Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0610fbc-d3b9-3496-80c7-8d9c421105cc.roa
File:                     b0610fbc-d3b9-3496-80c7-8d9c421105cc.roa (raw, json)
Hash identifier:          U39XBJ9SziPBCC6uOzJ+pqabOPOQk+Z08s5yCLi8Fj0=
Subject key identifier:   00:B1:7B:BF:49:C3:EB:9F:CD:3E:1B:37:8D:19:F9:84:E3:6F:00:BC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF75DB83B70F7881F261F880
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0610fbc-d3b9-3496-80c7-8d9c421105cc.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     40575
IP address blocks:        209.128.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:db:83:b7:0f:78:81:f2:61:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=3b178da2-d4e6-4288-872d-5d6a9f5db0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0f:1a:0b:a3:a3:2a:c3:05:e1:f3:82:06:21:
                    29:84:da:94:0b:0d:40:b7:48:04:8a:af:e5:dc:12:
                    ab:9a:fd:92:52:b7:62:1a:19:2f:76:6e:18:3c:9f:
                    32:0a:c9:ce:1c:3d:05:a3:76:4f:dd:46:12:f7:d6:
                    a1:f9:c2:76:cf:a2:48:6d:47:56:5d:5b:44:0d:30:
                    40:4d:52:48:be:69:46:33:3c:77:5c:6e:19:f6:2c:
                    c1:5a:10:f6:0e:e4:fb:20:4d:06:6f:51:85:e3:21:
                    32:14:4b:78:7e:b0:be:b4:ad:29:96:8c:69:90:1e:
                    1f:bf:33:85:99:d2:f3:7c:95:6f:a0:59:97:e3:ff:
                    16:2a:bb:f4:47:a1:27:d1:16:4c:6a:07:ad:31:51:
                    3f:1c:ae:dc:69:1a:ea:35:c4:5e:28:ae:08:f4:67:
                    a2:8d:af:1f:bb:3a:04:c1:91:e8:e1:30:e6:d2:8d:
                    e2:08:9b:b9:23:34:8c:c9:4f:04:29:06:d4:75:fa:
                    05:16:77:34:2e:6a:a5:e9:55:fc:35:59:7e:40:c8:
                    d5:e9:be:ff:a5:19:7e:ec:f2:aa:78:42:5b:16:a1:
                    43:7a:64:72:48:5d:f1:a4:79:a4:30:0d:8a:96:f2:
                    b9:7b:ea:fb:0f:52:b1:49:38:4c:2f:06:ee:d9:4d:
                    87:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B1:7B:BF:49:C3:EB:9F:CD:3E:1B:37:8D:19:F9:84:E3:6F:00:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b0610fbc-d3b9-3496-80c7-8d9c421105cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.128.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:49:b4:4f:e3:d1:d9:61:a9:90:28:94:54:45:eb:55:5b:69:
         63:eb:07:bc:95:0a:b4:8c:24:6e:2c:96:a7:cb:cf:f5:e5:80:
         f4:4e:d7:f5:f6:99:df:b6:cc:4d:24:7d:d5:9d:b8:5c:44:ed:
         f5:f1:ec:24:54:84:ad:2d:e3:d6:fc:3e:ff:c2:eb:b4:9b:29:
         ee:94:75:79:68:41:d2:47:d5:a6:3d:9d:d4:5c:44:1f:50:86:
         30:3f:26:de:51:bd:e3:1a:32:b2:d6:c7:24:02:d9:e3:63:99:
         26:e6:aa:fa:ab:8a:5b:e3:2b:fc:a5:db:dc:71:64:fb:d4:87:
         eb:b6:b5:6d:e0:08:1f:16:9b:22:57:de:14:94:50:52:d0:3e:
         2a:b4:d4:24:1a:ab:cd:a3:4d:8e:e1:da:d8:60:50:c5:91:84:
         90:ba:30:5f:35:ac:82:69:32:d9:76:9e:53:c0:b4:88:1c:ca:
         a3:98:a2:9d:a0:cf:e5:50:fa:e6:98:d4:14:2b:1a:3a:be:ac:
         2d:84:db:bd:9c:55:c0:23:5c:72:08:57:97:f9:0e:15:c0:7f:
         04:82:fe:ff:68:f0:0a:77:70:0a:3a:96:8b:fb:1d:41:66:1e:
         32:47:8b:fb:2f:a7:d2:c9:f2:46:62:4f:52:11:cc:b2:9f:b4:
         27:39:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----