Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/45d95347-7cb6-3199-b8a1-aaa0a0fa340c.roa
File:                     45d95347-7cb6-3199-b8a1-aaa0a0fa340c.roa (raw, json)
Hash identifier:          0v0Hxc5e//RhpkSQAY6ORxpYaVP92PHB9g1rr8LwwmY=
Subject key identifier:   43:98:55:CB:F5:5E:3C:5F:03:36:11:1E:CA:AC:E4:FA:87:93:E1:D7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA11986038D15D98E8E04430
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/45d95347-7cb6-3199-b8a1-aaa0a0fa340c.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     46959
IP address blocks:        72.28.92.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:98:60:38:d1:5d:98:e8:e0:44:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=c03d22d5-a7e7-4afd-b78b-a287dc2f3761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:f2:7b:28:ef:4e:e9:24:7f:1f:e2:a3:5f:
                    07:b5:10:18:d6:7a:1c:6e:fd:33:84:d9:c2:da:14:
                    0d:d8:8d:b4:e2:18:b7:a3:e1:a3:e0:59:f1:d6:f5:
                    61:ac:69:3d:80:f3:b9:96:55:c7:40:23:a0:41:0b:
                    e6:6c:c7:d5:6f:c6:e7:dd:52:9c:72:50:2d:9a:d0:
                    4c:af:50:1d:1a:67:65:14:6a:bb:a4:a6:a8:ff:0d:
                    03:4f:39:3d:99:f2:89:f0:7d:44:7a:57:4c:7f:b5:
                    20:04:f0:3a:7e:7c:37:61:79:d7:71:e3:a0:e6:cc:
                    0c:2d:d9:de:f0:b1:dc:37:be:4a:90:1d:ae:d0:9a:
                    ab:5d:73:7a:11:a0:d1:c8:5a:c1:15:a5:75:42:d6:
                    17:ed:87:5f:32:8c:4c:8b:9b:e6:0a:d1:5b:21:9a:
                    73:1e:47:33:fe:93:d8:f1:5e:30:03:9f:86:57:36:
                    6a:08:d5:cc:7c:f5:e9:40:92:6c:17:e9:cc:46:be:
                    51:e9:a4:72:60:4f:32:c7:bf:e6:68:2a:ed:a3:41:
                    08:02:bb:a9:6f:b7:08:46:6a:6d:db:b2:f6:d9:72:
                    8a:e9:15:f4:03:1f:6a:2e:60:35:a4:9a:75:07:a1:
                    25:6a:7f:3b:5e:14:32:fe:16:1f:e8:39:50:fc:d1:
                    e5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:98:55:CB:F5:5E:3C:5F:03:36:11:1E:CA:AC:E4:FA:87:93:E1:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/45d95347-7cb6-3199-b8a1-aaa0a0fa340c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.28.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c5:1f:b3:d7:6e:dc:ff:5e:33:74:f9:8b:f5:39:e3:a1:ba:
         54:ee:99:3b:22:87:49:ff:4c:e0:32:40:b4:c3:d0:ce:f0:70:
         f2:74:66:84:13:ef:84:19:15:93:e8:2a:2e:bc:4e:6b:0b:47:
         62:ef:c5:5a:98:26:16:26:7b:f3:aa:2f:eb:0c:6f:b5:eb:94:
         76:ab:4c:19:d0:e3:22:d2:90:48:14:13:6a:47:ee:a1:5e:ad:
         0b:1e:c2:fa:97:42:e0:15:39:14:9f:7b:e8:02:bf:c2:a7:3c:
         d7:51:82:cb:21:9e:34:85:54:9a:a5:60:25:23:4c:7b:2d:18:
         db:7f:b8:1c:de:37:9a:e4:39:82:b8:c9:c2:40:58:d0:88:02:
         ed:c0:aa:cd:43:18:82:46:e6:ae:98:07:47:5a:ba:93:70:73:
         8e:ef:9d:1b:86:bb:5b:33:87:a2:e3:bc:e0:3d:bf:12:a9:89:
         20:ac:87:22:c8:cc:f2:68:f4:d0:db:39:eb:ae:d3:6f:88:e3:
         1c:33:9e:38:49:3e:ba:c8:68:27:32:e4:fb:90:a6:b2:0b:e7:
         f3:31:28:90:c1:d6:10:a6:62:11:28:3f:73:e6:a4:90:f3:4d:
         31:f6:b0:0d:49:89:82:b3:86:7b:73:67:7d:7f:79:04:e5:95:
         5d:34:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----