Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64f12808-73cd-3d1c-8f98-d9afc5641627.roa
File:                     64f12808-73cd-3d1c-8f98-d9afc5641627.roa (raw, json)
Hash identifier:          EFxeATMf3UPu5Y2bZHJ/23FLW/ENY+1th+8nbJwA1Wk=
Subject key identifier:   E1:6A:A5:A5:14:1B:73:56:C5:68:12:73:59:A8:AD:B1:34:23:6B:5A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE53CCC837EA02E8ECB5C80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64f12808-73cd-3d1c-8f98-d9afc5641627.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        184.151.148.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:3c:cc:83:7e:a0:2e:8e:cb:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=74adb633-e994-4e4b-b99f-19290cb60312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:60:24:ca:4d:b9:9d:c5:86:65:e0:68:b6:5e:
                    47:8a:89:e4:85:f3:9f:05:de:d0:86:03:ba:0d:ed:
                    ca:d0:2b:bd:ef:a3:30:32:17:48:bd:4a:df:53:31:
                    fa:cf:40:30:d7:ad:d5:a9:4f:f1:f6:6f:00:e2:91:
                    44:e7:56:ea:8d:5f:c5:e8:e3:78:7f:cb:0e:c9:e5:
                    78:0f:52:99:2d:e3:23:5e:b8:3a:04:82:92:9d:ef:
                    61:21:3f:61:79:09:f8:d6:ce:3a:e6:28:90:86:8c:
                    95:b8:a6:06:ef:32:74:bb:d6:8c:5d:ac:3f:77:16:
                    e2:e4:dd:3c:26:3b:08:44:b9:9a:3c:f4:61:83:17:
                    72:7d:11:d2:13:35:26:d3:88:2e:6f:ab:dc:d3:d2:
                    80:7b:dc:b7:a1:56:4d:c6:5f:5d:4c:9f:f5:d9:e9:
                    d1:a5:4b:fe:30:f4:6e:8f:a7:1a:85:29:7d:bf:15:
                    40:c7:ce:b0:07:a7:f2:ee:7c:46:3f:30:d2:0b:c4:
                    7b:d3:db:c9:a7:18:ad:78:2d:11:93:e2:6c:68:46:
                    70:68:2f:43:30:6c:e0:da:4f:e6:b1:df:4e:b4:5b:
                    a5:43:57:30:21:3e:f0:60:ed:47:1d:c0:4d:40:6b:
                    12:c4:5a:1e:d9:5d:f7:bf:47:8e:c3:41:78:bd:d1:
                    4d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6A:A5:A5:14:1B:73:56:C5:68:12:73:59:A8:AD:B1:34:23:6B:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/64f12808-73cd-3d1c-8f98-d9afc5641627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:67:82:fe:fe:4d:f7:e0:69:87:4a:20:c1:cc:72:a5:7c:52:
         71:92:95:e4:fb:b1:56:86:0b:1a:99:cd:97:9a:5e:89:de:fd:
         d3:85:0a:9a:96:ca:1e:94:80:4b:61:48:0f:72:af:fb:7c:eb:
         ba:fc:1c:66:a5:8d:64:7c:c9:31:10:92:7f:85:60:6a:b3:19:
         ff:c8:62:9f:78:4f:77:93:d2:fd:9b:96:7c:8d:98:46:71:5b:
         e7:aa:76:7e:f7:b6:ed:85:77:74:8e:3f:15:34:d0:83:d4:65:
         fc:f4:32:11:9c:56:23:b5:50:d8:20:37:cc:e2:6d:36:76:40:
         38:2d:10:f7:3c:26:b8:3a:41:6f:71:a7:aa:e3:f3:91:6c:98:
         7e:39:c8:a6:10:ba:10:4b:7c:92:83:bd:f9:5c:82:ef:e5:1d:
         6b:1b:64:65:73:d2:13:38:09:de:50:14:7c:70:be:82:2e:df:
         97:cf:00:f9:d9:11:1f:a3:d7:23:5c:58:1d:75:de:e0:8c:c7:
         1e:dd:60:47:6d:18:d1:b3:83:6d:5d:79:fb:38:c8:57:8e:04:
         e6:44:c2:b5:2b:d5:c4:cc:26:9a:10:37:b8:0f:b4:ec:3b:57:
         e8:67:e6:d4:a5:d0:b2:9e:38:4a:a9:21:50:68:fd:df:98:f9:
         07:de:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----