Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/772cd0b0-b5cf-3c5a-bb41-f392a6cfa904.roa
File:                     772cd0b0-b5cf-3c5a-bb41-f392a6cfa904.roa (raw, json)
Hash identifier:          YU8yyP8nN9DRkWpunCpf6mTr1avXY0soCkTgPH0DLKE=
Subject key identifier:   BA:18:BA:8A:F2:5A:3D:BD:17:F0:35:B8:13:08:CE:B6:79:50:27:E2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA1299993E82CC833A76F560
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/772cd0b0-b5cf-3c5a-bb41-f392a6cfa904.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     7122
IP address blocks:        205.200.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:99:99:3e:82:cc:83:3a:76:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=d5978841-e5fa-41c6-85b1-4c2c116f156a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:b8:ca:f4:8e:b3:7f:53:db:20:85:b8:08:
                    7b:06:c6:97:f0:31:28:38:05:63:d7:2f:60:f0:2b:
                    55:bd:51:76:9a:d7:39:29:5d:98:0a:f0:bd:43:66:
                    cd:28:2c:2d:ec:d1:57:c2:6d:b8:c2:9b:ba:12:1a:
                    f8:56:05:d7:f3:82:e9:61:26:ff:35:0b:28:0f:fb:
                    a4:e8:67:29:5b:c4:f6:57:be:78:82:88:19:a6:e4:
                    63:b1:6f:11:3f:5d:35:5e:c0:23:37:17:c6:fa:89:
                    80:5a:d1:95:6c:1f:53:de:8e:4b:34:e8:dd:ff:32:
                    f3:2d:b4:5d:57:dd:b1:b6:da:cd:dd:ad:55:ef:91:
                    5c:5c:91:f8:b3:a2:7d:f6:de:6c:78:ac:96:fa:91:
                    64:f2:ee:73:61:08:1a:2a:60:18:ad:7e:6c:be:5e:
                    60:34:35:13:ca:91:ae:fb:9e:bd:64:b0:91:f2:68:
                    88:9a:d4:0d:30:cf:23:6a:5f:29:4a:21:b4:f3:04:
                    3b:c9:d0:9a:f5:3d:02:9e:39:96:9f:6f:74:fb:90:
                    0a:c5:a0:5c:1e:3d:e3:5a:8a:40:d6:30:b4:32:80:
                    44:33:bf:40:20:06:55:6e:7b:8b:7f:c4:8d:2a:03:
                    4b:c2:de:0e:8f:80:3c:b4:36:54:e4:38:56:a6:eb:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:18:BA:8A:F2:5A:3D:BD:17:F0:35:B8:13:08:CE:B6:79:50:27:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/772cd0b0-b5cf-3c5a-bb41-f392a6cfa904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:ba:8e:bf:29:50:97:ed:00:79:f6:13:d2:1f:25:0f:2b:
         78:8c:2c:e9:d4:72:a0:53:ea:53:ea:65:b0:aa:c3:37:4e:8b:
         59:dc:3a:a6:d1:80:6f:ab:02:74:a0:e5:c0:38:86:71:9e:02:
         f7:30:28:e9:51:fa:88:7b:03:5c:4c:50:f4:ce:ff:3f:c3:81:
         14:2f:9d:2c:8d:f0:15:67:f5:95:03:cd:06:d1:cb:61:1c:aa:
         ff:51:9b:e1:55:83:82:e9:24:52:58:53:1d:eb:d2:6e:96:93:
         e2:3d:3c:dc:c4:3b:e1:56:47:b6:35:66:4d:a4:cf:9b:b6:0c:
         29:87:ed:d6:0f:a2:df:c1:ba:9a:da:f6:9a:5e:1b:d1:0a:7d:
         3e:73:a0:23:65:5d:a3:b8:50:cf:8a:e2:ec:5f:cd:d5:e6:89:
         e9:a3:a5:9d:d9:ed:6a:cf:64:84:8f:ea:5d:01:1f:f5:21:f0:
         cb:8f:7f:33:b2:a2:7a:06:08:ed:b0:48:b2:a4:db:df:7d:21:
         07:37:3f:1f:43:46:42:4e:89:6a:11:53:f7:80:cc:a5:77:26:
         ff:9d:f0:fa:e5:be:a6:bf:9e:09:68:6a:b5:f7:c5:c0:2b:63:
         27:8c:07:bd:fd:43:10:25:57:72:00:fd:64:f4:fe:b3:38:e6:
         95:14:17:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----