Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c7e6abe2-df5b-34ef-aa0c-e00ae2480b1f.roa
File:                     c7e6abe2-df5b-34ef-aa0c-e00ae2480b1f.roa (raw, json)
Hash identifier:          ig3BrOp67xWn5jKjvWvHbQOioU4jfC0R46CAhqpUXsg=
Subject key identifier:   44:21:34:44:47:A2:98:5E:33:13:C5:DD:93:2E:EA:20:A4:00:B2:49
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7623F9E04C7EC65B7F1320
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c7e6abe2-df5b-34ef-aa0c-e00ae2480b1f.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     3848
IP address blocks:        216.208.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:23:f9:e0:4c:7e:c6:5b:7f:13:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=30c0f5bb-dcac-42bf-86d1-03cb731d7a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:b7:69:e3:60:bd:3a:fd:aa:44:79:ed:a8:
                    be:5e:46:b3:87:45:ac:82:13:0b:8a:5b:b7:99:ba:
                    c7:66:98:1a:85:62:ee:e4:ec:4c:9b:e7:dc:53:e7:
                    9d:db:e0:9a:32:a8:f0:1f:f0:ea:1a:cd:48:5f:50:
                    e7:3e:5e:20:c2:e9:0b:01:11:7d:c8:88:97:88:8a:
                    4f:61:33:0d:e9:42:6a:80:13:9d:c8:74:c4:68:7c:
                    e5:99:c5:5a:a6:57:c4:9f:46:5f:2c:0c:32:96:fa:
                    4b:eb:40:38:39:2a:c1:1d:c9:85:2e:6d:c0:da:52:
                    4e:f6:b3:73:9e:85:35:68:e5:fe:d5:0a:2b:cd:1b:
                    ab:71:b3:cb:96:46:30:99:18:e9:dc:a0:7a:9e:ce:
                    9a:aa:4c:44:b8:47:e2:c3:e2:a5:69:90:b5:e3:53:
                    de:89:89:8f:de:f9:1d:de:ad:8f:ac:e4:16:01:7b:
                    57:94:e9:9e:9d:0a:55:14:3e:a6:49:68:f4:fe:b9:
                    4a:3a:a9:0b:27:f5:00:e5:b7:fe:61:a0:24:ef:fe:
                    5d:17:7a:0b:ad:35:6f:98:b4:16:54:8b:c9:a8:2f:
                    64:b5:7a:6f:89:34:63:42:5f:02:15:b0:02:9a:d7:
                    86:66:81:40:c5:c7:db:99:78:0b:24:93:ff:e1:d0:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:21:34:44:47:A2:98:5E:33:13:C5:DD:93:2E:EA:20:A4:00:B2:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c7e6abe2-df5b-34ef-aa0c-e00ae2480b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:7a:10:3a:e1:6e:f1:4e:5d:1a:ab:eb:fc:49:35:9e:c0:
         1e:a9:0c:83:1f:f6:f0:69:07:98:24:36:6e:3f:1f:92:27:94:
         2d:69:ad:14:77:cf:1a:e4:89:20:21:2b:7b:e6:2f:9e:d1:db:
         9e:a7:20:6b:27:09:68:84:d2:b5:ac:cf:88:ca:e6:9a:39:10:
         83:44:9c:44:7d:89:60:eb:1e:5b:b2:52:4c:24:bc:55:e2:df:
         28:69:2c:a5:ff:df:55:d6:af:46:4e:23:27:e0:ce:d8:8c:67:
         a0:58:5b:47:98:cf:09:d1:76:1f:23:ea:bc:5b:bc:59:b0:38:
         1c:63:34:ca:c3:1a:8a:aa:0d:74:33:32:ff:24:4d:8b:60:5c:
         91:36:47:ae:cc:7f:b7:70:7f:65:d3:61:cb:5c:f1:95:7f:cd:
         4d:70:85:f8:f8:4e:a6:42:81:34:cc:cc:d2:de:5f:10:49:d5:
         5e:44:33:91:50:55:3b:5f:43:d5:b5:32:16:08:22:19:bc:d3:
         47:22:10:70:f3:dc:21:73:e2:f9:3d:42:cd:dc:93:3f:52:38:
         c0:60:e6:3e:2a:65:fc:52:58:b6:33:47:3b:c9:6b:51:12:1e:
         4b:8a:04:01:53:25:33:97:09:d9:68:42:61:0f:78:58:65:ae:
         4b:e4:3e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----