Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fb6fe04-f951-3bd4-865c-f6e672a1846c.roa
File:                     2fb6fe04-f951-3bd4-865c-f6e672a1846c.roa (raw, json)
Hash identifier:          /401vGhbGoRGk+q4n1kwYqnc6ZdiP0sWg8i8or78hgA=
Subject key identifier:   EF:8F:9E:F7:9D:EB:02:FD:80:A2:DD:8D:E1:12:01:83:B1:D5:B9:69
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B4E7657EA17B5594E03980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fb6fe04-f951-3bd4-865c-f6e672a1846c.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        207.35.170.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b4:e7:65:7e:a1:7b:55:94:e0:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=65937fef-31f6-4ca4-92fe-429ec1a2d1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:fe:3c:39:60:39:0f:e5:61:5f:a9:54:cf:
                    03:49:36:c5:9d:44:3a:82:ce:77:b7:9f:79:41:d6:
                    b4:d7:25:0c:9b:61:59:dd:28:1d:ac:a2:eb:a7:08:
                    0d:a8:68:a8:fb:58:c2:9c:1b:02:b1:e5:18:b6:ef:
                    9c:fc:09:da:66:dc:f5:9b:f2:a0:34:a6:4c:10:df:
                    48:36:3e:a3:7b:99:11:fd:23:00:6c:ec:aa:ea:97:
                    1d:62:a1:df:59:7b:ac:ea:76:83:ca:31:79:39:50:
                    7d:97:ae:0e:d8:aa:60:31:56:f4:13:d8:05:87:5d:
                    01:23:60:a3:b6:61:b9:aa:6a:21:10:8c:04:3b:bd:
                    cb:90:4a:2d:75:36:51:7c:e8:97:1a:1a:08:74:ef:
                    33:43:79:ff:a9:a1:6a:bc:e8:30:03:ad:65:68:74:
                    bc:46:1c:20:7c:89:c0:d6:06:68:53:87:1d:35:d1:
                    8b:3b:e2:4c:73:06:05:47:ea:33:44:ab:0a:f7:9c:
                    d9:81:7d:85:af:5f:77:e7:49:72:51:fc:c1:26:8d:
                    a4:d5:e9:be:b8:40:c1:c4:76:4b:ed:62:12:27:82:
                    8f:3f:43:68:e7:dd:20:c4:e8:a7:4f:73:0f:05:0f:
                    d8:6e:ef:f6:8a:dd:c3:e6:a3:da:eb:1c:88:58:ac:
                    3f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8F:9E:F7:9D:EB:02:FD:80:A2:DD:8D:E1:12:01:83:B1:D5:B9:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2fb6fe04-f951-3bd4-865c-f6e672a1846c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:66:3c:c7:70:57:6f:9d:f7:18:75:c8:a1:21:f3:9b:2a:c0:
         8e:16:09:e8:94:d4:5a:b1:97:8f:36:0f:da:40:17:e3:a0:2f:
         d9:9f:0e:85:46:34:32:4e:e5:37:88:5e:a6:01:f3:c2:8e:d4:
         fc:a6:81:8e:eb:3e:58:b5:c7:4f:ef:6a:77:9c:bf:2d:05:e1:
         33:bf:d9:b4:cd:72:5c:24:20:48:32:d0:36:13:bc:81:5b:59:
         76:2d:ff:2c:5c:6f:73:ce:64:42:e7:69:43:46:d1:b9:a6:77:
         78:8c:8e:dd:85:85:36:2b:68:2f:55:99:d5:4f:24:03:fb:d5:
         75:c1:4b:26:65:bc:cc:f9:db:c9:4f:21:4a:0a:0d:0d:4b:44:
         b8:de:d0:81:69:c2:d2:66:83:bf:9d:fc:42:97:a4:80:0d:0d:
         d2:b8:db:ad:ef:39:09:01:a8:e1:e2:71:26:6c:df:e5:53:a4:
         63:06:f9:b9:5a:cb:eb:7c:a0:d4:aa:f6:96:ef:50:5b:72:33:
         69:78:e3:41:88:16:7e:7f:78:bc:62:91:1f:82:46:6c:c5:cc:
         fe:c8:2f:11:92:db:75:2a:cc:e1:67:7d:4d:dd:a2:5f:46:0e:
         f2:40:17:26:7e:84:e4:2a:b1:94:af:24:0e:16:a4:00:66:12:
         72:28:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----