Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a47419c3-4a54-3595-b9fd-ccac299a74fb.roa
File:                     a47419c3-4a54-3595-b9fd-ccac299a74fb.roa (raw, json)
Hash identifier:          VrR8Ag8+ZfOqYxTlF2q2EUBYY0nLs7zZ+cGRLu/RXbc=
Subject key identifier:   31:81:BC:FE:14:9F:76:65:EC:36:78:30:58:81:5C:E2:C7:1A:0C:05
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D28E3CEC513DC19DA3747C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a47419c3-4a54-3595-b9fd-ccac299a74fb.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        70.53.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:28:e3:ce:c5:13:dc:19:da:37:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=0ad733de-eca6-4b3d-bb40-7b108330c39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d5:b0:08:8a:7d:cb:f5:77:ea:6a:db:05:12:
                    ca:b9:96:3b:2d:8e:95:7c:e8:2b:2e:2b:a9:7c:1b:
                    f7:3d:09:26:8b:bb:5c:30:dc:46:10:b8:23:93:c2:
                    82:41:c5:a1:f3:2a:64:d0:01:af:e7:e5:3b:cc:9d:
                    26:53:46:a2:8c:c8:08:54:76:f7:7b:4c:33:6b:2e:
                    15:d2:70:13:62:50:0f:ef:8a:56:bd:e5:59:d9:fe:
                    7c:09:96:13:e1:c5:6f:f8:aa:69:d4:ba:81:13:1a:
                    93:61:30:45:bf:e4:20:7a:7b:c9:28:cb:22:ca:c4:
                    6c:88:47:6e:6a:14:f1:96:bb:ba:e8:a8:08:d4:f1:
                    1e:bb:7a:3e:c2:0d:a4:8c:f9:6c:c7:be:10:11:d9:
                    bc:f1:a8:15:80:6d:9d:10:f3:55:b1:11:13:50:d0:
                    42:4d:c4:3c:b0:d6:7a:60:5b:62:05:b1:c8:3e:67:
                    42:87:f1:27:ca:4d:e9:32:e6:2f:de:17:d2:a0:e2:
                    fb:9d:0d:5e:fd:93:3f:9b:e9:0b:e5:73:39:76:01:
                    99:42:ec:8c:d2:49:a5:e7:39:f3:96:7c:2b:bc:b9:
                    f6:0f:09:a6:ac:4b:d5:e4:01:42:22:96:0b:93:22:
                    3d:e5:82:43:c7:28:1b:78:ce:9b:b0:79:14:1e:41:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:81:BC:FE:14:9F:76:65:EC:36:78:30:58:81:5C:E2:C7:1A:0C:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a47419c3-4a54-3595-b9fd-ccac299a74fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:02:ea:03:e5:95:8a:14:4d:87:e9:99:00:90:2b:eb:f8:66:
         d7:99:9a:43:65:67:90:e1:37:98:0b:fa:05:7a:f9:1b:f8:4e:
         5e:0f:0c:24:dc:7d:9d:8f:06:88:e6:4f:b0:19:b0:ea:94:61:
         b4:6c:b4:e3:94:e7:b0:5d:8f:7a:2f:e4:23:f5:2b:ba:eb:8b:
         4c:38:2e:62:13:74:ea:6b:6c:21:c1:7c:a7:2a:95:dc:eb:30:
         e3:9c:c2:e3:b3:30:d4:ce:6e:1f:d0:0a:70:3a:4b:e9:51:63:
         93:df:32:38:75:6d:42:fb:c9:ae:5a:90:92:70:12:43:a9:2c:
         72:ed:33:00:71:5d:ff:4c:58:64:26:ac:78:76:57:04:85:46:
         5d:85:56:f3:95:55:d1:4a:28:b2:48:41:4f:ed:b4:1f:33:5f:
         06:ea:f1:9c:41:88:b4:f1:2b:d6:72:48:70:4d:ef:fd:e3:4e:
         57:0c:6d:c1:09:c3:af:39:6d:89:c7:4b:8f:13:ad:9a:0a:18:
         3f:47:26:1a:c7:5e:db:bf:96:77:67:67:f8:e9:8a:36:24:48:
         e6:55:f4:ff:13:e5:fa:ec:53:05:31:83:09:75:c8:64:14:35:
         6d:28:c4:25:8c:d6:3f:10:3c:38:3a:6e:92:3c:c2:91:16:d4:
         6a:fe:c3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----