Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7cd40043-85e4-3510-bb85-4572e506ef96.roa
File:                     7cd40043-85e4-3510-bb85-4572e506ef96.roa (raw, json)
Hash identifier:          W5Hb06t8+2IAG5Sz9VHvq02JWAOQ6UMlSzYR58DKQ8M=
Subject key identifier:   FB:23:C5:15:B4:95:35:92:79:13:4E:55:2D:4D:47:01:57:29:F1:7A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75250F327A2E1313BAED30
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7cd40043-85e4-3510-bb85-4572e506ef96.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        76.68.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:25:0f:32:7a:2e:13:13:ba:ed:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=866daf9f-e3f6-44f9-b392-ca5a51e0ea98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:3f:70:73:a7:29:e7:0c:91:6b:57:c0:0e:
                    39:f9:4c:59:77:32:ed:f4:0a:1e:59:5a:46:88:15:
                    cc:b9:c0:0a:8f:5a:93:66:f6:14:5c:c5:3e:97:df:
                    2d:f2:c8:fb:de:50:24:ae:8a:aa:d7:da:be:13:06:
                    a0:e0:91:a1:64:4c:63:83:ac:52:e4:70:a6:8b:ca:
                    7a:ad:9e:a0:86:af:88:e9:cf:d2:7e:06:fc:89:bd:
                    14:d2:bd:15:4e:79:ef:b1:06:0a:88:75:47:5c:10:
                    a2:6a:ec:a9:18:de:42:22:4d:27:73:f3:bc:7b:91:
                    0f:7e:98:92:aa:9a:99:4e:b1:67:96:e1:3a:6c:32:
                    35:08:9e:04:7e:c5:a3:b7:ef:00:3b:04:39:af:92:
                    9a:13:6a:03:79:08:10:56:55:43:9f:67:83:0b:17:
                    64:a7:7e:c9:ab:dc:cf:a3:2f:d1:b4:28:5c:e8:d5:
                    b5:28:15:36:20:65:73:34:15:f2:34:ec:1f:1a:87:
                    30:2b:a7:11:64:33:03:11:6a:6e:9b:3d:2f:dd:d6:
                    82:a7:12:c0:2b:3a:d1:36:2a:38:e1:db:81:54:7a:
                    38:f5:97:ae:68:05:26:34:b6:52:a6:b5:1d:85:60:
                    03:06:8d:9a:66:0e:55:15:e5:5d:17:0d:eb:9b:bb:
                    99:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:23:C5:15:B4:95:35:92:79:13:4E:55:2D:4D:47:01:57:29:F1:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7cd40043-85e4-3510-bb85-4572e506ef96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:34:b4:c0:25:e8:50:da:9b:52:49:89:06:6f:3c:62:48:9d:
         e7:2b:a4:ff:9b:18:8c:94:db:ac:d8:5b:72:88:29:da:84:18:
         26:3f:94:f2:c6:70:bf:3a:d0:f6:84:a9:9b:c2:b1:99:7e:c8:
         ae:3c:61:61:95:d2:2f:d0:d7:a9:7a:e7:98:f1:aa:dd:46:24:
         6d:78:7f:14:07:df:5a:51:10:18:d1:c7:5a:0a:9f:b6:fa:a7:
         96:c4:27:0a:c3:d7:61:a6:ab:42:cc:75:ad:0c:aa:cb:ae:91:
         f3:93:93:1c:db:45:09:53:14:82:00:49:ed:19:05:b5:e3:69:
         bc:f9:40:d9:f0:dc:c3:b1:13:33:5b:7d:e5:c4:ed:ba:1b:28:
         ff:82:99:a1:33:1f:f8:69:b6:9d:f2:f9:fe:72:d7:dc:37:ef:
         56:f6:f4:52:bc:92:e2:01:b2:19:d2:be:34:cd:65:41:bc:f6:
         88:ac:09:69:ac:55:9e:c9:19:ed:f6:0b:54:cd:8b:c8:53:e8:
         9d:a0:49:5b:c6:c4:1c:da:81:c0:0a:50:76:f7:6e:4c:20:05:
         a5:f6:c5:e0:01:9e:04:9f:90:be:cc:60:9c:88:84:12:c3:5b:
         dc:5d:ac:d7:b5:f3:9c:14:1b:ac:17:6d:2b:f6:df:1e:77:25:
         2a:d2:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----