Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/942154f0-1c69-335c-9555-7eb0a4b488e1.roa
File:                     942154f0-1c69-335c-9555-7eb0a4b488e1.roa (raw, json)
Hash identifier:          M2iAwe5P1wxswBdGuRNu+mJ7hrRxTmSWRvC/Wmsd9nc=
Subject key identifier:   9C:A4:58:A5:3F:2C:5A:FF:E0:2B:29:76:7E:4A:AA:D8:99:34:78:73
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE6583C307C98EEF3C12980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/942154f0-1c69-335c-9555-7eb0a4b488e1.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     15321
IP address blocks:        216.209.88.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e6:58:3c:30:7c:98:ee:f3:c1:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=320f7c4e-fc22-4606-8f50-59d2140a338a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7c:df:f2:a8:7b:8f:b4:b8:ad:45:ec:33:2e:
                    af:6f:b8:6d:17:dd:f0:ce:99:4b:86:3f:b4:06:a8:
                    1a:60:91:18:3a:60:e1:d7:50:9f:7f:66:07:00:0d:
                    9d:13:50:8c:7c:46:aa:3e:34:33:6d:ec:df:d1:e2:
                    56:f7:93:da:35:9c:fd:62:fe:af:5b:b1:de:47:7e:
                    96:ed:a4:f3:a1:b6:0b:9c:f7:04:9b:91:05:72:61:
                    c4:2a:3c:1d:4a:58:6e:17:6f:90:93:84:34:c4:c3:
                    21:d8:d1:72:9e:ea:0a:22:49:f1:a1:8b:23:b8:53:
                    de:46:8f:95:3b:79:1a:6c:2b:e1:b1:bc:e1:30:97:
                    ff:db:87:25:74:5a:d2:18:2b:a6:8d:6a:9e:a7:79:
                    ae:a8:b9:75:bb:1e:85:3d:3e:98:31:6d:7a:09:3f:
                    a3:74:76:da:f8:83:f0:0b:ce:02:dc:31:47:3d:80:
                    3a:aa:d6:f1:42:6d:85:86:b3:b3:a4:f6:f9:30:45:
                    af:07:bd:91:a4:49:ea:8c:58:06:c1:4f:12:d4:b7:
                    c2:00:51:d4:e3:8c:ab:e5:40:2e:f3:03:7c:42:d2:
                    6e:21:a0:51:a8:c3:4d:56:82:39:4c:09:58:e6:60:
                    ef:1f:ae:9f:2b:cd:c9:05:df:12:8a:74:db:5b:29:
                    91:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A4:58:A5:3F:2C:5A:FF:E0:2B:29:76:7E:4A:AA:D8:99:34:78:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/942154f0-1c69-335c-9555-7eb0a4b488e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:c9:2b:12:8b:53:d7:2c:c1:8a:0f:b7:45:2c:55:fd:71:
         5c:56:9d:55:7d:5f:5c:b4:9a:2e:00:23:a6:00:91:b9:f9:c6:
         f7:ed:c5:93:eb:18:f0:25:a2:48:8b:17:68:38:b4:01:43:e0:
         dc:24:15:d0:88:63:bc:30:ba:f7:8f:da:a9:86:e6:d8:43:c6:
         3f:45:27:58:bc:c0:2c:b0:ea:30:a4:2c:01:37:2e:59:e1:0a:
         71:71:8b:38:43:1f:5e:a6:79:ce:1c:11:42:96:fc:f1:0f:3d:
         0a:0c:7f:c9:82:de:bf:b3:3d:14:f4:86:8a:cd:91:79:43:34:
         4c:e9:02:fc:b8:c6:2c:25:50:80:7a:3e:18:e8:0d:4b:a0:77:
         64:d5:d8:2e:7d:b2:98:bc:3e:0f:2a:94:77:22:be:63:1d:af:
         a8:1d:07:c8:f9:0e:58:37:91:d0:af:77:60:b5:c7:6d:71:f1:
         73:5a:f8:b3:fc:e7:e6:a7:5d:a8:4a:28:4f:00:2e:1b:c7:9c:
         35:e5:1f:f5:b3:c0:65:49:f2:63:6a:eb:25:81:4f:f6:c4:86:
         f3:dd:53:59:b0:22:8b:e9:bd:54:ef:46:0b:0d:a1:50:19:88:
         38:97:6a:8a:f0:b6:c8:bd:88:0c:46:d7:9c:e0:45:6a:7c:fa:
         c9:43:14:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----