Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/52bddb78-2e47-30d5-aaea-c2615b5537ec.roa
File:                     52bddb78-2e47-30d5-aaea-c2615b5537ec.roa (raw, json)
Hash identifier:          2Kvyz+ALiifmmvIAC2dIzTdKnBAQuqIXo+D1uHMh3yc=
Subject key identifier:   0E:7D:43:B3:60:B5:67:0E:0E:8C:11:DD:3D:E1:F7:41:78:81:77:2D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D4093CC9383DD45B7286E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/52bddb78-2e47-30d5-aaea-c2615b5537ec.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        142.182.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d4:09:3c:c9:38:3d:d4:5b:72:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=15ab9e5a-6ff2-405f-b983-4843d98c850f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bf:f3:12:a7:8d:0e:12:21:12:31:6e:83:ef:
                    0a:02:68:95:a7:f8:4c:18:f7:7b:15:59:09:1c:cb:
                    a5:ce:a7:e2:a1:a6:d3:1e:64:db:51:2f:78:dc:5a:
                    5c:4b:e0:87:bf:ce:14:4c:01:06:3d:42:13:91:6a:
                    cb:9b:d2:65:2f:62:94:11:93:4a:2b:66:57:41:7a:
                    20:51:6e:f4:d5:a6:b0:d4:e7:37:fe:e0:95:5c:1f:
                    68:16:80:2f:6e:d8:ec:f8:4f:f0:6f:22:dd:99:78:
                    a7:ff:2a:c4:14:89:e3:98:fa:e7:79:85:3e:19:e9:
                    6f:c0:4a:1b:05:81:93:bd:fe:c3:6b:48:70:c8:90:
                    ee:0b:d9:61:cc:01:6a:d6:86:d2:f3:99:30:b8:a3:
                    01:56:52:01:27:37:52:2e:cb:96:f2:e7:a1:7b:de:
                    b2:81:c4:45:58:a7:65:c8:5f:00:d1:2f:22:46:f4:
                    84:c9:dc:c4:c2:df:af:b5:3d:e4:f5:52:fc:13:e0:
                    f7:90:4c:94:81:1d:c4:14:3f:ea:ac:f3:c6:76:41:
                    ad:e5:e7:64:45:da:4e:35:c7:aa:8c:04:a9:82:ee:
                    f0:ac:a4:f6:f4:35:a4:00:4c:80:00:d8:c4:0a:b8:
                    41:44:6d:57:b1:a2:df:fd:14:fa:57:d1:6b:8b:e6:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7D:43:B3:60:B5:67:0E:0E:8C:11:DD:3D:E1:F7:41:78:81:77:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/52bddb78-2e47-30d5-aaea-c2615b5537ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.182.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:54:8d:59:0c:5a:e4:69:15:15:ba:22:7c:51:88:7b:4d:cb:
         6b:e9:23:f5:98:83:fa:e2:ba:96:d2:59:20:86:de:30:38:54:
         1d:12:f2:e7:23:ae:6c:1e:d2:30:a6:c9:8e:4d:1e:0e:81:28:
         33:1b:ed:4e:07:20:17:2a:6f:1a:53:bc:d5:c1:dd:8c:a3:e2:
         98:ba:8e:37:45:5f:6c:cc:8c:75:06:5b:f2:1b:5b:ef:96:8e:
         59:af:f1:c5:ff:79:67:3f:0e:51:d3:0a:f5:95:9f:0b:1e:9f:
         d6:b2:36:87:1f:71:67:d1:0c:57:75:51:9b:d3:ca:78:54:27:
         28:d6:ce:04:60:18:e4:b4:3a:e0:61:c2:00:6f:ce:0f:e1:6f:
         ac:6e:c7:c8:fd:ba:0f:9f:03:15:99:33:46:fb:80:da:99:53:
         21:5a:b5:05:16:32:4e:5d:59:62:c4:6f:ef:d1:b8:cc:fd:d5:
         bb:fa:ff:25:77:3c:27:72:5b:25:11:ec:c1:6c:4a:80:c8:d2:
         29:d5:a4:63:0a:e6:4c:18:57:76:f0:c7:da:dc:6a:23:5c:0c:
         49:01:8e:21:96:dd:25:ed:52:9a:84:69:a4:1e:29:4c:e2:5e:
         f2:b6:38:23:6d:84:76:d4:67:df:e6:f3:ea:e9:35:78:7e:4f:
         1d:c5:a3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----