Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5471e26c-cf26-32fa-b693-1509e0b71703.roa
File:                     5471e26c-cf26-32fa-b693-1509e0b71703.roa (raw, json)
Hash identifier:          iVBZ2onc5RUoUV7ajqcWmTH+hl+pEK4ljmnsqb3Ks0I=
Subject key identifier:   C4:E1:6E:AC:F7:7B:49:55:52:37:57:B3:90:FC:7B:3D:1C:29:52:98
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE43768A52FB0321CD17A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5471e26c-cf26-32fa-b693-1509e0b71703.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     855
IP address blocks:        70.26.52.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:37:68:a5:2f:b0:32:1c:d1:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=04051e47-81eb-4836-94e6-09c59c3c287a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:5e:51:4c:1b:58:3a:97:40:ee:d2:73:7f:
                    b6:21:27:86:ac:ea:4d:78:62:6b:ad:4c:92:88:82:
                    df:d0:88:b9:ee:27:29:28:3c:35:6a:6d:02:3b:55:
                    f7:48:a2:74:0e:f6:b5:e2:89:c4:85:ff:5c:3d:e0:
                    2d:61:df:42:75:b7:42:51:ae:fa:36:f2:a0:f2:69:
                    a0:73:22:25:00:4f:0b:cd:f9:cd:64:87:73:02:2d:
                    14:6f:91:f3:5c:4d:4c:23:b3:4f:71:bc:39:78:0b:
                    3a:7d:c3:9b:92:d0:e2:e6:9d:74:35:d2:26:e4:1a:
                    d9:c5:86:fb:cf:3f:9d:96:a4:5a:38:89:57:f1:e4:
                    8f:7c:a3:c0:d2:77:02:5f:b3:e5:de:aa:87:93:27:
                    1f:73:dc:76:d5:4e:69:21:72:6b:30:30:04:5e:18:
                    1c:41:73:7c:29:83:53:b5:b0:e2:c5:de:56:33:9b:
                    d6:16:63:54:42:73:e0:c1:f3:49:05:fa:4f:13:7d:
                    b8:e1:b3:99:89:e6:9b:22:f2:b8:e4:32:86:64:60:
                    06:50:a8:06:b2:ed:a7:3e:ff:a2:6a:9a:5b:79:ed:
                    43:d7:d3:ec:df:60:67:56:5f:a9:6b:49:76:03:85:
                    ed:c0:75:98:40:1a:59:83:ce:dd:a2:47:e7:9e:bf:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E1:6E:AC:F7:7B:49:55:52:37:57:B3:90:FC:7B:3D:1C:29:52:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5471e26c-cf26-32fa-b693-1509e0b71703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.26.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c4:ed:c2:68:26:89:99:28:bc:f6:59:f1:6f:1e:bc:f3:5e:
         e7:ff:2e:26:79:ac:77:44:d1:2d:48:c7:16:7b:f2:02:dd:d9:
         85:ee:ac:3d:f4:95:53:ee:38:33:0c:3c:93:17:fd:50:e2:68:
         13:5b:81:48:7c:13:46:d3:66:6a:7d:f6:23:64:a9:4d:eb:52:
         1b:86:bd:9e:34:b3:7a:70:2f:83:81:96:ef:18:db:e6:8a:a2:
         3b:dd:d3:a3:91:88:75:82:11:c8:f1:16:61:19:64:8d:2c:8f:
         ae:fb:55:82:2d:41:22:e2:88:0a:f4:67:73:f8:2e:a2:2f:19:
         b6:29:42:a7:f8:40:6a:22:96:40:65:e3:4b:2a:c7:e8:59:a3:
         80:9b:2f:0a:58:90:9d:40:f5:d1:75:5a:87:1a:11:86:23:c1:
         f7:8a:e9:5e:22:68:f0:bd:d0:cf:a2:90:1f:11:07:a7:28:4f:
         d2:cb:71:93:2f:3c:94:48:23:74:aa:16:45:5d:8c:ef:4e:5a:
         b6:05:d2:4a:f6:de:6f:bc:ed:c9:b4:88:9f:3e:82:1a:69:50:
         5e:94:c9:e8:66:38:b5:29:7e:1c:b4:a9:a8:88:63:40:b1:f2:
         59:57:b6:7f:3d:a2:5a:51:a7:cf:39:d2:74:8b:b4:96:39:b4:
         51:de:5f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----