Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3ec6bde6-fc2e-3bde-8f1e-2e4e7e6db7c8.roa
File:                     3ec6bde6-fc2e-3bde-8f1e-2e4e7e6db7c8.roa (raw, json)
Hash identifier:          EkqA0G8Zp2ppnfPZHFuygPSQqP4xHu4g0MYvx9MRNDo=
Subject key identifier:   7B:FF:69:96:C9:EA:18:10:BD:FA:86:11:60:64:60:F0:5E:47:E4:AF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D3FCAB6D8F360672A8A880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3ec6bde6-fc2e-3bde-8f1e-2e4e7e6db7c8.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        74.15.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d3:fc:ab:6d:8f:36:06:72:a8:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=603a08d2-be9f-492f-804d-d4cb0a56ed2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:be:e6:75:67:78:6b:4f:39:76:82:ba:cb:
                    48:15:38:20:68:70:99:ae:9f:3c:66:be:27:0f:d6:
                    39:da:04:01:8b:e9:46:e6:28:95:40:c2:75:b2:d5:
                    b1:5c:e6:49:60:16:8f:76:12:1d:3f:67:55:fd:dc:
                    f8:6e:8d:75:fd:70:11:0d:58:18:72:98:31:ac:33:
                    86:23:3d:54:e7:f5:9c:55:c4:57:7e:c5:b1:69:74:
                    f3:03:aa:e1:2e:1c:3e:c0:91:c6:5e:68:f5:03:56:
                    07:66:fd:6a:a6:c8:e4:c1:46:54:44:76:53:c9:bd:
                    43:80:c7:06:8e:62:6f:74:fd:85:e9:51:a8:a7:bc:
                    e7:a1:1a:a5:55:53:e8:ab:51:c5:65:55:50:25:bf:
                    9b:2d:3b:42:db:44:72:82:47:e1:8d:64:ad:fd:12:
                    22:49:10:d1:16:55:12:79:51:04:05:fb:11:1c:b2:
                    b6:9f:c9:c8:da:e6:f5:4d:04:00:70:f4:56:8e:cd:
                    90:78:e1:1e:81:fb:8d:99:54:79:18:cc:52:a8:66:
                    e9:ce:36:52:25:51:f4:3a:56:01:20:b9:8e:d5:d7:
                    b7:bb:3c:3b:7b:a0:4a:39:09:eb:38:0e:c8:d8:53:
                    2c:45:02:66:56:a4:86:04:d3:4c:7b:75:7e:3b:79:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FF:69:96:C9:EA:18:10:BD:FA:86:11:60:64:60:F0:5E:47:E4:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3ec6bde6-fc2e-3bde-8f1e-2e4e7e6db7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.15.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:1c:5b:98:2d:89:ad:d6:49:3b:18:c9:fb:8a:b2:6d:ee:c6:
         77:d4:33:58:45:e7:99:e4:c5:92:be:dc:a1:47:6e:57:6b:d4:
         11:b6:e8:fb:df:82:07:4d:34:78:01:e1:d9:48:69:5e:cd:1c:
         ec:95:28:21:6a:3c:44:28:fb:4b:2d:35:9f:4e:a2:ac:d4:27:
         2d:7b:f1:7a:9f:69:59:9f:80:30:72:5a:c8:52:bf:fb:8d:d2:
         8c:e2:04:d4:b9:b8:62:77:16:63:ec:0e:f2:69:1d:74:b7:39:
         92:71:59:c3:4c:c2:d4:a3:5f:24:63:61:ef:a9:c5:54:b8:67:
         12:b3:ae:11:1a:52:d4:35:44:7e:d6:2d:72:38:42:92:68:50:
         a2:6d:e4:aa:05:51:82:cc:59:03:ca:bc:58:fa:64:6b:5e:07:
         43:b6:a4:e7:54:d1:8b:5d:f9:3e:93:0f:41:7e:61:07:b6:fd:
         3b:62:cb:d0:4f:3e:cb:c2:14:fe:99:8a:d5:c0:ab:9f:8b:80:
         1b:47:3f:04:99:1c:2d:92:ca:1a:b0:9c:27:fa:b1:e8:a8:84:
         0d:63:2c:fd:60:d5:ef:01:81:7f:32:92:90:50:7a:97:05:3d:
         ad:4f:10:80:8e:5c:50:fa:14:57:4e:47:b4:dd:a8:0f:01:6a:
         3a:ba:8b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----