Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c53a3f3b-0fd2-3af9-a87b-1f4a80fb3a7f.roa
File:                     c53a3f3b-0fd2-3af9-a87b-1f4a80fb3a7f.roa (raw, json)
Hash identifier:          iKLeq/IpsLAwt1qM4DUUEUG7wrS2eWMQaP3hywI+0hc=
Subject key identifier:   62:D8:F8:35:DF:AA:36:29:3A:17:C7:73:15:CE:0C:72:74:12:C8:66
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF751E9A58CFBCAF0E2059C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c53a3f3b-0fd2-3af9-a87b-1f4a80fb3a7f.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        74.13.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:1e:9a:58:cf:bc:af:0e:20:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=5a0f2f07-88c3-4bff-bc5a-ae3078483714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e2:bb:4b:0c:e6:58:00:a4:f6:53:a0:f6:db:
                    f8:e0:52:d2:ae:71:59:30:e3:ef:2e:8f:d7:6b:23:
                    06:91:cf:ba:84:e5:f9:39:e8:a7:32:62:84:bf:a8:
                    ec:f0:c7:57:4e:54:dc:0e:52:c0:80:fd:1e:f9:7a:
                    63:d7:5a:70:1e:d2:f7:4a:53:d7:9c:cf:ad:05:b2:
                    57:08:cb:4d:4e:f8:e7:4f:59:b5:23:49:7d:65:c9:
                    0d:b7:54:cc:19:6a:bc:89:2d:c0:c1:6e:c2:bb:98:
                    30:92:90:0f:5f:dd:c7:97:8f:67:be:e8:30:5d:3b:
                    ec:c1:bb:bf:5a:41:99:e4:61:df:66:9a:de:fe:49:
                    05:d9:4c:b8:6b:a6:4c:0e:1e:be:5a:80:85:8d:27:
                    62:05:35:46:38:eb:83:94:3a:e6:ae:dc:ab:93:bc:
                    f8:c9:d0:f7:56:70:94:bc:89:e1:fc:c5:2d:9a:ad:
                    cd:aa:de:cb:8f:26:db:dd:6e:a6:c5:dc:d4:91:55:
                    fe:86:de:e7:3b:d3:e3:e2:e9:97:a6:18:f3:ac:47:
                    41:e1:e0:41:a8:3b:e8:9a:c9:22:d6:b9:05:00:3f:
                    47:b5:46:23:f5:86:2e:db:33:6e:49:f4:28:f5:14:
                    47:c0:09:41:a8:ad:b8:5e:0b:f8:fd:e8:d8:75:c0:
                    4a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D8:F8:35:DF:AA:36:29:3A:17:C7:73:15:CE:0C:72:74:12:C8:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c53a3f3b-0fd2-3af9-a87b-1f4a80fb3a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.13.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:5c:3a:f1:27:82:d4:01:ce:a8:d3:81:b1:38:fa:e8:ea:a6:
         29:63:47:0c:5f:58:a1:25:66:60:af:73:02:7a:5a:ef:56:5a:
         a6:69:75:61:65:41:14:a4:fe:f5:0f:76:c7:7e:e5:a1:a3:5f:
         b2:44:a3:8f:97:05:95:d5:8a:db:84:a8:f9:8c:8b:19:fd:67:
         d3:99:d4:7b:1f:11:4b:36:48:0d:33:42:07:11:91:37:38:3d:
         65:37:bf:fe:48:65:58:05:d8:a1:62:8e:2c:ea:e9:23:a6:bf:
         1f:2a:ad:f1:11:0f:54:81:6e:29:6f:b9:39:84:bb:a4:7b:8d:
         75:2d:a4:81:4e:c5:87:fe:9b:9d:a6:af:74:2f:0d:6a:c1:bd:
         1f:82:98:64:0d:2c:bd:76:67:50:da:44:0a:8e:9d:bb:88:ba:
         37:7e:4f:a8:73:a5:66:e2:91:0e:de:62:4b:31:ec:be:11:3f:
         20:b2:27:43:6a:99:67:f3:ed:a8:b5:2f:57:01:9b:3b:7a:b8:
         7c:72:e3:70:11:16:72:7c:20:7f:7d:80:a5:13:e2:16:eb:ab:
         d7:8c:73:e5:78:ec:d2:16:b6:6e:c2:e1:0f:03:d5:1c:d7:72:
         27:d0:07:f9:5e:ba:2e:91:c0:81:1c:e8:fa:ea:c2:13:a8:27:
         35:56:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----