Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/502c1f7f-d177-3464-8afa-9ebc95e17ea0.roa
File:                     502c1f7f-d177-3464-8afa-9ebc95e17ea0.roa (raw, json)
Hash identifier:          aoGVnvz4O1dnjXvqwRFMeZsD8Y9CTsQjg4EDteylreA=
Subject key identifier:   A8:F5:D1:62:F8:D8:E1:8E:C2:1E:8E:0D:CF:99:9B:67:D4:7A:ED:11
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FED270C42588AC91C9F092B80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/502c1f7f-d177-3464-8afa-9ebc95e17ea0.roa
Signing time:             Tue 15 Nov 2022 12:00:00 +0000
ROA not before:           Tue 15 Nov 2022 12:00:00 +0000
ROA not after:            Wed 08 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        184.148.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ed:27:0c:42:58:8a:c9:1c:9f:09:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 15 12:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2023 GMT
        Subject: CN=e825775c-cf34-4661-8f0f-436be1e02a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:b3:a0:a8:89:af:97:59:b8:32:93:a6:79:
                    14:ff:a1:ef:6f:0d:c8:a9:69:df:19:d0:07:b8:e4:
                    63:34:21:e8:8d:2d:97:70:af:37:ee:e8:e0:a9:1b:
                    14:f3:83:35:de:c8:37:bc:59:58:b5:e3:77:00:c9:
                    6f:fc:e3:82:c2:21:9c:67:28:9d:13:62:a6:84:da:
                    2f:31:cb:be:26:20:dc:0b:9a:f4:e2:de:06:7c:08:
                    52:8b:3e:70:c5:db:b1:50:e9:98:0f:1a:72:91:54:
                    98:2f:98:3c:24:f4:16:29:c6:0f:ae:72:9e:3a:e7:
                    ce:b1:f9:02:29:c4:1e:e3:53:95:41:4b:26:a8:20:
                    3c:26:12:94:0f:52:b5:e3:18:fc:2c:10:3a:fc:d8:
                    50:6d:bb:ae:cc:45:93:57:3d:8d:67:54:84:f3:bf:
                    c9:b3:4e:e0:94:af:bb:8d:18:95:6d:58:db:75:4c:
                    1e:aa:4b:c6:c8:b5:9f:88:a1:46:ad:15:c8:9b:6d:
                    83:a4:cd:8a:1f:13:bb:bf:df:5a:6c:f6:08:cf:73:
                    dc:bc:c5:07:59:a3:2e:38:21:dd:14:15:82:14:53:
                    bd:b7:e2:7a:3e:8c:8b:f5:5e:bc:56:ce:2f:04:8f:
                    b5:67:e2:ce:a6:6e:2a:42:31:ed:6e:9b:e8:53:6f:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F5:D1:62:F8:D8:E1:8E:C2:1E:8E:0D:CF:99:9B:67:D4:7A:ED:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/502c1f7f-d177-3464-8afa-9ebc95e17ea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.148.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:99:51:95:fa:35:9f:f9:a6:99:37:5f:0c:71:9e:60:05:2c:
         dd:91:53:74:e9:b6:be:bb:7d:f5:c3:f5:fa:61:c0:f2:80:5b:
         b7:f9:46:f6:6a:b0:ad:c1:df:f4:15:73:0d:64:84:e9:50:a1:
         b0:62:75:c3:e8:60:c1:87:3c:c7:da:9d:c2:6b:b4:7a:80:0e:
         55:c0:63:aa:3b:42:1d:f2:6c:4e:c3:8c:92:ea:64:f3:13:ad:
         5c:5d:fa:74:b6:cb:d6:3b:ea:65:1f:e6:e0:71:85:48:39:20:
         5d:e8:3b:cf:51:26:05:92:12:39:2e:bc:a4:ac:a8:2e:7a:2a:
         89:40:1d:34:a3:63:66:d5:d5:68:d5:28:49:c9:40:b0:9a:ee:
         33:c0:73:14:22:04:e4:9b:5e:c9:ce:54:b7:e4:9f:4a:37:62:
         fb:eb:87:fb:b3:ad:a8:ca:a2:5e:d4:b3:38:5d:64:4b:11:53:
         16:a5:0e:17:ca:e0:75:40:52:db:4f:47:0d:dd:ba:a6:97:74:
         87:6d:99:a4:34:ea:b1:a4:14:3a:6f:92:a8:04:bd:6d:96:f1:
         6e:9c:72:0b:8b:59:77:c5:c5:02:e5:4f:ae:e9:8a:aa:eb:f7:
         ec:a1:13:f7:49:a7:5f:1c:36:f1:5b:c0:65:a8:48:ef:0c:69:
         9b:80:9e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----