Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/326c48e6-91e7-3eb3-b57e-141f3f07a23a.roa
File:                     326c48e6-91e7-3eb3-b57e-141f3f07a23a.roa (raw, json)
Hash identifier:          uzQKbLxnDyN0hHX4suzYMnNRcPKO3qSYByx3Z1wt35k=
Subject key identifier:   75:23:3F:25:BA:EF:4C:73:3C:55:A9:2F:6B:2A:32:4C:2F:1D:F8:58
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA121EB94BA49CCC1C99E280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/326c48e6-91e7-3eb3-b57e-141f3f07a23a.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        184.150.0.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:1e:b9:4b:a4:9c:cc:1c:99:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=ded8601a-3011-4589-8b0b-de942f1bc44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:7a:d6:01:17:5e:ad:c5:00:57:bb:c4:1b:
                    ec:d0:b5:19:fa:f3:91:8a:ad:21:a7:7b:3b:69:04:
                    d5:57:0a:e3:ef:43:29:f1:ae:18:98:14:7f:ce:63:
                    51:5a:06:23:1b:5f:2d:8c:b7:6f:a4:e5:91:f4:19:
                    cb:8a:3b:20:88:97:59:d9:b2:1f:9d:a3:0c:54:da:
                    81:87:e6:0a:e6:ec:8a:31:7d:53:89:c4:7d:42:dd:
                    5a:99:93:3f:7b:79:82:5e:77:9d:8b:04:94:4e:23:
                    40:c8:82:8f:e9:3c:c5:86:ce:f7:13:0b:ac:ea:71:
                    dc:cb:45:2b:3c:85:16:ed:bb:0d:4e:11:39:80:d5:
                    b6:52:36:1f:ec:70:6a:af:0f:88:81:bb:72:3f:05:
                    9b:78:94:60:fe:a8:ab:f7:e6:54:23:1f:9b:bb:22:
                    56:f0:05:03:e2:2a:2d:80:a0:f1:10:b5:52:fe:63:
                    12:17:be:c2:d9:ca:fe:30:9e:b3:15:24:6f:15:7a:
                    e3:c2:fa:ef:e2:15:5c:e4:af:cb:6c:6b:47:1a:ba:
                    25:dd:c4:4b:17:aa:29:81:47:be:63:11:0d:26:74:
                    fc:76:9b:50:34:6d:25:b9:ef:80:0c:64:b6:2f:2c:
                    17:0d:ce:26:75:8c:99:bd:f1:d3:b1:c2:fb:51:09:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:23:3F:25:BA:EF:4C:73:3C:55:A9:2F:6B:2A:32:4C:2F:1D:F8:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/326c48e6-91e7-3eb3-b57e-141f3f07a23a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f0:1d:4d:44:fd:6c:42:32:92:12:5f:64:01:cb:4d:23:18:
         82:3a:52:5a:05:b1:59:c7:c6:96:89:a7:72:b3:cc:39:80:f3:
         75:ec:25:81:e6:b9:6c:49:aa:33:99:9f:a4:38:c2:c0:c4:d3:
         a2:8b:04:a8:69:e2:c1:e5:60:67:fa:8d:33:3f:07:49:f4:60:
         72:1c:f8:d3:1c:e5:5f:07:9e:6a:1d:ac:a6:fe:e0:d0:94:42:
         10:3e:78:63:ff:e5:e4:76:0c:ae:d7:58:68:ec:05:ae:6f:87:
         b3:f0:36:6b:1b:01:97:b3:a1:3b:48:ab:73:0a:2c:9b:79:be:
         d0:99:0d:22:f5:0e:4b:98:82:10:00:55:59:4b:03:1e:19:36:
         29:4a:8d:eb:51:37:b1:d3:78:a9:4a:5e:76:cf:0c:7a:97:6c:
         7c:84:22:fb:74:c8:7e:c4:f1:99:eb:ee:7c:6c:56:c3:0b:b6:
         6c:20:8f:34:9b:55:35:38:a5:d0:06:69:12:aa:af:64:1d:3f:
         ef:52:85:45:31:1a:29:f5:d9:7d:85:fa:10:fc:da:86:f4:39:
         33:86:1b:88:1a:73:01:23:2f:69:12:5d:3d:98:51:4f:69:20:
         cc:86:17:1c:d1:c2:2d:74:5d:4a:28:64:f2:e4:1d:c2:e7:32:
         0c:df:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----