Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf7aeb05-fa54-366e-bf93-0603e1b568cc.roa
File:                     bf7aeb05-fa54-366e-bf93-0603e1b568cc.roa (raw, json)
Hash identifier:          412yE5bWeY+YPm/Ekar1SMiGFmve+2icMkspZJdQ/co=
Subject key identifier:   32:DD:2D:AC:80:71:7B:B1:14:A7:B0:2D:76:C8:9D:F3:CB:88:13:FD
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FEB22A98D82BD4D6BBC54FCC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf7aeb05-fa54-366e-bf93-0603e1b568cc.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        2001:4958:732::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:eb:22:a9:8d:82:bd:4d:6b:bc:54:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=edc1af0b-561c-4bc5-b1c3-c896b993770b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:81:7b:f2:0d:95:8d:ed:90:34:bf:49:a0:
                    50:33:25:74:c2:ea:f3:c0:34:5d:40:09:fa:5f:a9:
                    41:75:17:b2:12:3f:80:7a:fe:60:a8:ee:41:99:08:
                    65:fe:fa:db:28:85:60:aa:ba:5b:b1:cf:4b:2d:a6:
                    52:16:58:05:67:46:ca:11:bb:5f:6b:9a:ed:fe:11:
                    fe:fe:0b:87:50:65:d7:4a:97:ee:83:db:b0:b2:59:
                    0a:e7:fb:d5:b9:d6:ad:b2:ed:af:c0:e9:ef:6c:41:
                    58:15:a8:9a:cf:a8:c1:ba:f4:80:cb:56:74:80:b6:
                    82:61:c2:ad:4c:7e:8e:9a:0e:a8:cf:82:dc:75:fe:
                    86:58:95:12:9c:05:5f:40:33:08:c5:c5:15:0d:c6:
                    17:65:bf:1b:7e:99:d5:9e:c9:da:2a:55:19:6b:ca:
                    ad:22:f7:a6:11:be:88:8e:b4:e2:5c:fc:65:f8:fe:
                    ff:6b:94:99:93:a9:78:76:81:6a:96:81:ba:8b:c9:
                    7a:3c:e2:2f:63:cb:0d:36:b9:59:49:cf:1b:f2:e7:
                    fe:b1:09:3d:e4:09:fe:74:d1:f4:3b:9a:8e:73:3d:
                    fd:dc:d8:ce:c3:9d:89:f2:ce:2f:66:6f:4a:7e:b1:
                    d3:80:2e:0b:14:e3:8c:d2:c2:60:dc:2b:1d:c3:7d:
                    46:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DD:2D:AC:80:71:7B:B1:14:A7:B0:2D:76:C8:9D:F3:CB:88:13:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/bf7aeb05-fa54-366e-bf93-0603e1b568cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958:732::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:53:14:5d:3f:e7:cf:00:84:37:6d:f7:e8:aa:da:f8:4c:59:
         eb:3d:84:2d:8b:91:73:15:58:3a:cc:64:ee:6e:ba:08:bc:1f:
         b5:c2:28:72:f2:32:84:aa:0f:1e:5e:3c:fa:ab:7c:1c:dc:99:
         ca:a5:0d:5c:e8:75:77:db:4c:8a:94:73:cf:ec:13:24:61:ee:
         dd:68:50:3b:4d:e6:43:92:54:fb:0c:41:52:d6:48:50:54:8d:
         a8:52:18:d2:b6:b2:bd:ab:cc:b7:ae:b6:1d:82:08:c8:a2:31:
         78:4a:13:7d:d5:46:98:8c:3d:82:c3:e5:76:be:6b:90:ca:36:
         8c:29:cb:fc:97:1a:09:71:08:7f:97:76:59:a8:31:46:1d:bc:
         8f:13:2e:ff:04:9a:24:83:3f:e3:7e:d9:02:5d:ad:a8:77:fa:
         7d:70:bd:80:af:8a:db:e6:32:8f:cd:ea:40:60:94:1f:19:f6:
         bf:32:b3:29:8b:cd:5c:2e:94:97:3e:58:e4:e1:7d:1d:c9:a6:
         0e:b2:58:18:f5:02:a1:e2:c0:4e:ca:25:54:22:8c:31:66:f9:
         84:4b:bd:1c:77:d7:d1:b4:ab:18:d8:d4:44:a1:5d:8d:cb:91:
         03:74:f3:19:34:11:bb:29:26:26:97:3d:d4:fd:39:10:bb:cb:
         37:b2:59:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----