Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/58cd0f24-0351-337e-a545-d50d5c831bea.roa
File:                     58cd0f24-0351-337e-a545-d50d5c831bea.roa (raw, json)
Hash identifier:          ngZ3dF5Qs9p3UcBRJGzFssQNraqtpEO1bV0BZrlfts0=
Subject key identifier:   33:00:B8:F8:BA:17:82:99:EF:41:14:4F:7F:CB:6E:28:D0:F5:CF:7F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7614779038801F6FA50980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/58cd0f24-0351-337e-a545-d50d5c831bea.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     7122
IP address blocks:        216.55.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:14:77:90:38:80:1f:6f:a5:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=7ef0dea7-cc93-44bd-9387-7bcd1722c33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:66:17:a3:1e:72:9b:98:6e:00:68:6b:1c:25:
                    b1:83:2c:cf:8a:e9:a9:8b:49:28:00:15:e9:8c:5a:
                    42:24:81:17:ca:ff:65:d3:47:2b:3e:63:63:81:97:
                    e8:18:b1:71:55:b0:15:28:46:59:dd:0a:c1:89:24:
                    10:3b:1a:fc:31:94:cc:a1:ff:c2:eb:93:47:7a:8e:
                    ca:80:ff:fb:9e:c0:33:93:db:c8:82:7e:e4:c1:bd:
                    36:8d:01:27:0b:99:ef:41:85:ce:87:a9:4a:9e:67:
                    55:95:30:48:7a:7d:18:5e:6e:2a:8a:9b:4d:1f:8c:
                    f3:36:95:e3:2b:c2:84:4b:29:7a:0e:de:7d:8a:15:
                    07:55:9c:d6:88:21:02:aa:a1:9c:2f:9c:52:cb:b2:
                    af:ca:09:1c:db:66:0f:ac:17:38:13:72:79:ff:9c:
                    fb:82:4f:8e:18:4d:d0:8a:d3:b5:d1:6b:60:2a:92:
                    c5:82:2d:ca:e6:17:27:c2:64:ad:1e:7f:5a:5a:25:
                    29:de:d7:ae:16:29:0a:ab:7e:95:8e:ca:43:2c:11:
                    c9:96:0f:1d:06:71:e0:b4:93:14:1f:e4:c8:6d:5c:
                    2a:35:fe:de:78:c9:72:13:04:89:39:d1:4d:e9:18:
                    a0:1f:1a:d3:1f:ea:3d:15:51:bf:3c:1b:a2:b7:a6:
                    82:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:00:B8:F8:BA:17:82:99:EF:41:14:4F:7F:CB:6E:28:D0:F5:CF:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/58cd0f24-0351-337e-a545-d50d5c831bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.55.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:aa:92:49:69:27:59:e1:f5:8d:f1:bb:12:52:58:84:d3:1e:
         57:70:4b:f5:f2:00:8e:a2:15:3c:a7:bd:54:d4:b9:c1:a3:25:
         53:00:10:17:a4:b1:6e:27:b4:f8:15:ef:c4:5a:bd:1d:c9:58:
         b1:db:2c:e7:86:61:99:dd:aa:7e:62:28:fd:bb:92:2f:0b:94:
         23:a9:b2:1b:21:8a:45:de:60:1d:29:28:32:ee:f6:56:1f:26:
         58:31:23:bf:14:48:db:3f:ac:c8:18:76:74:ef:02:c5:6a:b5:
         b2:20:92:66:6a:89:a0:4c:0a:6c:27:74:fe:10:49:70:e2:97:
         c5:8a:aa:f5:2f:e7:58:e7:4d:30:4c:ab:fa:60:18:19:7a:37:
         26:a4:c1:94:db:ff:a7:f5:7d:31:e1:5b:7e:44:12:9b:1f:5e:
         11:f6:b1:1b:52:93:eb:04:ef:5c:00:53:a7:f5:f6:7d:9d:c0:
         dc:d4:1c:3c:5c:ec:6e:82:a3:50:d3:cf:aa:8c:ec:46:1f:03:
         b7:27:7f:8c:b5:50:51:20:89:02:a7:be:3e:73:0d:f8:e6:c1:
         5c:75:26:6d:fc:5a:83:8e:29:cd:41:3f:1e:94:4a:e2:9e:70:
         43:dc:6b:28:6e:a9:c0:aa:5b:59:a0:71:ff:ad:8e:82:21:cf:
         f7:3f:87:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----