Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5acd1c10-6c44-360f-b997-52f35539de35.roa
File:                     5acd1c10-6c44-360f-b997-52f35539de35.roa (raw, json)
Hash identifier:          beYBXsUKOB7MgOF/NvORWHyK4ya2xvjdr/XRCvac7r0=
Subject key identifier:   C1:4C:82:75:B7:B1:50:47:55:80:5A:92:BF:0D:56:0E:C5:C2:AF:01
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE47CDB59E8CEE289666AE0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5acd1c10-6c44-360f-b997-52f35539de35.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        76.69.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:7c:db:59:e8:ce:e2:89:66:6a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=62a9a3c4-1fb6-4e83-909c-d3eb7ade8a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:96:04:35:46:b3:e0:6e:69:92:5c:09:ae:56:
                    0a:35:60:ca:ec:49:c3:4e:e8:41:0e:52:22:79:4d:
                    9c:14:18:23:35:68:ae:4c:02:94:e6:1d:7d:0b:fb:
                    ab:53:c0:7a:ae:c8:f8:4c:22:2b:6f:d8:af:26:d6:
                    17:f4:b6:1c:38:d5:d1:79:6b:fa:ef:f3:69:b9:f0:
                    7c:df:9a:23:ab:52:bd:61:78:1e:b7:c4:cb:da:de:
                    f5:09:4c:fc:1f:8a:aa:bd:de:5d:36:63:20:b2:e9:
                    81:ea:23:f5:ad:9c:6e:db:40:eb:e2:60:27:97:b5:
                    9d:ee:80:51:e6:82:6c:ba:7a:b1:34:49:bf:a2:45:
                    7b:c1:3d:38:97:78:2d:e7:cb:f4:08:b7:1d:19:bf:
                    6b:4e:6e:28:3b:21:2b:7b:24:40:cf:52:e4:53:65:
                    99:e4:23:41:fe:cf:3f:77:15:8e:88:fc:b3:45:ae:
                    ab:53:a0:51:5c:c9:53:3e:7b:5d:cc:41:20:f8:9a:
                    17:24:6a:c4:fb:db:e5:8b:bb:e1:38:a2:95:33:55:
                    59:24:a9:39:de:68:ce:68:06:4c:65:2e:46:1d:64:
                    a9:7a:35:aa:5d:4c:3c:7b:e8:84:4b:1f:dc:2c:61:
                    ed:82:3f:65:97:22:6b:12:f7:d7:5e:5e:96:bc:cf:
                    4f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4C:82:75:B7:B1:50:47:55:80:5A:92:BF:0D:56:0E:C5:C2:AF:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5acd1c10-6c44-360f-b997-52f35539de35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.69.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:5c:c1:44:0f:55:8d:9b:02:31:26:19:12:b2:6f:73:cd:
         62:cc:6a:6a:6e:a8:bd:7f:56:4d:7d:8d:c2:64:ef:48:3d:d6:
         fc:6a:1a:ee:50:38:d7:c9:10:01:b2:4c:19:cb:ec:42:2c:c4:
         90:5d:aa:cc:35:2d:34:b4:e6:8d:37:ea:4f:a3:ed:8c:ef:e8:
         a5:1e:ee:80:61:79:5a:da:24:bf:f8:f5:10:17:07:45:35:b9:
         fc:a0:8f:7b:21:1d:3f:40:22:48:88:6c:ec:0c:38:d1:14:cb:
         7f:12:92:c0:54:44:40:db:bf:15:50:f1:f3:1a:05:f9:5c:38:
         ec:a8:5e:75:28:3f:ed:44:af:da:42:72:4c:f4:c3:fd:b3:17:
         80:45:f0:78:a5:9e:0b:49:72:6c:c6:b1:ff:fa:9f:42:88:fb:
         b6:bf:19:15:40:81:2c:1a:5d:62:26:83:51:42:8e:d7:4b:3f:
         a8:ff:0f:9c:b4:4f:e0:32:80:27:1b:92:9b:42:22:a1:6f:a7:
         a0:f5:84:57:08:14:11:3b:56:91:8a:1a:83:d0:70:b9:d1:82:
         f5:8a:ef:ad:8a:dc:0a:db:eb:08:98:e9:80:12:17:a9:f9:1e:
         c7:7a:80:d4:23:cd:f6:2a:bd:be:33:ea:a2:24:07:1a:57:ac:
         5e:07:53:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----