Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/991c4355-76a4-3cfd-8554-b8d43fb1c90a.roa
File:                     991c4355-76a4-3cfd-8554-b8d43fb1c90a.roa (raw, json)
Hash identifier:          gY0bl6E7nFYwY/PC4rW6OwVmo00fenwgXN4yNHTKGq0=
Subject key identifier:   51:BB:A6:16:2D:EF:4E:73:52:F4:A6:CC:18:09:50:DB:F4:65:E6:54
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF752B5D938FAAF6A6FB4640
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/991c4355-76a4-3cfd-8554-b8d43fb1c90a.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        76.70.200.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:2b:5d:93:8f:aa:f6:a6:fb:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=00162b43-7c01-4bfd-af98-8d945176d01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:ee:37:2e:9b:3a:4e:9a:3f:da:83:57:3e:
                    58:af:50:78:52:24:f2:7f:22:be:9d:b1:60:10:c5:
                    1f:e1:cb:d2:e6:76:65:c8:01:e1:0c:55:5c:c3:96:
                    7f:d7:bd:d2:9a:dc:d9:bc:f0:67:c4:d4:da:91:f7:
                    b8:74:ce:8b:e6:bd:73:51:7a:f1:1e:6a:bd:94:90:
                    a6:9f:93:24:89:42:87:95:08:1f:45:ce:f1:da:f7:
                    42:39:98:fe:a4:18:e6:c2:7e:03:4e:a4:85:87:77:
                    87:90:03:d9:3e:02:67:b4:30:83:66:85:8b:e3:e9:
                    84:2b:68:23:2f:48:84:8a:05:38:de:10:14:46:6d:
                    7d:a4:bd:03:77:0b:2e:c9:a8:ae:7e:a8:2b:0d:7b:
                    e3:d6:b9:9c:32:6c:cb:01:cf:4b:31:58:c1:52:80:
                    72:3e:c4:fe:13:70:8a:b4:1d:f4:dc:e4:a9:fb:4b:
                    97:9d:4f:06:5b:5b:c1:78:2b:cb:e5:07:20:ed:9e:
                    b0:e4:bb:e8:fd:f7:22:ab:1b:e8:7e:47:c2:34:75:
                    44:c9:eb:d8:54:55:9d:34:0f:81:f3:4f:d8:7b:40:
                    52:d0:a6:5d:ce:dc:f9:0e:d3:bc:d0:e3:8e:01:3d:
                    40:26:d8:01:d5:8d:26:df:db:27:ae:24:a7:7e:81:
                    bc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BB:A6:16:2D:EF:4E:73:52:F4:A6:CC:18:09:50:DB:F4:65:E6:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/991c4355-76a4-3cfd-8554-b8d43fb1c90a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.70.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:fa:a0:54:39:d1:aa:fc:14:ac:54:8d:c6:16:5a:7b:b1:35:
         c5:1e:6d:40:fe:f2:d0:ce:3b:b6:3b:04:1a:b3:fd:d1:10:e9:
         35:fa:d4:37:52:c5:2e:71:67:2a:eb:29:b3:4b:cb:0a:c1:d5:
         12:20:29:9f:96:77:1b:3d:f8:d4:06:ae:34:3f:fd:fb:4c:d7:
         76:a4:d6:00:fc:9a:da:9e:30:b6:b7:1b:61:f0:31:83:e6:85:
         22:2a:9e:99:54:19:f9:bb:11:4e:e1:b3:eb:ae:22:db:21:75:
         82:ef:90:16:77:fa:d2:f3:77:9a:27:49:e9:ac:41:d0:b0:6d:
         9b:30:dd:b0:bc:2e:22:c6:a8:31:ac:3a:f5:0d:fb:52:7f:21:
         8a:de:ce:76:04:fa:9b:22:26:37:7f:dc:13:44:30:94:b4:22:
         a7:78:08:01:7c:11:e9:d4:1b:3d:8b:ee:27:33:76:53:a9:39:
         3e:db:3c:77:d2:4c:d1:d8:a9:63:ee:61:0f:3d:0b:dd:2d:52:
         18:ab:23:15:20:9b:cd:ae:f6:69:73:32:cb:09:e4:06:f5:49:
         6f:78:e7:49:f1:a9:27:70:43:03:37:87:93:ea:58:08:24:3c:
         6a:0a:84:6a:00:81:22:29:1e:85:47:ef:08:13:61:60:f4:9f:
         d3:1b:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----