Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5c14c692-dfb9-3f95-83b6-fe1e80f61206.roa
File:                     5c14c692-dfb9-3f95-83b6-fe1e80f61206.roa (raw, json)
Hash identifier:          0s3xsnMU9wxp8Rm3iLOOPSaRXrdIEXqZEXc+Yrlvibw=
Subject key identifier:   EC:81:4F:EC:B0:D4:85:88:D3:2D:05:19:24:D0:A1:8F:EC:EC:55:40
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE4EF4A80045DCF92D02D80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5c14c692-dfb9-3f95-83b6-fe1e80f61206.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        174.94.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:ef:4a:80:04:5d:cf:92:d0:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=d1d854c0-ba24-4f0a-918d-f55c70928baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b6:41:59:05:1b:ec:16:02:5e:90:1f:43:c4:
                    01:19:d0:ea:04:ba:d1:0b:ec:8c:7e:a2:5f:5e:d2:
                    6c:dc:14:d8:94:6b:5f:18:c7:1a:92:50:a4:fd:20:
                    49:db:88:31:82:a9:14:e9:a6:be:07:9e:40:7e:56:
                    3b:f0:bd:01:a1:a2:0a:5b:c1:7f:7e:7b:05:2a:9b:
                    80:c7:22:24:0f:af:6c:b6:3b:06:67:fe:8e:81:be:
                    f5:ab:d1:35:6a:29:72:e9:0a:95:de:01:08:07:79:
                    42:76:73:a0:ae:97:3f:9c:0f:93:be:92:c1:1e:ec:
                    1b:a6:69:36:4f:44:26:8b:d0:df:76:1d:85:ed:9a:
                    57:07:49:3c:b7:2d:90:bb:3a:e1:53:f7:dc:e7:b2:
                    da:95:9f:87:f9:a7:22:34:97:fc:83:03:c0:79:4e:
                    f4:fe:97:6a:a8:4b:4f:bc:72:5c:b9:aa:a4:db:a0:
                    95:a2:41:1a:6c:1b:d5:fd:a1:5d:06:22:11:e4:01:
                    23:db:23:62:2b:d2:66:78:a1:65:8f:78:08:0b:60:
                    ae:a4:71:ed:51:87:ff:17:bf:44:3f:9a:53:f6:7a:
                    d1:e4:79:c6:14:77:1e:7c:e6:ec:c6:30:e7:e8:49:
                    a4:83:26:f2:1b:e8:ac:7f:5c:7b:36:67:8a:fa:8d:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:81:4F:EC:B0:D4:85:88:D3:2D:05:19:24:D0:A1:8F:EC:EC:55:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5c14c692-dfb9-3f95-83b6-fe1e80f61206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:76:9b:81:d1:ae:66:9c:95:77:cf:b6:fa:df:6c:84:85:
         51:72:36:f5:7f:f3:cb:9a:df:5b:dc:40:db:8b:ab:69:79:cc:
         74:5d:b6:85:e8:2e:0e:ac:b1:b6:a5:d3:4d:4c:d0:4a:45:27:
         70:7c:c1:f6:a9:b4:8f:b5:52:93:58:79:4e:73:0e:b7:5b:51:
         8e:b9:6a:89:b1:e0:1b:af:37:e3:ca:cc:27:af:a6:8c:fc:5f:
         bc:ee:b6:78:c0:18:6d:39:f7:db:8a:2e:5a:68:b0:68:66:3a:
         51:a8:36:1f:bb:01:e0:10:65:c7:8c:bc:64:4f:5f:7c:23:89:
         de:d1:0b:08:64:ad:0f:ab:58:3a:01:c8:41:2f:56:ec:a7:62:
         86:f0:17:c6:29:cc:3c:58:00:3f:ba:98:7c:71:4d:e1:45:eb:
         47:ba:ce:5f:3a:94:6a:dd:8e:cb:6a:13:34:f0:c5:08:27:a6:
         b7:0f:1f:f0:ba:5b:64:a7:6f:90:72:29:d3:7c:f0:ba:c9:36:
         92:13:b8:6c:ad:b8:2b:88:44:94:54:9a:97:8e:6f:b2:7b:f1:
         97:8b:99:26:0a:24:b1:ab:63:cc:63:76:37:54:46:4f:c0:82:
         d0:a2:11:e2:a7:92:1b:26:d6:34:f0:ab:47:61:4b:50:fc:86:
         58:e5:8a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----