Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8354613f-740f-3cb5-b687-3e6a1ffcaf7a.roa
File:                     8354613f-740f-3cb5-b687-3e6a1ffcaf7a.roa (raw, json)
Hash identifier:          EmxD/X1aqrIPmIfk2Rbpa7z5i0hoMka9liVgk1JB240=
Subject key identifier:   2B:A8:0A:29:DF:D2:84:46:39:BD:D7:0D:2D:AE:9A:1C:8F:FB:ED:D2
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B35D085A9417785DB35A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8354613f-740f-3cb5-b687-3e6a1ffcaf7a.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        76.70.200.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b3:5d:08:5a:94:17:78:5d:b3:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=aa5329cb-f418-4107-b3ca-6e805fd0252f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:80:64:8d:ea:16:0b:d2:45:40:14:49:83:
                    61:c2:7c:85:d0:48:87:f4:26:20:9f:66:f1:fc:18:
                    90:4a:d4:bc:03:bb:66:bc:09:5f:3b:45:4b:13:db:
                    10:ac:50:bf:35:39:eb:96:ec:59:02:a8:65:33:41:
                    eb:6e:e8:ea:20:12:68:e8:75:19:8f:7d:d9:1e:7c:
                    1c:c0:93:49:f7:df:45:89:27:45:6e:88:fb:f3:b4:
                    e5:d1:82:a8:fc:3c:1e:8d:bf:08:49:9b:b4:a9:47:
                    ec:26:ec:b9:51:02:46:40:c8:da:79:ed:8b:f0:32:
                    8d:42:4b:cc:95:bf:40:94:da:a1:9b:4c:58:7f:dc:
                    ea:94:17:b2:f2:d2:e6:8f:59:f8:4e:93:55:b2:95:
                    e8:25:e0:0f:b2:9b:5a:b8:d3:7b:5d:59:0f:09:dd:
                    05:77:c2:84:8f:a5:79:d3:62:32:72:22:c3:42:ba:
                    88:48:8e:35:fd:a8:6c:65:62:ed:42:ab:d3:e8:b9:
                    ca:37:b3:e8:41:d6:69:5d:34:96:74:e0:cd:97:9d:
                    8f:9c:7e:09:17:66:4f:03:10:d3:66:0a:f5:71:99:
                    70:99:92:0a:50:9b:49:fd:9d:20:68:c9:d6:11:67:
                    b0:f6:35:21:4d:47:34:8e:53:ad:55:70:26:2b:e2:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A8:0A:29:DF:D2:84:46:39:BD:D7:0D:2D:AE:9A:1C:8F:FB:ED:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8354613f-740f-3cb5-b687-3e6a1ffcaf7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:67:8f:d8:ac:5d:30:24:b7:c2:7b:21:17:4b:b9:c9:e3:f8:
         6d:92:03:b5:a7:47:6e:31:fa:88:fd:07:d7:9d:35:ee:44:6b:
         39:4a:31:db:f6:09:dc:2e:af:43:b3:dc:e0:0a:4c:3a:cd:47:
         2e:bc:da:ed:d6:76:42:99:c7:3d:f4:39:a0:ef:a3:37:75:f2:
         36:ff:24:c8:14:52:cf:46:b6:7c:7c:76:cc:b7:e1:ae:b3:56:
         d8:ea:80:ea:71:ec:61:a8:f8:4c:35:77:ef:52:36:b8:3d:a7:
         76:a1:88:c0:56:fb:60:75:50:a2:42:ef:a2:ce:a6:97:76:5a:
         b7:67:67:7e:7f:2e:b1:d4:23:f0:82:00:2d:f5:9e:92:67:d0:
         36:3a:54:c9:ec:55:f2:94:2c:78:3f:7d:bc:1a:8a:2f:ab:b5:
         8f:cb:fa:72:9f:10:9d:47:05:97:0e:35:e3:d0:9c:81:e8:0d:
         3d:dc:4d:91:1a:17:67:41:88:2a:61:48:7a:6f:04:13:0c:eb:
         e4:9d:ae:3e:c8:7e:cc:e2:92:74:64:e3:c6:08:60:27:ef:0f:
         45:03:de:38:ab:23:02:60:39:66:5e:1e:18:43:1b:96:e6:8d:
         c3:d2:c3:80:d0:40:2b:4e:23:1e:cf:87:d1:9f:0d:14:aa:63:
         9d:fb:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----