Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67043573-5328-3ffa-a779-7b89a7b21f25.roa
File:                     67043573-5328-3ffa-a779-7b89a7b21f25.roa (raw, json)
Hash identifier:          4E4Npg+Fzd+ngtxW3PEGCrz6vXUPzebfjEZJdN1Gld0=
Subject key identifier:   6E:AE:38:DF:E1:8F:13:C3:C1:BF:A3:0D:7E:B9:4A:7D:33:30:B2:94
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D28944E20AC74CAE880A590
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67043573-5328-3ffa-a779-7b89a7b21f25.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        65.92.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:28:94:4e:20:ac:74:ca:e8:80:a5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=856e8823-5723-4b11-b054-7a0d3386be96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:ca:3d:b5:80:df:5b:90:ae:cc:a4:6e:b7:
                    cb:aa:f7:f7:a1:1d:60:48:b8:4e:8b:5d:60:04:3a:
                    04:d7:3e:bc:b6:2a:5c:24:14:c5:24:8d:3d:18:94:
                    9f:93:b2:2e:79:99:ea:20:13:e7:52:a0:31:f1:c9:
                    75:bb:10:27:49:6e:99:26:82:0e:64:61:4a:7b:64:
                    44:05:87:e5:06:97:1e:f0:e2:60:dd:1e:03:ea:9a:
                    63:7a:57:0b:26:39:b9:4e:06:65:8d:de:52:51:34:
                    ed:49:79:5c:c1:de:69:2f:b3:6c:8e:6d:5c:aa:2e:
                    0b:71:f6:d3:a1:ee:48:eb:72:89:0a:5b:60:c1:5f:
                    8a:49:49:ea:a7:32:7f:11:75:c6:c6:41:d9:23:ce:
                    55:94:99:f5:29:a3:ae:0f:b2:37:39:1d:b5:64:06:
                    54:17:39:6f:33:89:00:6d:46:6b:84:65:23:ba:53:
                    61:25:54:77:b4:20:d1:75:1c:6c:1a:00:3e:47:64:
                    53:ac:70:13:75:53:a0:be:0f:55:8e:ad:67:33:af:
                    57:68:b5:06:e8:71:02:3c:d6:b0:f1:ea:34:36:8e:
                    63:b0:6b:c2:fc:a7:d8:5c:45:25:82:2d:9b:fc:83:
                    06:fd:93:ed:b6:26:45:ab:c6:8b:8b:10:b7:32:94:
                    c5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AE:38:DF:E1:8F:13:C3:C1:BF:A3:0D:7E:B9:4A:7D:33:30:B2:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/67043573-5328-3ffa-a779-7b89a7b21f25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:94:8e:d1:0d:58:07:fa:28:c0:c4:da:49:af:6e:0f:15:02:
         56:b2:c0:23:65:53:9a:2c:c9:10:c2:16:19:8a:31:fc:9f:83:
         56:28:67:44:d8:b0:ed:0d:25:c9:a0:e2:6e:b7:d7:46:26:83:
         79:67:ee:75:0e:ab:0a:a9:6d:5c:05:5a:f3:57:11:72:17:55:
         05:3d:42:9a:b0:db:d4:3c:69:24:e3:d7:63:fc:3c:19:ff:77:
         d4:d5:9a:e0:5d:cf:0c:9d:f1:58:44:73:dc:26:1d:db:28:e1:
         cb:6f:ab:dd:91:ce:06:39:fa:b9:d3:b5:f5:9e:e5:81:65:77:
         db:4a:db:f7:d0:c0:0b:5a:15:ca:03:03:3c:c1:b2:a0:fe:8f:
         09:e7:42:e3:42:25:12:df:a6:db:68:ab:d2:53:ba:cc:52:43:
         bb:33:cb:fe:47:07:7c:fc:2c:dd:70:89:7e:bb:7f:00:6a:b4:
         6f:32:a7:e6:cc:dd:58:ee:13:76:69:f7:9e:f0:53:7a:8d:96:
         0a:d5:29:b1:51:58:f1:fa:3b:fe:7e:2a:c9:62:d0:ba:62:68:
         1b:8f:eb:7a:58:4b:f1:b2:a4:c3:9e:f7:2b:86:25:1e:9b:db:
         39:d7:cb:72:9d:54:52:8c:bb:2b:e4:a0:68:02:3d:78:af:98:
         85:a5:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----