Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5a051556-2a78-39fe-86e0-749d925e317e.roa
File:                     5a051556-2a78-39fe-86e0-749d925e317e.roa (raw, json)
Hash identifier:          BRjEoiaGmktUQvV9Y3TDY+kq03s55fZHsaiG5SZTEaY=
Subject key identifier:   BF:B8:D0:DE:81:56:8B:68:99:4B:04:93:5F:54:42:FB:18:1C:63:1C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA125748D910EB97465F5880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5a051556-2a78-39fe-86e0-749d925e317e.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        184.151.36.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:57:48:d9:10:eb:97:46:5f:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=e08991ff-91b3-4b25-bcde-a6ffe91334aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:09:65:6e:60:36:a4:76:cd:2f:f8:b1:d5:
                    12:fd:55:31:c6:a6:76:28:f7:79:8b:8d:47:2c:bb:
                    39:6b:40:d2:4a:c8:ac:cb:15:38:22:02:2a:c6:6c:
                    dd:bc:b2:23:85:e9:4d:77:c7:90:b8:60:9e:a0:64:
                    53:49:f8:e1:4f:96:6a:61:0e:ec:d1:d5:ba:c2:02:
                    5e:db:26:eb:0d:b5:43:fb:da:e4:7e:4d:5d:74:a2:
                    4f:09:b1:30:03:05:08:f2:b5:e9:21:2e:70:90:10:
                    9f:d6:0b:c4:e4:25:37:7c:33:71:1e:d2:21:b5:2b:
                    b5:ff:97:d3:8f:5b:83:ec:9c:59:6d:d8:37:65:36:
                    ab:1b:8d:74:99:4d:35:a9:99:fc:c1:ad:64:ee:51:
                    4d:f6:87:d4:b2:97:d3:7f:7b:bd:92:c7:fe:31:12:
                    d4:8a:2d:4b:20:79:9f:89:da:6e:c7:ab:46:a6:10:
                    c5:f7:0b:34:74:03:87:95:b0:4a:eb:af:8e:f9:7a:
                    bf:6c:89:39:14:6b:7d:78:79:b1:23:f4:36:68:e0:
                    7b:a7:9a:d9:94:eb:98:a2:59:19:9b:c7:6a:75:aa:
                    8b:48:13:e8:89:9d:85:2e:43:00:73:b1:e4:d0:f2:
                    73:06:58:98:03:c3:25:d9:61:2f:fa:de:30:b9:fe:
                    62:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B8:D0:DE:81:56:8B:68:99:4B:04:93:5F:54:42:FB:18:1C:63:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5a051556-2a78-39fe-86e0-749d925e317e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:dd:71:a9:08:fb:6c:06:e8:03:75:d8:1d:e6:7b:c4:90:
         36:d4:b5:6a:27:f9:78:92:4f:56:06:ae:95:df:58:ce:87:7e:
         7b:3b:46:b6:8a:0e:8c:9c:e5:96:ca:db:7b:37:14:42:ae:e4:
         51:87:09:5d:79:bc:76:1d:a1:8e:20:45:ca:0a:48:15:5b:bb:
         a4:72:a1:c2:41:d1:ec:c3:8f:e4:b1:28:8e:d3:4f:eb:d3:b8:
         c7:c4:68:dc:7d:e4:00:8e:87:92:15:83:cb:93:76:97:d1:d8:
         bb:bc:af:bf:a7:0c:09:15:75:d2:81:b1:97:c7:31:eb:8e:6c:
         8d:83:2b:62:12:ed:66:cf:a0:e9:36:74:92:13:58:66:d4:2f:
         c1:fb:6b:b0:61:e9:04:3a:26:3b:6c:a7:e7:23:c0:99:a6:7e:
         19:31:33:11:39:b3:66:91:52:58:e3:9b:49:05:01:13:5b:05:
         3a:a5:b4:e4:e1:60:f1:f6:b4:cf:72:0c:6d:47:36:04:df:37:
         97:9a:08:dc:50:01:f6:18:43:3f:d8:20:40:33:88:fd:78:49:
         d2:1a:e9:ef:fe:ab:c7:66:e1:71:e6:96:f8:dd:8a:4e:ee:ce:
         0f:b2:e2:cd:5e:37:3d:b9:9f:ff:8e:cb:0a:01:39:41:34:33:
         91:d1:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----