Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/69106922-cee4-30da-9627-5a02ee8c0fd1.roa
File:                     69106922-cee4-30da-9627-5a02ee8c0fd1.roa (raw, json)
Hash identifier:          01qf+xlpD9UFVBf7KSpxgpK8ZK6BzPzkiOOe9yXLPuE=
Subject key identifier:   5A:8E:6C:52:4C:0B:7E:17:C8:51:4A:BE:6E:52:73:96:EC:5F:FB:30
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7643EF4A1F3FB09086AB00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/69106922-cee4-30da-9627-5a02ee8c0fd1.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:6002::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:43:ef:4a:1f:3f:b0:90:86:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=85137a40-34d3-47ec-b0d1-2f061162ade4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d8:22:2e:76:ef:fd:63:d9:5a:7b:ff:10:08:
                    cf:ab:72:89:18:06:26:67:c5:42:c3:79:6a:e1:73:
                    59:99:a8:02:1b:a6:79:2c:f4:3f:e7:36:e5:9b:a8:
                    a1:fc:a3:95:c5:5f:bd:53:5b:70:aa:da:96:9a:04:
                    39:cf:52:04:61:61:eb:e3:a9:b6:61:1b:64:ef:81:
                    bd:de:fc:bf:4b:20:ea:e4:52:68:04:3a:e3:17:5e:
                    ef:71:af:02:8c:86:29:4b:21:c1:a9:4f:73:07:ac:
                    bf:2b:ff:21:30:d8:05:8e:60:b8:3d:bc:81:f1:09:
                    7a:88:8b:84:a4:4e:ee:a0:f3:2a:c5:9a:05:9e:ca:
                    34:cc:04:77:95:f7:ca:32:d3:87:69:a5:46:c2:95:
                    a4:d4:ac:67:f7:e1:aa:27:97:1b:b9:c0:b1:c1:15:
                    df:55:0d:fd:d7:af:86:4b:52:5c:6a:51:78:1f:87:
                    78:54:6f:e2:ab:39:fa:2c:26:dc:c4:11:b6:1a:9c:
                    ac:33:45:cd:a1:ee:c4:fe:9f:2a:db:70:15:18:7a:
                    fe:e2:dd:ce:c2:ba:18:4b:ba:51:d2:39:be:b4:2c:
                    b5:66:1a:6d:e7:51:4d:13:11:72:ce:70:5d:bd:da:
                    5d:1b:7e:57:7a:58:a5:97:88:69:24:c1:10:69:02:
                    ec:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8E:6C:52:4C:0B:7E:17:C8:51:4A:BE:6E:52:73:96:EC:5F:FB:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/69106922-cee4-30da-9627-5a02ee8c0fd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:6002::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:95:05:f4:7f:fd:48:6b:27:47:0d:c8:27:3a:5e:5a:88:d7:
         1a:32:ab:b5:ed:32:83:24:19:2b:12:85:c1:48:b1:9c:38:75:
         98:b8:a1:1f:3d:c2:6c:20:a1:f2:ac:6f:d5:e1:51:6b:ca:42:
         e6:0b:2f:e2:05:53:aa:34:b1:f8:cd:cf:60:d9:c1:fa:6e:01:
         95:e9:b7:f7:40:d9:df:ec:90:88:c5:61:4c:e7:b1:d2:75:4e:
         3a:4e:be:1c:4a:ed:80:c2:de:09:08:9f:58:18:28:ee:25:b1:
         d2:79:a8:82:b8:fa:3f:db:6e:9a:11:19:0e:b1:30:75:31:6d:
         1a:3a:e8:0c:c8:19:38:9d:8a:6a:ef:f5:ae:3c:dc:a0:c6:2b:
         78:4b:e6:7b:f8:df:5e:cc:6d:0b:cb:0f:f4:51:9c:6c:c8:a3:
         fb:1c:3f:8b:4c:f3:20:e4:a7:cd:fc:63:bd:20:cb:3c:a4:96:
         54:16:fc:29:8d:40:3c:4e:a6:85:b8:f0:ef:cf:76:f4:cd:8d:
         f2:bc:2c:20:a6:32:f4:91:ab:81:26:50:e7:d9:a3:17:95:6e:
         96:e8:52:13:61:e5:8a:b0:20:a8:fa:2a:61:d1:a1:f8:b3:2b:
         2c:01:95:20:1a:90:96:fd:b9:ba:83:33:b5:a7:fc:09:9d:0b:
         7d:66:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----