Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1064df1-8f4b-3d96-8295-4988f4f21c03.roa
File:                     a1064df1-8f4b-3d96-8295-4988f4f21c03.roa (raw, json)
Hash identifier:          rnV1/BacXv7ANSCOVSZ53u0JrqekIg9w3AesWc9BV7c=
Subject key identifier:   AA:F6:20:C5:50:B0:8A:4E:08:77:9E:33:B8:BC:A7:6E:D1:06:A6:FD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285844931664D3CF45E48765CAE880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1064df1-8f4b-3d96-8295-4988f4f21c03.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     35911
IP address blocks:        209.226.88.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:16:64:d3:cf:45:e4:87:65:ca:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=0f68dc18-f3ed-43ab-bf96-0f5994500b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c1:d8:b7:a7:7b:58:01:b4:9d:45:70:63:72:
                    b7:2f:5b:c3:c6:b4:fa:4a:80:a5:03:a5:64:93:96:
                    b9:35:5b:a4:98:d9:de:0c:a5:76:31:17:4d:7d:53:
                    e4:36:a6:61:96:33:ee:8c:dd:6c:3c:76:0a:ee:bf:
                    47:7e:e2:3e:9c:c7:cf:1d:3d:9b:6e:b3:ac:68:0f:
                    0a:cd:e0:46:e2:cb:56:93:8f:cd:99:0d:2a:5f:bc:
                    71:e2:b3:ed:f8:14:4f:92:3d:48:ec:dd:02:e7:82:
                    d5:e6:a3:d2:2f:e1:e2:01:e6:86:3c:f3:3c:bd:36:
                    90:2e:c3:59:2f:01:e6:f7:8b:ea:24:8e:fe:16:09:
                    68:5b:d8:a9:7e:8b:ae:27:0f:41:84:3f:26:1c:9b:
                    fc:65:cd:79:82:ed:69:45:98:6c:bf:e2:77:12:b9:
                    e1:4a:18:87:b9:fd:8d:ab:0a:8d:13:d5:e3:7b:37:
                    9d:0b:06:33:02:4e:8e:25:28:d4:4e:27:32:cd:ba:
                    6f:23:cb:e2:af:1d:7e:a3:66:15:cb:98:9c:52:e7:
                    1f:ab:c8:c9:fd:19:c1:c1:ed:b5:d9:8d:54:d7:e6:
                    21:36:e7:78:b4:c8:82:2b:12:a2:d9:5b:2a:68:41:
                    78:4c:45:fb:a4:24:7d:f0:7d:7e:a4:eb:11:9b:5f:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F6:20:C5:50:B0:8A:4E:08:77:9E:33:B8:BC:A7:6E:D1:06:A6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a1064df1-8f4b-3d96-8295-4988f4f21c03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e3:63:fd:36:65:58:40:a4:e6:88:ec:97:7c:c6:7d:1f:ef:
         24:c6:87:eb:0d:bd:f7:c2:d1:4a:e7:98:bb:51:bd:ed:ea:6b:
         97:c4:f5:5c:35:a5:0a:9d:0f:a8:d6:73:e3:7b:21:49:35:27:
         bc:aa:ff:36:c8:fd:83:b6:e9:aa:22:70:d5:70:86:5c:43:43:
         15:de:a3:1e:91:3b:c1:94:e9:8a:23:30:10:0c:af:3b:d8:ac:
         ec:00:a0:00:21:b4:af:fa:77:9a:82:68:65:3b:28:22:80:e1:
         84:61:01:e5:3d:4b:b3:bc:f9:e6:c5:93:ed:20:72:23:f8:f6:
         9f:7d:fa:e7:75:4e:ee:d4:5e:95:f9:dc:86:1e:b6:0d:a1:7c:
         06:53:55:25:8e:a7:19:a3:9b:df:e0:55:db:d9:74:89:90:05:
         bb:6b:39:36:eb:c6:bf:82:be:a1:0a:45:69:7f:ec:b8:fa:48:
         51:b0:81:12:d3:46:75:15:b4:29:e1:b9:3f:70:ba:ba:7f:1e:
         0e:f8:53:98:6e:0a:a8:b6:5f:fc:8b:70:73:6d:03:61:8a:06:
         02:db:a5:06:7e:d6:16:17:17:80:34:54:61:3d:87:9d:08:e4:
         f7:dc:5c:16:de:db:a9:86:88:2b:76:55:e9:91:d8:b0:d6:e9:
         d2:11:c3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----