Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6960450-d8ae-3e1b-8adc-3315c3172d7e.roa
File:                     b6960450-d8ae-3e1b-8adc-3315c3172d7e.roa (raw, json)
Hash identifier:          03+WHNaQ0MuVw1dKXn8Rqc045ftD5yOLEPbcavrGNvo=
Subject key identifier:   C7:40:E4:AC:39:1D:18:8F:35:CC:C4:9D:D4:17:76:BD:CD:1A:10:1A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA11465ED136B04D0C73D760
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6960450-d8ae-3e1b-8adc-3315c3172d7e.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     40124
IP address blocks:        67.70.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:46:5e:d1:36:b0:4d:0c:73:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=f3b11fc3-d2da-467d-9d19-7a51692ab877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:4a:e7:cd:06:aa:03:d7:c7:1e:f5:5a:59:
                    04:a3:18:83:60:17:97:a8:83:8e:51:b1:11:0f:ba:
                    04:f6:18:70:d0:13:fb:1b:1a:9f:bf:73:d9:7d:c6:
                    16:68:da:44:45:58:06:18:05:a6:69:d3:03:7a:65:
                    3a:2b:dd:2b:1b:48:a3:c9:e0:dd:29:5b:93:61:35:
                    a0:1f:04:69:4a:d8:8b:d9:76:99:a4:78:de:c8:1e:
                    24:10:28:5b:6a:a4:86:6f:b5:36:e9:91:f3:7b:97:
                    e6:c3:03:4d:b6:c6:22:f9:62:89:e0:9c:cb:8a:41:
                    52:7a:e3:5b:43:1b:ce:1d:5c:d0:8b:9c:8b:6d:de:
                    b5:d7:e2:46:1f:3f:83:36:4f:a1:c7:bc:7a:6e:81:
                    b9:aa:3f:9a:99:29:c1:04:7d:88:e3:f1:03:b7:cb:
                    b1:97:40:4e:37:fa:36:06:a4:c5:0b:c1:7f:22:70:
                    ca:24:a1:4d:1a:31:81:2e:fa:b9:2e:69:1b:57:fd:
                    ff:73:ac:64:2e:35:c3:5f:16:f1:be:c0:7e:40:f2:
                    a5:ce:83:d8:34:cd:c9:51:6b:61:f9:a9:06:a7:b5:
                    f1:64:cc:62:8c:35:e2:fc:23:ed:20:85:43:1d:5d:
                    73:94:99:56:eb:8d:a8:6e:a0:e1:c7:b6:12:f9:88:
                    d0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:40:E4:AC:39:1D:18:8F:35:CC:C4:9D:D4:17:76:BD:CD:1A:10:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b6960450-d8ae-3e1b-8adc-3315c3172d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.70.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0d:90:69:5f:93:fc:3d:59:cf:b6:32:72:b2:a4:00:5c:c8:
         06:08:07:8f:ef:89:c6:61:c1:8c:6d:92:ea:8c:f1:90:b4:56:
         fb:e4:8d:fd:bd:21:67:7e:86:bd:7d:f7:61:1c:cb:c4:e5:c1:
         7c:05:d8:ac:1b:c4:ad:e7:64:51:1b:6b:33:dd:78:c4:0c:9c:
         0f:10:9a:7b:84:4d:a5:8c:49:fd:c3:71:56:e2:bd:16:08:29:
         c4:27:5d:5f:53:2d:2e:b6:c4:e4:64:3e:46:b5:d9:c1:be:16:
         7d:16:87:ee:31:3c:5f:f8:7e:42:38:b0:32:5d:e9:3c:a6:35:
         69:f7:df:e5:85:aa:bd:75:9a:f5:fc:44:9d:ef:3d:8f:c8:85:
         f2:2e:7c:db:26:e2:83:fc:ef:e9:29:04:b8:70:95:83:2b:67:
         86:ea:a3:bf:7d:be:72:c7:fc:28:8f:3f:59:77:0c:54:0b:3f:
         1d:a6:3c:40:a9:2a:09:a9:cf:47:ab:1d:a7:f9:f7:40:bc:51:
         e3:5a:9e:60:46:99:89:fa:1f:52:6f:2a:cb:45:72:0f:de:59:
         6b:5b:3b:4d:ad:d6:5c:2d:f0:6d:b5:f1:07:01:c8:de:f7:30:
         64:39:20:39:b7:a0:18:af:ff:69:a8:2e:79:75:cc:e4:57:6a:
         99:a0:c0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----