Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6704d03-b7d1-3d45-a7b9-e0bb9862578b.roa
File:                     a6704d03-b7d1-3d45-a7b9-e0bb9862578b.roa (raw, json)
Hash identifier:          6X805JBu5SRgLn8C3v5wQedudTqSWuTRlf6pwpFr51g=
Subject key identifier:   C7:AC:D5:42:48:93:DA:F9:0D:12:A1:6C:1F:C9:E2:4B:74:0C:5A:09
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D28C3C07D529D3B4EE03980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6704d03-b7d1-3d45-a7b9-e0bb9862578b.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        70.24.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:28:c3:c0:7d:52:9d:3b:4e:e0:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=779e0122-1f39-4856-a31c-42ba5ad5f47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:db:97:58:8e:14:69:79:7b:ba:d1:de:6a:fd:
                    78:b2:84:ac:6f:f6:23:2d:d3:34:98:5c:de:3a:a7:
                    7b:1e:79:17:fc:a2:eb:60:f9:12:ac:8e:b7:82:66:
                    38:dd:72:77:02:ea:cf:24:fa:e5:5c:22:7f:56:a7:
                    94:cf:61:be:48:4a:2c:17:f7:46:90:26:45:de:d9:
                    2a:f2:12:40:6e:b8:61:3d:a9:55:81:88:c1:0a:7c:
                    5b:b9:26:9d:cd:79:76:56:9c:88:34:c7:ff:f7:a7:
                    46:58:c6:4e:fe:3a:ab:37:ba:eb:88:d2:13:b0:4e:
                    9b:b3:db:20:46:cc:78:fb:df:5f:1b:f3:88:ae:8d:
                    c7:ca:09:da:2c:29:fe:65:de:39:b5:69:0e:7c:d5:
                    69:26:bc:7e:fd:1c:80:cc:f2:b9:3a:6e:28:73:99:
                    49:bd:3b:75:81:71:3e:da:18:00:21:63:59:58:fb:
                    07:a7:ff:c2:1a:58:71:3d:b5:03:4e:04:6b:96:94:
                    60:96:7f:c3:e0:1e:6f:89:08:21:dd:dc:4f:4b:18:
                    0f:16:48:10:66:7e:b2:08:0e:85:c4:26:ed:3e:ba:
                    a9:46:f9:cd:33:89:44:94:09:6a:16:7b:f6:51:78:
                    8f:f5:79:d3:ab:32:01:e0:80:f2:27:19:ad:51:5a:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:AC:D5:42:48:93:DA:F9:0D:12:A1:6C:1F:C9:E2:4B:74:0C:5A:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a6704d03-b7d1-3d45-a7b9-e0bb9862578b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.24.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f2:c1:eb:8f:98:89:bf:7e:5c:4b:fa:81:16:2e:68:11:29:
         88:df:8e:93:7b:f5:3f:e3:75:73:b9:aa:eb:2c:e3:7a:85:d9:
         8f:73:00:ff:9b:0b:b3:b1:3d:5a:1e:af:b4:d0:e4:40:37:aa:
         58:84:9b:53:2d:ab:1c:73:f6:77:81:9b:a6:bf:38:c5:dc:b4:
         62:9f:00:2d:9c:d3:da:0e:30:f5:9f:c2:a8:a1:ab:6c:41:c1:
         26:e2:49:a2:44:9d:f0:d1:82:52:15:bd:da:3b:2f:04:18:2d:
         82:f2:75:b3:3e:b4:93:87:73:6b:45:9b:9b:05:4d:8a:fc:9d:
         d3:bd:5a:b4:bc:8c:28:38:40:0b:df:92:36:b7:ac:c4:03:22:
         f8:c9:8b:0c:77:5c:e8:4a:b3:e2:80:c0:36:bb:dd:6c:3b:99:
         13:d5:78:4b:cb:72:1d:4a:e3:4c:7f:9e:a6:b7:04:eb:82:bc:
         e5:1a:96:c1:6d:6f:00:f5:64:c4:52:a8:25:a9:4d:1c:23:09:
         e0:2b:87:f6:3d:b1:a5:c2:05:88:43:2c:bd:0f:4b:f8:1d:35:
         5a:8d:4d:42:5f:42:bf:50:b3:8d:6b:f1:d1:39:7a:62:93:18:
         64:c2:62:02:c9:ec:a5:49:02:91:74:b6:57:b0:ec:03:17:d9:
         ac:7b:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----