Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90167164-b170-336b-9ef3-53b8ec1b6d08.roa
File:                     90167164-b170-336b-9ef3-53b8ec1b6d08.roa (raw, json)
Hash identifier:          jIraiR0QyUQpRn+5qImMGc0GWxi+odCsCNzqJbOSviA=
Subject key identifier:   39:6C:2D:67:09:EE:CC:8E:25:CC:83:AE:D0:87:49:64:CC:42:64:70
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493159155FCA3B172AB5FF980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90167164-b170-336b-9ef3-53b8ec1b6d08.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     855
IP address blocks:        207.34.24.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:91:55:fc:a3:b1:72:ab:5f:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=6502a812-66f9-40dd-8a49-4a7e61937d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:94:e0:d7:aa:5b:e1:c9:d5:5b:ea:97:2a:1c:
                    6e:a6:99:ff:10:b4:c2:7f:21:4d:e7:d9:5b:41:62:
                    83:d0:b1:50:63:33:be:33:f3:42:ad:23:d3:1f:06:
                    5c:4d:54:7d:01:0c:77:d4:b3:5e:c7:42:48:37:2e:
                    b8:cb:d9:3a:13:5a:29:0c:ab:61:98:92:be:ce:db:
                    d4:aa:8a:d9:6c:e0:d1:f5:1b:08:f9:62:a4:d5:03:
                    c9:3a:60:9d:35:6c:65:12:f0:b2:96:08:1a:76:34:
                    ec:8c:23:99:da:44:23:95:6a:7c:7d:d5:31:21:de:
                    fe:3a:d9:23:f6:0c:86:82:51:a8:67:18:82:41:11:
                    b4:0b:e5:bc:7f:b8:66:79:92:dc:fd:b2:8f:aa:76:
                    e2:3d:53:61:ed:f0:66:c6:39:02:be:af:f9:c6:30:
                    33:38:95:0b:88:07:10:fe:1f:16:51:9d:36:06:6b:
                    e3:09:04:53:c1:12:4e:b2:ed:bd:0b:69:f1:a4:53:
                    c6:37:c8:d4:41:a2:bb:49:67:f3:8c:73:83:f1:34:
                    7e:5c:e3:15:02:b8:12:f6:9d:f7:c7:67:74:45:6b:
                    4b:2d:26:06:74:7d:67:3b:45:44:bc:b6:65:79:8c:
                    d1:70:2c:f7:0d:9f:83:54:5e:20:9d:be:56:bb:1e:
                    b6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6C:2D:67:09:EE:CC:8E:25:CC:83:AE:D0:87:49:64:CC:42:64:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/90167164-b170-336b-9ef3-53b8ec1b6d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:72:a3:ac:86:63:e2:83:40:fb:b5:cb:84:9f:39:bd:d5:fb:
         f7:4f:8a:17:fa:cf:eb:74:d1:50:01:61:b6:c8:0b:87:9b:e2:
         59:cf:20:e4:be:fe:00:24:10:d8:a8:bd:e9:02:75:9f:25:a5:
         52:b2:e5:1e:1b:a7:6e:9b:49:4e:b8:c4:2d:e6:fd:f8:db:13:
         72:cb:3b:31:60:78:be:e7:9a:dd:a2:b1:1c:b7:28:25:79:5b:
         6b:3c:db:20:45:ad:4b:2c:56:f9:c3:d3:bc:2b:46:78:a9:25:
         ef:99:f5:56:81:bb:d3:ef:89:c2:65:05:1c:2f:4e:e5:05:1b:
         b8:5d:4a:aa:45:71:4f:9b:37:a7:f7:41:ff:bc:1c:4d:08:54:
         ca:98:1f:9f:7c:1a:93:4a:00:de:c2:90:b2:6c:90:05:72:73:
         25:95:51:60:93:49:22:66:f1:14:d6:1d:2c:df:b4:cc:65:98:
         84:42:89:25:32:58:30:2c:ad:0c:c2:c6:97:99:c0:03:e4:ba:
         b8:fb:ce:1e:cb:53:94:1a:0a:e8:d8:67:96:d2:b6:29:0c:4f:
         e1:04:4d:f4:18:d7:1b:be:d9:2e:7f:c9:e6:9c:a2:6e:5f:3e:
         01:91:1c:be:18:2b:92:4e:39:fc:3e:23:ec:65:85:f8:31:3c:
         41:b3:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----