Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/75e69eb4-5319-36a9-a02b-adb331839d68.roa
File:                     75e69eb4-5319-36a9-a02b-adb331839d68.roa (raw, json)
Hash identifier:          OI6yNOpKMgmwHB9oIvTDebt0O+5mjDbKNVGi0wA3z04=
Subject key identifier:   C2:84:8F:99:86:FB:D2:CA:29:6A:28:74:B3:4B:C0:EE:72:F6:EF:F1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449313E49CC27DAEF6E6466980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/75e69eb4-5319-36a9-a02b-adb331839d68.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     577
IP address blocks:        70.54.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:13:e4:9c:c2:7d:ae:f6:e6:46:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=2af8327c-3020-4a66-934a-7fda578da994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:ce:69:8b:0e:cd:68:37:54:37:ee:1f:27:
                    55:89:aa:f6:3b:44:1a:27:2b:3f:11:2b:86:fa:12:
                    58:c4:26:a9:bd:6a:ea:78:08:74:30:07:30:5a:bd:
                    ad:16:bd:b0:83:0b:58:1a:a2:6f:bd:c7:d2:9c:32:
                    73:20:e0:be:6f:6b:97:49:7a:2c:04:ea:ed:ec:ba:
                    33:12:20:fa:f2:16:ef:24:b9:40:ee:2f:ff:55:6b:
                    09:ff:86:f6:3f:1c:58:4b:69:ef:65:de:3e:44:78:
                    9d:17:63:96:0d:53:41:d6:df:c8:8d:46:38:fb:dc:
                    23:9d:c2:b9:23:a9:a5:98:a1:60:79:22:f5:5a:2e:
                    d4:94:63:9b:7d:18:86:1b:b3:42:b0:f8:b1:d1:64:
                    52:2a:b1:67:00:87:7e:eb:4c:0f:a6:d1:36:4a:b3:
                    21:43:46:41:c6:e7:44:bd:fe:90:d3:66:c9:70:e5:
                    37:a1:ba:13:33:ee:78:64:99:47:26:73:f3:af:2f:
                    40:f5:22:50:dd:d7:7e:11:3c:5c:f0:be:b6:bd:62:
                    16:ef:7d:2e:fc:54:55:fe:5d:af:68:8d:19:1b:21:
                    2a:fd:e1:c8:32:df:c3:7f:7e:dc:6c:b5:45:82:c9:
                    00:c5:ef:fa:3c:88:b5:68:59:4c:c3:79:17:3c:72:
                    a7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:84:8F:99:86:FB:D2:CA:29:6A:28:74:B3:4B:C0:EE:72:F6:EF:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/75e69eb4-5319-36a9-a02b-adb331839d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ac:56:d5:72:d2:b4:c8:84:80:8d:2e:c9:eb:27:58:e0:53:
         5f:ea:61:6b:54:84:f3:d2:49:20:b2:1b:73:f8:ba:d2:d0:86:
         b6:35:d7:cf:df:27:da:d8:fe:16:cc:cc:e8:03:09:14:ef:d2:
         1f:cc:fc:3c:00:bc:11:d5:4e:3d:e0:3f:40:02:fd:42:2a:81:
         ee:00:b2:dd:6c:f6:a2:34:d9:5f:64:92:00:45:9f:c9:75:c1:
         eb:e6:0b:e7:3d:65:fa:2b:b2:50:47:90:9b:af:93:6e:dd:02:
         d4:fd:b2:52:60:9a:4c:1f:3b:0d:c3:aa:b3:78:7a:71:82:de:
         2c:2c:c7:bc:47:c3:08:e9:e4:fa:16:33:28:c4:ea:81:cb:50:
         7c:44:9e:ca:b4:e4:a3:eb:4e:9b:59:8b:3d:cb:3c:c1:c2:a8:
         d5:5b:17:25:cb:9b:92:b2:e1:59:96:02:a6:25:f9:5d:78:df:
         3c:01:75:7e:3d:b4:db:a6:01:3d:58:00:2d:5d:ae:1b:01:11:
         f2:18:38:15:ce:68:63:79:65:ea:bb:97:fb:ef:db:b0:bf:46:
         dd:53:44:90:02:77:8b:7a:20:94:89:db:a1:99:5a:a3:6a:db:
         7e:f1:aa:1d:d9:7c:65:f2:96:47:d5:e7:c8:ac:33:aa:9f:56:
         f0:e0:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----