Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b22a5668-8351-375e-902c-8145fafbe551.roa
File:                     b22a5668-8351-375e-902c-8145fafbe551.roa (raw, json)
Hash identifier:          kUtGz036+pgOqYGaVn4PwVyxG2+4HkWBvKa0Vd5vTzk=
Subject key identifier:   62:95:8D:BA:88:9C:BF:2C:AC:80:44:32:C4:7B:01:23:79:3C:39:EC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA12E7CA5DA83D309B2BD000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b22a5668-8351-375e-902c-8145fafbe551.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     15321
IP address blocks:        209.226.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:12:e7:ca:5d:a8:3d:30:9b:2b:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=555eab84-f5e9-405b-9df0-88981777d3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:f5:c6:8a:a0:6f:0a:c8:0f:d8:60:f3:10:
                    0e:7e:36:34:b7:54:bc:52:aa:61:2e:8c:ca:a2:08:
                    3a:9f:37:cd:df:f5:23:04:77:a3:99:ad:de:9c:20:
                    58:ce:f6:5f:e7:85:e8:93:7b:ca:92:5c:dd:7f:62:
                    b3:33:df:5f:53:77:22:25:24:3e:9a:d3:17:08:ee:
                    25:25:7b:0b:2d:37:43:c5:2a:8a:14:b8:2d:a5:e0:
                    55:4c:af:be:c1:47:fa:8e:6c:92:8a:80:85:01:50:
                    87:29:c2:ca:e9:65:7b:50:2b:55:8f:0b:72:6a:62:
                    8d:17:98:dd:67:58:16:c1:c5:ae:1d:d2:2e:da:64:
                    94:8c:4e:e1:ba:52:3f:67:a6:92:48:58:e5:2f:83:
                    ad:30:d2:4c:1a:b7:07:a7:18:e6:90:65:2c:5e:e3:
                    71:04:5c:9c:70:37:43:cb:59:4d:91:45:97:c9:40:
                    b7:99:57:bc:0c:59:25:fa:b2:48:ae:8a:82:4b:7b:
                    23:3d:51:f0:b3:ce:4f:aa:9f:60:d9:14:bf:5b:3e:
                    7c:68:7b:15:0e:21:14:54:24:ea:87:6c:6e:42:e0:
                    e5:fb:19:28:48:30:0f:4b:07:36:1e:51:d7:b6:95:
                    37:85:d7:28:63:ae:d2:87:82:ad:e2:0e:2a:bf:d0:
                    0f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:95:8D:BA:88:9C:BF:2C:AC:80:44:32:C4:7B:01:23:79:3C:39:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b22a5668-8351-375e-902c-8145fafbe551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:10:d2:6f:b9:0a:91:29:a6:59:92:90:76:a5:23:2a:e7:
         0e:ff:1e:75:be:bb:b7:bb:e9:fd:4d:bc:98:74:b8:c3:9e:aa:
         de:c5:88:14:9b:5d:b2:a5:32:31:6d:fe:64:9e:b8:d2:fe:df:
         99:4f:35:cb:4e:62:50:4c:6d:31:95:61:e3:ac:a1:85:c5:45:
         f1:60:44:a4:2f:68:34:16:82:7a:8c:57:32:3d:19:fd:d5:76:
         ce:bb:bf:d5:c9:a7:ef:47:31:8f:ba:de:ed:88:3d:db:21:4f:
         50:94:dd:06:e3:99:4c:b8:24:76:0a:c0:c7:18:94:cf:97:db:
         da:a1:a3:77:c2:bc:d6:50:a9:f3:63:11:35:d6:b1:de:a8:15:
         ab:3a:ca:7a:4b:13:a2:2c:41:70:02:69:f0:92:b0:56:48:40:
         77:01:c5:fa:5c:eb:99:c5:9f:fb:e8:3f:7b:0d:46:ab:22:37:
         a6:11:a4:c2:6d:8d:4a:32:73:ba:cb:87:8c:05:ad:79:41:5c:
         36:c2:3b:64:50:ea:e4:92:75:ba:40:40:87:22:82:f1:f0:b4:
         8f:a8:a2:46:56:93:a3:48:d5:f4:7f:ef:bd:f5:48:3e:00:1a:
         dc:82:0a:30:31:03:c1:29:39:0d:b8:da:4c:8a:17:18:8f:92:
         26:e8:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----