Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7d160919-f50c-38a0-adff-f13e8e3c71f1.roa
File:                     7d160919-f50c-38a0-adff-f13e8e3c71f1.roa (raw, json)
Hash identifier:          oLBzkOIiX6s3y+c7ku6BMUwKB0SHLLnQAtCdDPrWN0Q=
Subject key identifier:   5F:F6:EA:10:18:46:E9:77:E0:12:96:A7:9A:EC:1F:AF:3C:39:1D:71
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA1138435B62C8E1C509FF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7d160919-f50c-38a0-adff-f13e8e3c71f1.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     577
IP address blocks:        67.69.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:38:43:5b:62:c8:e1:c5:09:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=1bf92fd4-b107-4e3a-8361-0f03756c7947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:5d:74:5c:bd:aa:8f:4f:cb:01:91:b8:fd:
                    de:65:8c:66:41:e4:9c:68:ae:c7:25:33:8c:61:b6:
                    04:11:11:f7:4d:06:e9:76:09:92:1a:7f:36:a9:87:
                    10:9f:2d:83:60:c7:83:7d:02:be:17:44:bb:7a:57:
                    3a:81:00:79:1c:06:43:e6:20:07:4b:f5:7e:cf:62:
                    57:28:39:ca:69:a1:d8:a9:a8:86:b7:46:09:78:71:
                    88:04:5a:f4:80:0c:97:fb:96:6f:1b:a6:39:5d:2f:
                    db:be:d5:57:10:5a:a3:8e:92:8a:c2:79:9b:31:40:
                    a3:aa:4d:1f:d9:48:d6:2f:f9:80:40:f1:a2:c8:d7:
                    54:6e:39:d2:27:32:88:8e:8d:ea:d1:1b:09:05:2f:
                    1f:f0:2f:9d:51:cb:7e:3e:5b:0c:ce:d8:1f:a1:99:
                    48:60:4c:b7:db:9d:56:05:c4:cc:f8:92:09:3e:28:
                    8f:41:9f:ec:28:eb:29:28:83:8b:f8:b8:7b:88:df:
                    8a:20:73:ed:73:51:64:a1:0b:1b:64:3e:8d:71:a6:
                    a9:cf:41:b0:1d:9d:70:0f:d1:e4:f8:af:b0:8a:99:
                    ab:a0:63:cb:00:f1:1e:75:aa:49:0f:83:03:46:be:
                    1c:3b:df:b6:d7:b1:74:20:e2:3f:32:95:f9:10:8e:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F6:EA:10:18:46:E9:77:E0:12:96:A7:9A:EC:1F:AF:3C:39:1D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/7d160919-f50c-38a0-adff-f13e8e3c71f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:2e:eb:30:00:15:65:65:a3:3a:38:5f:6d:3a:20:f8:1b:ee:
         79:6c:aa:85:64:59:fc:5d:01:75:33:21:2e:da:05:78:d5:d1:
         f6:9a:1b:21:29:e7:63:e6:5c:9c:51:69:9f:3b:76:d2:70:6b:
         42:5e:61:34:62:51:27:74:7d:6c:0a:e9:65:75:74:12:40:40:
         41:37:22:b9:a1:a8:f5:13:35:80:4c:44:9e:f5:51:f6:d3:f6:
         8c:fb:a1:d0:77:0a:2e:dc:45:e7:8b:a6:54:01:0b:1b:b1:bc:
         a5:24:fc:27:58:06:4a:3c:ec:77:97:5f:42:41:e7:cf:52:c5:
         ff:f6:a2:dc:71:d5:c8:9d:a3:99:67:c9:86:04:9a:07:42:b6:
         ad:23:3d:3e:e2:aa:84:ac:ba:e5:cc:48:e6:58:20:a7:be:3f:
         af:c1:e7:36:75:a9:ab:6a:e8:af:01:4b:0b:c0:c6:7c:40:f9:
         83:d9:9a:b6:4d:97:0f:5a:00:56:67:b3:76:3b:36:5a:ff:6d:
         ab:96:ef:50:a7:2a:63:37:50:95:ad:27:19:a3:18:bf:bb:94:
         c6:2a:c0:35:33:9c:34:a4:d1:1b:6f:c1:7e:7d:a3:98:9e:14:
         6b:91:34:bf:f3:f6:63:92:03:21:f7:90:1c:8b:06:42:76:78:
         aa:31:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----