Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a65d816b-b20a-3e61-98a2-4537b169f86e.roa
File:                     a65d816b-b20a-3e61-98a2-4537b169f86e.roa (raw, json)
Hash identifier:          U9g1jIGBZlyxu1+DhDt6srFmI8lc2JjpNLOoWosxBaI=
Subject key identifier:   F6:DC:15:AC:FA:F5:FA:2D:0F:8C:40:C3:83:82:97:6B:14:66:45:0B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE4724FB4B2181B288A4840
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a65d816b-b20a-3e61-98a2-4537b169f86e.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        76.64.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:72:4f:b4:b2:18:1b:28:8a:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=6ab66b1b-bd8e-49e9-886c-f8b87ac9f20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:3c:ab:43:96:86:22:67:75:dc:9c:8b:88:
                    b2:f4:d2:86:66:24:90:25:e8:33:16:3c:e8:70:6d:
                    63:5d:20:52:b7:d0:52:57:7d:dd:1a:1d:e7:cc:8c:
                    74:11:1e:cb:17:a5:ab:1e:02:c5:df:d2:ac:57:70:
                    47:b0:fd:3c:fc:9c:12:3d:80:40:12:76:5e:d0:5b:
                    2e:60:0e:c3:bd:62:35:a2:a3:7b:3b:dc:63:87:01:
                    48:28:1e:95:cd:49:f5:ce:21:e1:4a:db:c8:81:0f:
                    31:ab:b7:84:24:55:a3:4f:51:0f:b9:c5:e8:f4:b7:
                    31:ab:2f:21:27:eb:ba:5e:ef:49:a0:fa:0d:c0:60:
                    95:63:48:15:1c:24:3d:69:c6:c3:f7:1d:bd:3c:3b:
                    83:e5:36:13:e9:8d:3c:99:49:ab:1b:f9:23:44:e8:
                    5d:cb:89:95:a3:51:0b:17:02:15:9d:91:51:cf:ff:
                    f6:47:95:29:0f:8c:63:d1:94:e4:f9:69:26:0b:3b:
                    df:5b:e2:3d:2f:e8:fb:67:6d:bc:aa:b1:a4:44:dc:
                    88:d1:f8:fa:ad:06:b4:3c:8e:00:b3:23:ef:2e:6b:
                    b6:1a:b9:af:c5:71:fb:71:e4:88:78:4d:a8:92:f6:
                    c0:7b:8c:9f:78:a3:de:6b:fa:ce:f9:3d:16:45:29:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DC:15:AC:FA:F5:FA:2D:0F:8C:40:C3:83:82:97:6B:14:66:45:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a65d816b-b20a-3e61-98a2-4537b169f86e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.64.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bf:38:76:65:e0:58:81:22:4b:fb:92:06:70:d2:71:f4:5d:
         0b:ca:d3:a4:e0:43:a8:4e:97:aa:bf:95:1c:d7:27:ea:14:30:
         80:ad:14:54:c2:42:22:c8:15:2a:78:71:47:c2:75:b4:41:5e:
         ed:bb:9e:8d:75:7e:9f:61:65:b9:d8:05:13:b1:a5:78:bb:dc:
         44:11:69:41:93:54:50:53:ee:aa:9e:3c:ed:62:53:48:b4:3a:
         51:c7:3d:04:aa:48:c1:a3:a1:87:c9:ed:cc:12:f9:6b:dd:26:
         46:d7:72:91:a1:f9:78:c3:02:ad:72:5a:f6:25:96:5c:54:31:
         95:77:bb:6b:04:61:8a:bf:71:28:c4:2d:a3:23:7e:f2:eb:3c:
         06:95:c8:39:74:eb:e7:07:da:37:ee:90:77:ad:97:af:3d:34:
         4d:62:9c:c3:36:a4:64:5f:fe:a6:a7:64:68:2c:90:f6:bb:a0:
         a3:93:d3:d5:53:6f:1b:bc:11:13:96:91:96:83:c8:d3:1f:a6:
         29:ce:ef:12:dc:98:93:e8:6d:be:de:d8:17:55:7c:69:ad:25:
         e2:07:18:5b:f2:96:e2:5a:25:56:52:60:4b:0f:65:a0:f2:6b:
         4f:5d:ec:95:28:36:64:51:a9:e4:69:d0:82:fd:2b:a2:83:90:
         0a:c8:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----