Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/859d9246-d79e-3488-9d99-07560cc4cca8.roa
File:                     859d9246-d79e-3488-9d99-07560cc4cca8.roa (raw, json)
Hash identifier:          e7U/rH2E6Ik2Nb7ZM3RdjGgO2DCzReObqYhxby6j4jI=
Subject key identifier:   B8:8B:E1:32:01:A5:BB:F5:DE:B4:08:EF:68:43:55:93:56:F3:2C:38
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75849222345BD4C5B7A580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/859d9246-d79e-3488-9d99-07560cc4cca8.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        184.150.240.0/20 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:84:92:22:34:5b:d4:c5:b7:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=5518d2cb-180e-4851-a24f-1f4efd26191b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:98:67:b4:9d:17:56:28:22:a9:23:b1:a5:
                    63:4a:d4:49:d4:9b:32:b8:16:65:a4:4e:bb:38:dc:
                    d9:f8:b0:ef:27:a5:48:60:48:f1:ea:a9:e6:d3:3c:
                    11:94:6e:35:b3:ae:17:92:40:2d:04:b5:d8:6b:25:
                    d0:cd:2d:37:00:62:84:f4:8f:f0:3f:b3:f5:e8:0e:
                    0c:fe:14:a7:9c:6e:0c:bb:39:0d:9b:21:50:83:fe:
                    fc:30:dc:4c:94:6b:74:ce:75:7e:4e:35:9b:31:3b:
                    c4:d9:db:51:82:92:1f:83:5d:c0:9e:94:d9:74:24:
                    0d:d9:71:c8:b1:9f:e1:96:ff:2f:8d:8e:20:9c:f8:
                    16:cd:94:c1:29:18:96:c7:80:cf:40:0d:ae:5e:97:
                    99:d0:61:33:d2:41:c6:5f:68:17:e2:a8:29:33:ef:
                    7b:5d:9e:b9:80:bd:8c:cb:bb:28:82:db:9f:25:87:
                    1f:b4:43:0d:5a:e5:d6:9e:df:14:a6:e7:d3:c8:90:
                    ea:96:f9:92:c7:bc:9e:4d:56:55:55:1b:f5:34:94:
                    f1:0f:22:5f:3f:da:c6:36:6f:ec:36:67:06:9e:3c:
                    4c:90:55:4b:af:46:87:f1:5d:06:46:b3:55:3a:ed:
                    16:f4:5a:00:71:7e:74:06:27:9e:96:30:f9:50:34:
                    94:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8B:E1:32:01:A5:BB:F5:DE:B4:08:EF:68:43:55:93:56:F3:2C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/859d9246-d79e-3488-9d99-07560cc4cca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:75:73:55:2f:0a:7d:c8:2d:ab:85:fb:ad:97:a4:aa:44:6c:
         2e:36:33:4f:79:76:02:b8:4b:fb:d3:5d:f9:a9:d8:b5:7c:e8:
         4b:02:47:2a:fe:ee:11:63:30:b6:0b:ce:6c:5a:45:85:69:da:
         95:d8:8d:2d:c4:60:da:98:81:9f:6f:a3:b6:bd:51:34:04:9c:
         aa:3e:65:91:f3:ae:36:f3:69:f8:4a:72:48:59:91:31:49:ce:
         ff:34:a9:23:a1:ca:a5:6f:d0:8c:10:a2:14:9d:42:bc:16:8c:
         73:eb:0b:16:12:ed:ea:af:9b:35:10:2b:38:3b:fc:ae:fe:87:
         a9:0c:77:98:a4:3f:e4:c1:13:8c:a1:f7:8a:83:a0:21:4b:81:
         b5:35:e3:fb:5e:fe:64:ee:1f:88:9f:33:26:88:38:d4:82:fb:
         bc:1d:69:44:d2:85:72:bf:ba:ff:d9:32:9e:a0:b0:a1:90:6e:
         64:91:82:ac:9e:68:6a:5c:15:53:4c:3b:52:79:7b:33:f2:84:
         e9:ef:76:8c:b7:75:fb:58:b7:e0:a7:d6:01:fc:48:bc:fc:d2:
         88:c2:b7:1b:14:20:8e:2f:c5:62:05:69:2d:9f:df:a4:e3:ad:
         ca:02:f7:83:7c:98:e4:33:a9:79:98:5f:e7:27:13:6d:1e:5d:
         61:04:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----