Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7b0584ac-841d-3e02-8bd5-dec5cc60972b.roa
File:                     7b0584ac-841d-3e02-8bd5-dec5cc60972b.roa (raw, json)
Hash identifier:          aDPqsoaH4Ox4hgqHjWOTS0XKod5EVaXLjRPVqnGnBko=
Subject key identifier:   A2:22:4D:FA:46:93:2E:E2:27:63:1D:45:5D:DE:61:5D:50:70:27:12
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF759B63D066129E7537F2C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7b0584ac-841d-3e02-8bd5-dec5cc60972b.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        184.151.150.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:9b:63:d0:66:12:9e:75:37:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=9a30a833-9100-4dc6-8606-36ccac645ab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:4d:23:45:06:32:e2:ac:8c:9a:2f:83:03:
                    9d:08:52:d1:2a:ea:3e:36:05:ee:4e:01:0b:28:f1:
                    24:88:04:0b:51:5c:71:09:00:21:aa:28:16:2a:c1:
                    fa:aa:96:83:01:4b:b5:3f:ed:27:70:50:0c:89:a2:
                    bd:6f:06:1e:01:e7:ff:50:bb:d4:a1:b8:5a:30:83:
                    99:47:45:38:7c:ca:94:a7:6f:45:a9:0d:a9:48:12:
                    2f:a0:ce:4d:31:04:71:fe:44:4e:79:f0:1d:f5:ac:
                    f4:d1:16:93:ab:eb:73:0b:0b:f2:74:ed:11:1c:79:
                    8c:b5:01:2d:93:16:c2:1c:f6:36:4f:96:72:d8:be:
                    08:fe:cb:23:fe:ad:4d:77:87:93:ec:eb:9b:9d:77:
                    72:16:22:c5:d4:a6:d5:fa:86:a0:f2:eb:a4:89:e8:
                    11:15:47:44:95:48:9d:c5:8e:aa:f5:28:42:a5:97:
                    e3:05:9c:01:30:6a:63:58:47:29:f4:79:80:50:99:
                    ce:d2:91:49:f6:47:c4:30:5e:3f:4c:4f:5b:ad:94:
                    cb:6d:96:5f:0b:7c:79:c9:dc:72:c3:65:46:08:f9:
                    39:68:31:07:29:dc:b5:94:a4:22:b4:1c:23:04:05:
                    d6:aa:89:28:e8:3b:ec:50:0e:a2:a0:5d:a8:92:9a:
                    b4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:22:4D:FA:46:93:2E:E2:27:63:1D:45:5D:DE:61:5D:50:70:27:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7b0584ac-841d-3e02-8bd5-dec5cc60972b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:5b:36:7c:5f:ff:2b:71:d6:81:28:73:49:60:2c:a0:e5:bb:
         ee:70:32:87:83:0b:cf:ce:12:71:c6:e3:a9:8f:9a:16:f7:2c:
         36:5a:d6:30:58:d1:39:56:49:f3:cf:1f:23:08:87:b0:b2:1b:
         51:a7:bf:a3:bd:0a:b9:a7:97:76:cd:2b:a2:60:9d:f4:88:c7:
         16:99:f2:24:a5:95:f1:8a:0f:ce:3a:70:c1:6b:64:32:6d:77:
         ff:47:0d:ec:60:15:74:39:96:77:77:22:9f:94:76:c7:08:69:
         74:cd:58:bb:f9:33:db:29:75:cd:24:da:86:07:24:5b:1d:23:
         bb:44:a4:4f:10:e4:36:1e:20:66:3b:2f:31:79:99:14:ac:d7:
         37:be:c1:39:25:2a:5c:f4:95:82:3f:9b:92:2a:cf:31:36:c5:
         fa:57:9f:b2:b0:a4:2b:6e:03:92:ff:94:ba:e8:86:1c:f5:a4:
         0a:09:31:65:4f:2b:72:a8:22:b4:69:b7:43:cb:2f:75:69:a2:
         0b:f0:73:39:06:f8:1b:a8:0d:32:33:83:0b:2b:eb:2c:ff:04:
         01:8b:81:29:93:bf:57:89:ac:84:1d:99:e0:fd:c4:43:41:80:
         0c:d6:a5:73:4f:6a:4f:c7:01:c6:c1:b8:34:a0:65:aa:c6:d4:
         3e:8d:13:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----