:cd:33:
         e8:15:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----