Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8da812e7-3e5c-39ce-bedc-58b8404dd8d1.roa
File:                     8da812e7-3e5c-39ce-bedc-58b8404dd8d1.roa (raw, json)
Hash identifier:          8sNUaKxlSRFdlfH0gOphqZQvWGe3+eTylgThYIf7AOs=
Subject key identifier:   DA:F1:0E:60:B8:4E:A1:EF:E3:39:40:D6:64:BA:92:E7:27:81:7E:5B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA14EC30B7C118011C7B596C
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8da812e7-3e5c-39ce-bedc-58b8404dd8d1.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:14:ec:30:b7:c1:18:01:1c:7b:59:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=d5f43236-1c86-458a-b192-58def8be493d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:fa:6e:74:de:2a:4a:f0:42:e6:82:8b:06:
                    1c:53:9e:2b:1e:6d:12:59:3f:d7:92:dd:a5:4d:11:
                    70:24:91:4c:4f:fe:82:ab:0e:02:fe:9d:9c:d0:3d:
                    1d:a4:c8:11:c2:d8:e2:b0:af:fe:34:b2:30:50:70:
                    1c:2e:07:f3:a2:94:6b:e1:64:55:dc:53:87:84:e9:
                    80:1e:54:09:c9:d4:26:e0:61:5a:b3:2b:26:9a:2e:
                    c9:11:b8:39:b0:e4:d0:94:92:b1:c6:f6:82:da:87:
                    b8:f6:2b:f6:d6:e7:33:83:3a:d8:c1:5f:d0:7a:25:
                    90:cc:58:3b:1a:4a:20:2e:48:44:ab:42:6b:d1:97:
                    15:35:2d:9a:76:90:19:90:49:8b:b8:49:ee:b7:df:
                    7a:0b:b6:f2:3b:c5:36:ab:a8:52:a8:23:cb:af:bb:
                    2f:1c:67:91:59:19:3b:05:8d:e3:62:3d:38:a3:61:
                    88:07:e2:8d:a0:c3:35:49:9c:29:3a:54:15:65:6b:
                    84:4c:7d:f1:21:9c:e0:2c:b1:ef:3b:39:95:9c:56:
                    22:5c:81:82:84:86:5a:12:c5:94:f7:90:61:cc:03:
                    47:da:84:76:8e:42:7a:19:e2:54:55:5f:93:42:39:
                    45:db:d9:26:d2:e4:2a:ad:a6:99:61:ec:84:be:4c:
                    d6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:0E:60:B8:4E:A1:EF:E3:39:40:D6:64:BA:92:E7:27:81:7E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8da812e7-3e5c-39ce-bedc-58b8404dd8d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e2:ac:67:13:f6:61:9a:e1:84:0f:cc:67:7f:c0:63:76:f4:
         a1:d0:d9:0e:ba:34:97:4e:ee:b7:b9:ef:1a:88:35:6e:2c:81:
         5d:27:f1:4f:7c:15:e0:08:54:d1:b1:f4:a7:7e:ad:cd:68:d3:
         66:63:9b:a3:65:89:0b:74:6b:f2:5c:05:4b:2b:1a:68:00:58:
         06:f6:74:6a:f9:d7:30:cf:c3:46:50:db:dd:b3:af:b8:18:7d:
         26:69:00:06:df:f2:42:a7:bd:ab:99:f9:19:ea:58:a8:9b:a4:
         8f:ec:ec:b0:c4:ab:ad:d1:19:0d:23:18:b6:aa:6d:12:75:84:
         ce:45:1f:f0:3a:dd:90:f0:40:f6:0e:d8:92:f8:1c:65:d3:d0:
         53:4a:c8:d3:2a:be:55:4a:33:c2:b9:0a:bc:d0:27:ef:db:d4:
         ff:c5:d2:ff:f5:12:9a:6f:fa:b0:ce:9e:70:3d:17:04:00:61:
         60:fe:5a:73:89:07:09:a9:42:13:64:23:4a:45:69:76:9a:ac:
         98:be:8d:13:27:13:d5:02:4b:92:ce:99:7c:3e:30:15:32:2a:
         b3:6a:49:c4:14:d9:6f:b9:ea:a1:00:c5:e9:27:80:65:5e:74:
         7f:6f:9c:db:c6:fd:44:69:29:41:78:ca:a5:e4:1e:22:8f:ba:
         95:e4:f3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----