Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8daa86b-e0d4-31d3-aad0-3b2ca35903c0.roa
File:                     b8daa86b-e0d4-31d3-aad0-3b2ca35903c0.roa (raw, json)
Hash identifier:          SgW6HqvkLyKS5BaFhYjrIEnphlNq+or2NHAGMQ5ti9Y=
Subject key identifier:   C1:CC:AC:61:66:ED:A8:F3:88:5C:DE:FB:8F:B4:61:93:C3:9E:98:99
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285842AA113CAC8C88068BFC525A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8daa86b-e0d4-31d3-aad0-3b2ca35903c0.roa
Signing time:             Mon 24 Jul 2023 12:00:00 +0000
ROA not before:           Mon 24 Jul 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        67.69.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:aa:11:3c:ac:8c:88:06:8b:fc:52:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul 24 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=c93f049e-ce39-4d6c-926c-e30fb3d2180e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:fb:1d:5c:88:85:81:62:2c:cb:25:d3:a0:
                    c5:00:c6:3b:41:59:c3:db:c5:0c:ff:5c:e6:13:a9:
                    ac:bf:98:36:d3:31:13:41:4d:24:55:94:d1:e5:07:
                    dc:c9:d0:eb:0e:75:f5:ba:b0:7f:4b:0f:23:b8:8d:
                    d6:00:2a:9f:08:c6:fb:ad:6d:92:61:29:54:92:b6:
                    a8:e7:60:4c:de:4c:56:b2:d3:67:a6:dc:1b:5a:db:
                    12:28:f8:36:0f:1f:d6:21:c6:5f:e6:2e:2c:79:09:
                    bf:76:0e:cc:61:71:11:57:18:f3:91:68:7a:36:f2:
                    9f:57:7a:f0:14:04:23:ec:c3:a6:68:6b:8c:5b:ed:
                    41:24:df:47:13:b1:9b:3a:93:6d:b4:90:e6:00:7d:
                    27:40:34:45:a3:3e:29:c0:e1:db:e4:ce:47:23:eb:
                    35:1e:09:b2:7a:2d:b8:a6:bc:02:3e:98:e3:33:66:
                    41:c4:73:b3:f6:bf:71:6c:7f:e5:5e:c6:b5:0b:dd:
                    f5:f9:8d:42:48:08:6f:b5:9c:ee:ea:b1:f6:1b:b9:
                    44:38:7a:91:82:20:e1:45:c8:6e:59:f8:6b:7c:52:
                    d9:da:c3:f1:53:f7:2a:a3:82:87:16:b7:f0:b0:ba:
                    cf:f2:f9:09:32:a7:db:06:1e:34:34:45:69:83:5b:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CC:AC:61:66:ED:A8:F3:88:5C:DE:FB:8F:B4:61:93:C3:9E:98:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b8daa86b-e0d4-31d3-aad0-3b2ca35903c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.69.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ed:24:fe:55:87:a3:95:a6:9f:f8:2f:88:3e:b7:47:be:08:
         e2:4b:6a:5b:b7:d6:fd:fe:11:a8:e0:6a:0a:fa:56:48:68:e4:
         d8:23:b2:56:2f:8c:7c:1f:45:90:35:9f:b0:fa:1a:47:c5:b6:
         f6:c6:13:07:1e:13:a1:d6:d1:1e:27:aa:9c:ce:5e:5e:1f:9b:
         0e:02:bc:28:f1:73:db:af:fa:24:5a:e5:c5:7c:b6:44:88:a6:
         bb:b9:e7:97:0c:9c:92:79:cc:3b:73:21:ff:3e:71:95:a5:bb:
         eb:1b:ea:83:d4:43:75:f3:12:cb:59:67:4b:97:c8:cb:fc:ca:
         82:ca:f1:af:c9:14:de:8a:93:1b:9e:dc:85:c1:28:59:73:8c:
         85:4c:23:65:db:cd:fe:7e:55:98:92:c2:1d:ba:e9:2c:6c:eb:
         26:6f:67:c9:d9:ca:e8:45:d8:8b:5f:1d:35:52:19:f2:eb:92:
         93:e5:ca:72:7c:77:c6:b1:69:ea:7b:0d:3d:59:a6:60:d1:7e:
         4d:9e:4f:9e:ed:61:e1:55:14:71:5a:2f:7d:51:62:84:a4:55:
         20:ef:6c:20:fb:1d:13:ad:db:97:d8:e4:bf:c3:86:e9:c4:38:
         73:dc:9d:5d:f5:9a:da:18:20:32:7c:e2:f6:b5:24:6d:c2:b0:
         17:8f:58:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----