Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba8e7f8b-dc73-3805-b78c-11da82637e69.roa
File:                     ba8e7f8b-dc73-3805-b78c-11da82637e69.roa (raw, json)
Hash identifier:          e8yBwz5kns2XvSarwupSQBe0WQQO073Pi0HILmZmb10=
Subject key identifier:   CB:00:DA:F4:DD:5D:EF:49:73:F2:89:07:37:7F:DC:85:17:4C:77:59
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF750B990266B123BA611300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba8e7f8b-dc73-3805-b78c-11da82637e69.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        70.28.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:0b:99:02:66:b1:23:ba:61:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=4b3c1b32-a2e5-4d6e-9b2f-2288fb101bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:22:e9:0d:c1:31:72:c9:57:73:0d:d3:63:7f:
                    aa:ff:44:00:07:01:52:cb:ab:80:38:d0:03:73:ae:
                    e8:04:d6:1c:c0:3f:35:15:42:b8:9f:75:d4:b4:6c:
                    6b:ae:98:de:6f:fa:b3:c3:76:11:d3:a1:d9:fe:cf:
                    f1:55:13:42:9a:48:3d:4e:18:7d:3c:19:7e:f3:28:
                    af:2d:f0:b3:8e:e0:d7:06:62:70:ed:32:7f:a6:70:
                    45:42:bc:c7:4c:a5:37:f3:30:2a:ba:b3:5a:ff:43:
                    2e:ba:09:7e:79:d6:46:95:a1:6d:78:b0:82:22:43:
                    e1:84:27:a6:6b:23:40:84:da:41:38:fc:c7:8b:c8:
                    df:a7:59:50:26:8b:ac:32:f4:07:73:3c:2b:42:e7:
                    41:8c:6f:4e:49:75:1a:60:c9:ab:31:38:47:d6:a2:
                    cf:97:2e:4f:ba:bf:f4:e6:74:91:a7:36:6a:8c:75:
                    1f:52:d9:ad:52:aa:ad:0c:25:06:c9:4c:5b:b8:51:
                    2d:54:6a:cd:6c:8f:7e:aa:9c:55:66:32:88:c9:a0:
                    e4:56:c3:f5:df:5a:ae:40:93:de:81:bd:64:32:7d:
                    99:92:de:bc:1c:42:19:0e:29:18:05:81:e6:19:b1:
                    ec:0b:e8:cc:03:61:39:e9:e6:bd:99:6f:af:1f:f8:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:00:DA:F4:DD:5D:EF:49:73:F2:89:07:37:7F:DC:85:17:4C:77:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ba8e7f8b-dc73-3805-b78c-11da82637e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:e0:3b:57:b7:9f:e8:79:79:a4:60:9e:be:a3:8d:41:3c:
         a5:13:84:4a:3d:0b:42:39:c2:4d:0b:3b:3d:cc:a8:4d:b4:aa:
         72:af:d6:dc:c3:ad:2b:92:c3:c8:44:b4:4a:66:1a:33:f7:f2:
         8a:f5:23:80:95:da:3c:04:4b:c4:71:dd:65:dc:bc:a6:d8:94:
         54:4b:4c:b2:a6:c0:90:a9:85:40:a9:b7:26:1e:5b:16:11:86:
         b1:fa:92:52:a3:21:09:2d:8d:4b:ac:1b:56:20:82:4a:90:cb:
         3e:01:3e:10:d8:75:5b:ec:28:04:95:71:c3:82:d4:52:73:39:
         b9:ce:86:2b:39:7d:8e:20:34:cc:f0:4c:9e:16:db:97:f9:73:
         f5:27:dc:e4:fb:02:f7:4c:18:6c:6c:f2:43:21:c8:48:b4:45:
         b1:c9:2d:1f:11:97:93:eb:95:be:99:b9:dc:b3:a4:39:2c:11:
         cc:af:28:51:1b:bc:bc:03:f0:b9:1f:5a:37:66:3d:99:45:0c:
         01:b1:c9:1d:af:f3:5f:14:51:3e:e6:45:02:d3:4d:30:a6:bd:
         48:08:00:6b:06:b4:ce:f1:e1:49:0c:8e:7d:c9:e9:08:30:61:
         1a:77:a4:f3:ab:f3:35:60:a9:5a:70:a5:6b:91:5c:42:5c:05:
         20:59:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----