Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c185e8b-190f-3a37-aac3-13f025d31c7c.roa
File:                     8c185e8b-190f-3a37-aac3-13f025d31c7c.roa (raw, json)
Hash identifier:          FTzYkd3WN8KkwCyzxs9iLpmFDZdpsPONfVRKy4MDnok=
Subject key identifier:   0F:E1:46:18:24:35:93:FE:71:F1:87:8D:26:36:04:09:64:55:45:E1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7508F7B884EF0A448EE680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c185e8b-190f-3a37-aac3-13f025d31c7c.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        70.28.136.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:08:f7:b8:84:ef:0a:44:8e:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=ecb72f63-d5f8-458d-a1d9-37592d24e71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:42:42:8d:4f:e9:86:2a:da:16:ce:de:e8:
                    ae:39:da:d3:c2:8f:87:72:34:f3:18:b6:e1:6a:51:
                    df:2e:4e:12:8f:04:db:d9:90:87:d0:b8:23:14:72:
                    53:9f:f9:4f:41:b0:ba:17:43:d0:53:73:dc:02:93:
                    ef:f7:04:fb:97:b4:98:98:1e:43:aa:01:46:eb:81:
                    7e:43:15:93:73:3a:db:68:00:62:6e:7b:5d:b5:c2:
                    f8:c0:b0:0e:78:31:25:0f:84:4e:ae:07:88:b9:14:
                    b9:b8:9c:61:87:bf:cb:f7:2b:e7:85:f2:e0:69:ae:
                    01:3f:a4:0c:b5:4e:c6:87:b1:74:15:ab:ed:30:9f:
                    9d:88:9c:b5:33:18:34:5e:40:f4:ed:42:ba:24:d5:
                    93:57:e6:06:43:9c:01:2d:9d:ac:22:4a:6a:74:8c:
                    6a:d1:1c:fe:c4:a8:09:59:83:ca:dc:11:a0:3c:82:
                    bb:22:f2:43:29:16:2f:71:e9:ad:f9:c4:c2:07:7d:
                    1b:42:f3:15:f2:a7:15:4b:56:ef:4e:82:68:ec:70:
                    dc:ad:a8:52:76:6b:a2:41:50:49:28:5f:78:f1:e2:
                    28:dd:61:4c:86:9a:5e:39:7f:6c:93:23:c8:c9:95:
                    b4:b6:73:aa:bf:f4:2e:96:ae:70:36:f3:84:8e:73:
                    7e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E1:46:18:24:35:93:FE:71:F1:87:8D:26:36:04:09:64:55:45:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c185e8b-190f-3a37-aac3-13f025d31c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:d1:2f:8b:1d:6e:03:f6:b8:dc:7f:13:d7:0d:8b:c4:8d:
         a4:93:bd:48:2b:4b:73:8f:05:b2:8f:bd:92:c2:97:b3:43:c1:
         8a:33:fc:20:10:bf:78:04:94:e6:0f:53:bb:97:f4:56:3b:29:
         f6:cd:a6:f9:ff:16:56:36:bc:65:94:30:a4:8f:80:f8:45:5a:
         a4:6d:28:16:cf:7f:bb:ad:4e:2c:5d:7f:2a:e4:0e:b8:96:47:
         0d:10:88:8a:a0:f7:53:ab:7b:b2:87:7d:e2:a2:20:66:9f:13:
         34:d1:fb:60:7b:08:7e:09:c1:fb:10:d9:49:1d:b0:23:26:4f:
         e6:f0:e8:62:9f:85:ea:7d:e4:5e:b9:7c:35:e2:44:80:b4:f2:
         ba:85:ef:6c:6f:fc:b1:31:a4:bd:16:20:74:53:1f:62:6f:39:
         d6:96:69:5a:11:c6:17:80:85:2b:6b:c2:24:eb:1f:97:d8:49:
         af:76:05:cb:92:0f:4c:8b:68:6f:a0:1c:da:48:98:49:6e:4d:
         2f:37:2b:34:bf:e4:fc:9c:e2:e0:bb:41:a8:dc:9a:b0:0d:06:
         91:2d:3b:94:e3:8e:9e:0b:a1:9d:c0:f4:a4:3d:3b:47:19:c3:
         f5:4a:28:ae:71:ac:c1:cc:67:c6:2b:ac:f7:9a:d3:20:8c:56:
         e4:d1:05:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----