Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a5ab4c8d-b064-305f-9a32-448bc551e48e.roa
File:                     a5ab4c8d-b064-305f-9a32-448bc551e48e.roa (raw, json)
Hash identifier:          ppDsH4dFDmuGWNb6LHXvvIw2/ciJ6myUzpiwMM7Jmtg=
Subject key identifier:   F7:63:1E:D6:5C:3A:3D:A7:73:4F:E2:22:F2:58:71:3D:94:8E:39:31
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF762DEE4D47B4C6E9136840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a5ab4c8d-b064-305f-9a32-448bc551e48e.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     12132
IP address blocks:        216.208.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:2d:ee:4d:47:b4:c6:e9:13:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=1e96a7c3-a57f-4620-add0-d06f3ae8f011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:85:65:7a:4d:ce:4f:ba:07:95:a1:7c:5a:
                    77:35:a0:b6:85:42:57:b1:78:b7:68:52:91:f2:67:
                    49:7f:3f:8a:9b:fd:a5:fb:6f:b6:6e:ba:88:a8:e7:
                    f2:ba:a2:12:65:77:c4:25:df:65:60:d7:ef:13:84:
                    e7:cc:5c:9b:3b:d7:a8:db:50:b6:a8:8b:aa:32:dd:
                    9a:45:15:f4:a4:23:11:c7:f4:ad:ca:38:c6:0e:89:
                    8f:47:ed:3c:32:65:41:af:d5:06:39:8b:1a:dd:fe:
                    f8:e9:cb:8b:1a:fb:a7:23:b3:d2:78:50:6f:b7:82:
                    2e:8b:b7:bd:15:73:05:b6:68:9b:5a:d8:9a:c8:06:
                    10:3a:15:b0:35:31:39:e5:02:ce:cc:30:58:74:5d:
                    a8:7b:5c:d4:14:3f:2b:33:6b:93:5b:64:96:1f:3a:
                    9f:25:50:34:c3:83:3a:73:f6:ba:6a:bb:47:e8:3d:
                    3e:be:43:08:90:10:4a:a5:38:9a:f4:07:72:ed:6a:
                    f2:b1:61:0e:c4:bc:ce:5f:f9:9c:b0:8a:3e:80:26:
                    84:c2:89:fe:d5:77:80:bb:4f:1d:3e:8f:04:05:35:
                    d3:71:df:1d:57:54:f7:94:d8:56:cc:61:d1:ad:63:
                    a2:e7:00:d1:6a:2b:16:a8:31:df:ca:99:9f:9e:0a:
                    88:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:63:1E:D6:5C:3A:3D:A7:73:4F:E2:22:F2:58:71:3D:94:8E:39:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a5ab4c8d-b064-305f-9a32-448bc551e48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:90:11:d5:17:32:99:98:b9:c6:c0:68:97:b1:89:0d:a4:da:
         e8:3f:a9:1f:4e:ff:17:32:7c:6e:c1:b8:ba:67:ce:4c:d7:58:
         3b:c5:a0:b4:03:d3:7d:f5:58:49:6a:0a:6f:94:db:45:59:f8:
         cc:c8:42:4e:c1:14:c2:03:89:1c:dc:6b:3c:d8:c6:5f:42:b9:
         75:db:11:2b:4d:72:34:b0:a7:ee:62:7b:aa:a6:0d:32:45:6e:
         80:27:ea:4a:f1:67:fc:0c:4a:59:24:ad:4b:58:73:d6:c2:32:
         28:f9:39:88:ee:9c:7e:1b:25:bd:f1:49:69:5d:3c:0f:ff:83:
         42:a0:72:bf:11:5a:01:c0:86:31:7a:ad:4a:80:76:8f:1b:a0:
         42:86:e2:7b:e1:fa:ec:5e:90:8d:97:1a:ca:37:b6:c1:89:6e:
         b2:aa:71:24:07:dc:1a:99:1b:4b:ff:bf:09:97:b5:00:8e:49:
         0f:1f:60:b6:d7:bc:d4:b6:52:82:d9:2f:92:62:87:5b:9c:1a:
         f7:39:7d:c0:58:31:f7:65:83:53:f5:fb:ac:e8:0d:6e:10:58:
         fd:70:9c:57:62:37:0d:7f:f6:62:d1:30:81:67:39:95:d1:27:
         a0:7d:2b:6a:40:e1:33:45:2d:ab:6b:92:92:90:b3:9e:c2:0b:
         a0:d9:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----