Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/63c2b58b-c527-38e6-9ae1-dfa8914f3792.roa
File:                     63c2b58b-c527-38e6-9ae1-dfa8914f3792.roa (raw, json)
Hash identifier:          jHniwOkoozxJTWhKl0pfhNHx/wWXCk++He2KYbD4lQ4=
Subject key identifier:   2C:F7:8B:C5:A3:A3:3B:D8:5D:45:26:C3:FA:B0:8F:30:C8:0A:34:69
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449313E9362847FFF0B8CB4010
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/63c2b58b-c527-38e6-9ae1-dfa8914f3792.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        72.28.80.0/20 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:e9:36:28:47:ff:f0:b8:cb:40:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=47c95490-fb33-4248-aac1-e0f49b9590fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:6b:8e:52:b5:2b:2f:af:02:f3:6b:16:33:
                    f4:f0:23:c0:71:13:59:2b:e5:2a:7e:a7:da:1a:6a:
                    61:7f:43:d4:e4:4d:06:ba:3e:60:3a:57:01:05:47:
                    69:32:e1:d7:6a:f9:8b:17:c9:4f:d5:69:0d:de:cb:
                    3e:96:91:57:8b:4a:f3:71:d1:6c:ec:02:46:32:e7:
                    9f:09:69:53:32:52:09:f1:54:e9:94:06:19:99:b2:
                    27:ce:23:ca:c3:de:22:94:f6:fc:22:4d:8a:a6:5f:
                    4a:f7:dc:85:e6:fd:8d:e1:e3:3b:89:ff:6b:59:b8:
                    7c:b2:8e:80:18:23:c8:25:87:31:90:36:a1:62:d1:
                    37:a3:79:1f:2b:08:94:cd:9c:02:61:0f:6b:6d:0b:
                    ad:e9:db:f6:02:75:64:92:cc:1a:c4:c7:b7:74:f2:
                    db:45:f8:f5:09:9c:6a:ee:b4:9f:f3:f6:d5:66:74:
                    bb:7c:c5:bb:d7:99:2a:0e:c3:ee:4b:39:57:63:0a:
                    10:0d:4c:67:29:50:76:cb:6b:c9:dc:c3:a4:c4:12:
                    ae:a7:5d:42:70:fe:ff:19:c4:1e:2e:a7:9d:76:47:
                    9d:30:9a:02:4c:fb:07:d8:a3:cb:2b:12:5c:5f:27:
                    ed:0e:f3:d9:72:e6:f0:e1:e4:87:f8:35:51:a5:6b:
                    85:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F7:8B:C5:A3:A3:3B:D8:5D:45:26:C3:FA:B0:8F:30:C8:0A:34:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/63c2b58b-c527-38e6-9ae1-dfa8914f3792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.28.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c5:88:2c:30:4c:b9:f5:c7:65:2f:6b:f0:03:c5:8d:79:48:
         1e:09:f8:4a:a1:42:fd:b6:f0:62:f3:06:b0:45:c1:b0:ad:5c:
         7f:03:12:96:d9:06:65:4d:b6:2c:16:ff:7e:ad:6c:e8:b4:55:
         f3:72:9a:67:e4:14:89:02:4c:f6:cb:d9:f0:6c:2a:fe:29:ae:
         20:f1:73:f4:e7:f8:5f:60:a6:51:c7:a2:07:f9:6c:94:91:38:
         31:a6:16:7a:3f:2d:5a:bb:a6:94:22:9d:33:f0:58:2e:be:41:
         ac:d4:db:fc:15:0c:bb:9b:07:83:e6:0f:69:0f:33:f3:3c:1f:
         bb:b3:d6:e9:ea:cd:18:1c:4e:52:01:56:55:a5:18:24:72:ae:
         c5:42:e5:c9:c1:c1:5e:f5:14:e3:b4:51:94:60:96:44:bd:3e:
         ec:9f:64:d1:2e:8b:df:ad:58:5e:40:9c:cd:6d:7c:c8:51:29:
         6a:72:c5:e8:ac:0e:8d:2f:16:29:b9:32:ca:0e:ca:1d:b0:5b:
         59:01:5f:59:6d:b3:a4:34:1c:19:9a:b4:55:41:4c:71:75:fd:
         bf:32:c0:91:bd:27:ce:50:d4:2a:67:b8:24:4c:d0:56:fc:ce:
         d0:14:b4:8c:11:bb:9d:a8:d7:42:d4:e2:c0:e8:a0:4d:02:d6:
         63:f7:55:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----