Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7abb8267-6130-302f-bbd9-aaee5270707f.roa
File:                     7abb8267-6130-302f-bbd9-aaee5270707f.roa (raw, json)
Hash identifier:          oaYw82LK34spPyqLKfi/eISE/Cut99fysAsTt/LBUSI=
Subject key identifier:   49:98:80:01:99:1E:88:E8:9D:18:58:F6:C7:88:1B:5F:67:C3:92:F1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D3FC89D73C0DD283F6C500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7abb8267-6130-302f-bbd9-aaee5270707f.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        70.53.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d3:fc:89:d7:3c:0d:d2:83:f6:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=8ecfc545-102b-4a3e-acd3-58c080ccf913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:1b:35:27:8a:fc:63:af:60:4a:90:77:13:
                    e1:f2:4c:65:30:7e:48:6f:eb:a1:86:ac:16:1a:4a:
                    c7:01:1d:5c:09:86:18:0a:79:b5:18:c6:68:61:f7:
                    a2:02:6a:f7:af:79:4a:3e:a3:8e:46:1f:94:1a:b1:
                    64:a7:5e:c2:db:34:57:fe:b9:42:5f:a2:f1:6e:4c:
                    60:38:67:2c:53:67:6f:95:4b:6f:b0:dd:6b:ff:46:
                    7e:05:23:5d:ad:75:30:45:4b:b8:c3:a8:31:28:80:
                    e3:fc:79:96:25:db:ca:5d:45:cb:66:07:09:45:ab:
                    18:34:d4:3d:df:49:3f:01:8e:58:69:de:47:11:04:
                    2b:17:9a:b3:45:25:74:6d:f7:94:90:bc:e0:49:cb:
                    05:bc:5a:33:6e:99:b6:9e:d6:4a:8e:c2:9f:01:23:
                    db:15:31:ef:8d:5a:11:23:35:97:e7:4e:c6:d8:46:
                    12:0e:ba:b9:a9:de:4e:2a:02:7f:f0:c7:6c:7d:63:
                    53:b8:19:b0:cd:eb:fd:47:ef:81:d2:d4:28:cf:bc:
                    aa:79:c4:33:df:ea:1e:56:e0:40:7d:4d:35:1f:fc:
                    bd:f6:fc:63:10:62:9d:1b:09:9f:8e:9b:f4:3e:c2:
                    c0:35:d6:55:05:e6:c1:63:e4:f6:f5:a3:04:f9:55:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:98:80:01:99:1E:88:E8:9D:18:58:F6:C7:88:1B:5F:67:C3:92:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7abb8267-6130-302f-bbd9-aaee5270707f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:45:9a:11:c8:a7:23:de:d2:f8:d3:50:f7:75:e0:40:e2:25:
         48:dd:33:39:2d:87:56:dc:07:15:57:74:13:96:9d:46:e6:4f:
         4f:b6:f0:27:1e:b0:4d:cf:51:28:20:52:f9:24:fd:5a:cb:a7:
         82:cc:3c:b4:9b:44:4e:fb:7d:e3:6f:b4:0d:cc:58:9f:67:25:
         39:52:45:1c:86:6f:7d:49:25:9f:5c:77:77:cc:60:92:1c:1c:
         a9:21:f5:1c:1b:fe:6d:aa:51:20:1f:89:a2:a7:f3:ac:1f:4d:
         a3:84:71:82:9c:12:44:d7:59:17:0d:fc:8f:98:f1:66:b8:52:
         56:5f:4f:28:99:e2:61:f2:b0:85:ef:1d:3a:73:1f:ed:4c:34:
         9e:0b:51:f1:21:a8:62:56:39:81:4d:41:09:f0:15:50:b7:c8:
         ff:bd:d9:45:af:50:f4:0b:77:6d:c3:6e:ac:85:c9:1c:43:ed:
         3a:3c:b6:cb:52:68:2b:5f:83:e0:01:2f:30:56:02:92:82:0a:
         7b:a6:a6:3e:33:16:85:02:c8:49:2f:05:98:ea:76:7a:ed:92:
         ec:ed:88:09:f5:40:1a:14:4d:d0:7e:ae:79:36:55:a7:79:61:
         6d:6e:4b:f6:7c:94:26:d3:11:47:19:9d:f8:01:fc:20:99:18:
         b8:0d:22:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----