Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/793e542e-2e45-398f-858b-a6d13975021a.roa
File:                     793e542e-2e45-398f-858b-a6d13975021a.roa (raw, json)
Hash identifier:          r4bjqrlYu3sZ7D/IAoCTJtlf/1EEwVio5Rp25odEtmU=
Subject key identifier:   6F:0E:DD:7B:65:E4:92:5D:9C:08:E8:C2:EE:F3:AC:6D:EF:58:A4:F2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA113B781D57EED7B48E0F00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/793e542e-2e45-398f-858b-a6d13975021a.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.70.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:3b:78:1d:57:ee:d7:b4:8e:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=032b441f-d11a-449d-ad12-f2a83f484002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:de:37:23:fb:0a:8c:4c:b7:6a:7d:24:16:
                    d1:77:d4:06:1f:2e:e6:9a:f8:b1:2c:67:c3:3c:82:
                    39:cd:51:86:31:c3:8a:53:f8:35:b0:14:9b:58:53:
                    5e:31:7e:c0:42:38:7a:84:8a:f1:1b:32:47:58:7e:
                    f4:6a:8e:c9:4f:63:d2:95:a4:df:41:e5:16:6d:e8:
                    ed:14:9f:c6:38:8c:4d:64:6f:79:0e:d8:c6:d6:47:
                    a5:7f:93:e2:eb:ec:18:2e:6b:1d:ec:0d:b5:56:19:
                    f7:e3:93:23:58:54:1b:1e:39:db:4f:a2:50:fc:6a:
                    28:95:3b:0a:37:af:0d:ff:33:c4:e9:90:41:44:52:
                    42:f9:54:ea:de:71:22:59:59:7d:42:38:fb:39:a2:
                    25:8a:a5:23:43:b7:ef:ac:36:4e:54:ae:2e:57:ed:
                    de:c0:24:20:58:d9:9b:3b:db:fc:8e:6d:d7:1b:a7:
                    42:24:8e:09:c9:7b:67:2d:a9:5d:ae:67:0e:63:8f:
                    fc:fa:5a:bc:17:21:82:98:6f:66:25:17:40:d3:4c:
                    dd:01:5f:07:90:90:4b:a5:4d:db:fb:a6:34:da:7a:
                    40:b7:86:e9:62:e5:cb:84:a5:93:f8:5c:67:13:50:
                    69:11:91:90:fb:a0:33:df:e0:7a:f8:ae:b6:92:02:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0E:DD:7B:65:E4:92:5D:9C:08:E8:C2:EE:F3:AC:6D:EF:58:A4:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/793e542e-2e45-398f-858b-a6d13975021a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:15:0a:50:ad:cd:83:8f:4d:0d:5a:ff:13:32:90:f5:ea:f0:
         6c:6f:ab:c1:83:5e:cd:78:c1:5e:58:c0:2f:74:dd:97:28:64:
         e6:08:83:a6:9f:fe:9a:e1:c1:df:cf:9d:ca:c7:74:36:94:aa:
         35:d0:17:73:18:0a:11:93:1d:fe:1e:18:b8:f9:f3:8a:37:8d:
         26:0f:0d:48:01:21:a2:cb:aa:26:1e:23:dc:35:31:9b:fa:64:
         25:c6:a0:fd:7b:81:62:5f:6c:14:e0:29:3a:6e:22:5c:be:f7:
         e6:e9:11:47:b1:5c:3f:1c:5f:76:67:c2:eb:a3:75:0d:35:db:
         fe:0e:c0:c6:64:31:ce:66:6b:06:b4:95:bd:67:b9:d8:ac:67:
         c7:39:7d:fb:cd:bf:24:47:e2:38:a9:72:c1:84:c4:73:4b:f1:
         3d:9d:d7:7f:b3:2d:9d:11:5b:74:0e:7f:ae:ed:20:80:f6:c6:
         b1:9b:f0:c1:cc:9c:96:b5:4f:29:29:d9:d3:6e:5e:00:2c:80:
         18:4b:ad:8d:a8:af:40:5e:15:7d:87:13:1e:b8:76:b4:48:88:
         2d:08:a5:f5:39:2d:23:e1:6f:d5:98:2a:96:93:46:92:a9:d0:
         97:89:29:69:4f:9b:72:aa:f8:48:d9:8f:17:49:9c:2d:85:68:
         a2:e5:f1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----