Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f34c012-12a4-384f-ad72-5ad123b3b899.roa
File:                     3f34c012-12a4-384f-ad72-5ad123b3b899.roa (raw, json)
Hash identifier:          Ff3ODG4pHxSqsVtzYGXaqHGd2aT1NOp3LcZYhX8jDKc=
Subject key identifier:   BF:0E:C0:C2:EE:D3:D3:18:5A:50:98:97:0B:24:3B:E2:F8:C6:D7:04
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FED26F11AEF38304471AD7644
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f34c012-12a4-384f-ad72-5ad123b3b899.roa
Signing time:             Tue 15 Nov 2022 12:00:00 +0000
ROA not before:           Tue 15 Nov 2022 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        70.54.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ed:26:f1:1a:ef:38:30:44:71:ad:76:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 15 12:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=0d6cb0ac-fbca-4d5f-a3e2-ee5c7ddaf2c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:aa:ed:24:79:24:41:1b:81:2e:20:16:5f:
                    a7:ad:eb:41:28:bb:cb:ed:3d:c8:a9:1a:32:5f:de:
                    cf:e9:ea:d5:ba:fe:18:de:33:dc:23:a2:b2:e1:09:
                    18:da:0f:8e:f7:5f:bd:78:24:a8:44:e6:c2:4a:12:
                    1f:17:63:7b:df:39:ee:ae:ec:3f:3f:75:9e:25:f9:
                    b8:fd:dd:0a:39:a1:6d:f8:b8:8d:66:38:f0:9b:9b:
                    5b:5e:ff:ef:32:d5:66:e1:6c:eb:96:bc:33:f3:4d:
                    1d:9c:6f:e5:aa:5c:78:ea:02:1b:5e:84:56:69:89:
                    c5:4a:0b:a6:a8:ce:7a:7d:be:8b:91:9b:69:9f:2b:
                    aa:a3:79:13:c4:b0:33:ef:a8:b2:8a:8c:a7:8b:a6:
                    39:d3:87:7b:15:2f:a2:01:c6:3f:a6:5f:3d:b5:c2:
                    b9:32:d5:00:e2:53:34:45:5c:cc:5d:df:f4:8f:7b:
                    54:fa:eb:45:15:5a:e7:b1:80:73:05:d0:90:ac:f0:
                    29:61:af:73:9b:b0:a8:19:3e:5c:df:09:ba:53:26:
                    ac:8a:8e:6b:65:2b:16:fd:ae:34:d7:ab:0b:72:dc:
                    a1:d4:e9:ef:50:b6:49:78:4f:75:ca:a1:14:ea:33:
                    1d:70:c2:0b:b6:7f:cb:bb:bc:75:22:00:ff:94:48:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0E:C0:C2:EE:D3:D3:18:5A:50:98:97:0B:24:3B:E2:F8:C6:D7:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3f34c012-12a4-384f-ad72-5ad123b3b899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a6:25:c5:8f:30:f4:6c:77:35:25:4a:ba:7f:26:8f:ef:ac:
         68:05:d8:f0:6b:d9:8c:33:c1:ed:83:65:d3:88:d5:41:74:e3:
         5f:3c:2d:a8:f8:14:2b:c6:8f:7f:ea:a9:90:64:16:23:d7:24:
         8d:dc:31:e0:29:86:ec:98:74:64:8a:ad:4f:19:63:95:9d:93:
         20:40:88:cc:66:ce:7b:62:9d:96:c9:ee:4d:47:c8:87:7e:fc:
         f0:7c:2e:ba:13:91:bc:f8:9e:99:1f:cf:cc:d3:74:91:98:a3:
         e2:75:ca:45:ad:c2:a2:c3:26:b7:a2:46:97:dc:77:ae:82:eb:
         9f:a1:66:16:b2:45:90:fb:26:bc:a3:c9:c9:ea:4c:a0:5c:18:
         a5:13:d7:e2:0b:ab:0a:05:4b:25:25:37:83:59:6f:ac:08:17:
         88:36:66:0b:de:9c:17:80:c5:f2:01:89:c2:20:df:e2:3f:23:
         18:b6:92:fb:8f:89:25:4a:56:02:ce:be:b4:95:74:6d:cc:8a:
         bf:53:c0:55:c0:50:eb:9f:e2:6c:af:22:c3:d3:28:61:85:b7:
         dc:d3:a8:b9:4e:fb:30:42:a7:e1:01:46:0d:18:47:6c:27:e8:
         e9:18:d4:a9:e5:5d:86:be:40:1a:f1:4c:2f:04:5c:6c:e4:e3:
         58:be:2c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----