Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a5e8349e-23a2-3404-99e4-5c53dcbe64c8.roa
File:                     a5e8349e-23a2-3404-99e4-5c53dcbe64c8.roa (raw, json)
Hash identifier:          JmaKmSqvDx6REjPkIv8DYvdoZxCJul8cmLH1h+zLKr4=
Subject key identifier:   8D:60:12:04:A7:98:E4:F6:A6:7B:12:FC:C3:C4:1B:08:8F:AA:47:B3
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D287FD5206E4DE58A786180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a5e8349e-23a2-3404-99e4-5c53dcbe64c8.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     855
IP address blocks:        47.54.2.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:28:7f:d5:20:6e:4d:e5:8a:78:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=67eeaa5c-098b-4473-95e9-ac481f8b661a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ba:16:18:29:c9:ab:23:d0:6a:11:21:f4:ae:
                    35:a4:ab:fd:24:9a:d7:94:1a:7d:5c:7e:92:2d:21:
                    59:39:1f:3d:dd:5c:9b:a4:fb:52:78:2b:be:23:05:
                    76:21:e1:d7:45:45:b5:bc:4f:f9:cd:78:5d:86:86:
                    bb:63:0b:ad:30:76:b9:dd:9d:29:c3:b8:48:40:42:
                    01:bb:24:14:09:e9:60:1c:7d:dd:43:1d:43:d2:6b:
                    2d:10:6c:2b:8f:0c:f9:4b:f8:69:a8:5b:99:0e:b4:
                    5a:15:10:4e:26:64:f1:41:1b:0b:86:a4:17:f2:70:
                    6d:af:6c:72:64:98:f8:80:e6:fc:2b:3a:37:a7:e8:
                    e0:29:20:3c:21:a3:3d:33:a7:e0:cb:7e:32:98:2d:
                    e1:f8:87:68:af:a0:c0:8e:bc:f4:94:ed:b9:a8:d2:
                    eb:ee:45:ca:bb:a6:f9:21:6b:5a:64:31:4d:2a:32:
                    06:3b:ac:84:d0:75:5f:af:ad:2e:97:5c:c7:a3:52:
                    fb:07:a9:11:f4:c7:3d:a6:99:cf:a3:25:3f:97:93:
                    e7:86:ce:69:e7:eb:ba:c4:29:8e:7a:01:f5:a8:bd:
                    fb:d0:a5:1e:0a:84:21:33:fa:e4:fd:e0:9c:f9:40:
                    9b:27:8a:cd:9e:35:12:bb:a8:67:42:8b:12:96:16:
                    e9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:60:12:04:A7:98:E4:F6:A6:7B:12:FC:C3:C4:1B:08:8F:AA:47:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a5e8349e-23a2-3404-99e4-5c53dcbe64c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.54.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:84:a3:8d:86:5f:be:13:e0:8d:0a:76:70:ec:4f:22:f4:d4:
         7e:91:99:a5:ea:81:ab:8e:c3:03:66:53:11:d1:58:aa:7a:74:
         9c:f9:1e:af:de:05:fe:2f:63:90:c3:fc:b8:5a:ee:d5:54:b9:
         67:ec:e0:43:c0:83:40:5b:e0:37:77:64:0b:40:c3:69:b9:a7:
         ec:e9:42:14:07:93:c6:14:b9:4c:19:dc:8d:86:53:d6:20:5f:
         78:f1:10:1b:30:ce:f7:32:f4:c5:e8:d8:b9:03:62:c7:98:b5:
         db:74:6d:e3:a5:18:6a:e1:21:29:fe:51:c8:ff:ab:09:54:95:
         8e:75:a5:72:74:1e:a6:5c:74:67:ab:86:fd:99:9c:11:ce:e1:
         ab:9d:f1:15:93:f3:d0:2c:8e:99:02:fb:13:b4:9f:f1:7d:1a:
         14:3f:d3:e3:4d:ba:8b:9f:87:7a:5d:0c:ee:0c:ad:c2:10:4e:
         d1:7b:5e:26:e1:90:5f:ea:29:92:d4:f8:31:a2:44:52:92:42:
         35:d5:f8:61:dd:9b:2c:e5:ab:97:64:e5:9b:e3:46:f9:84:78:
         6f:d1:c8:31:e9:47:9e:f9:e2:d4:4c:06:e5:85:43:f2:6a:06:
         41:cd:fb:e9:bd:47:f9:2e:79:58:39:87:9a:d7:18:92:29:8c:
         7a:b6:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----