Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8889542-533c-3c2e-a271-bf9c0c3e99e1.roa
File:                     c8889542-533c-3c2e-a271-bf9c0c3e99e1.roa (raw, json)
Hash identifier:          ttkt/uMRaxXJajbk4BiQUgCNB+2rZgulR/KKiJD+Jcw=
Subject key identifier:   36:27:A7:10:E3:8F:5E:D3:AF:DF:89:4C:72:E8:3F:6D:93:AA:C8:30
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF74F5D4B836FABF09C77A40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8889542-533c-3c2e-a271-bf9c0c3e99e1.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        69.158.206.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:74:f5:d4:b8:36:fa:bf:09:c7:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=078b7243-a2c5-4617-943d-fcce374547a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:f6:59:f4:01:ad:96:4a:8d:9c:53:cd:35:
                    74:81:a3:bd:58:c6:3a:31:5e:d3:26:65:3a:5b:20:
                    bb:ec:42:b4:97:0d:92:9c:9a:eb:58:f2:32:95:df:
                    df:01:52:76:67:10:6e:1a:81:4a:a2:fd:79:41:f1:
                    42:e7:a4:cd:f7:eb:27:a3:4f:d2:77:8f:73:fe:d9:
                    14:d5:b1:da:81:83:b7:18:2f:bd:54:5e:4e:a4:9b:
                    0d:ae:0c:ac:e8:c0:df:88:3a:ea:a9:1e:a9:13:56:
                    16:c4:39:b5:35:58:f6:7a:16:c8:49:3e:55:bd:b6:
                    8d:31:52:2a:37:38:f1:56:d3:11:b5:52:20:ac:ec:
                    d7:20:6d:52:44:2e:a2:cb:54:90:13:1b:c7:1a:b6:
                    3a:18:a5:a0:35:fa:01:05:b7:87:c8:ba:03:d2:cf:
                    e7:06:17:7d:7f:fe:95:67:53:ba:b4:a1:3c:77:f4:
                    64:ef:7b:11:25:ef:5e:b3:41:b0:b1:0e:56:27:c1:
                    30:14:ad:9f:45:c7:6d:07:5c:8a:28:04:a8:a7:c5:
                    ce:59:ff:40:b4:6a:fb:71:6f:ce:db:8e:e5:ac:56:
                    ec:12:e1:4b:24:4f:ec:42:37:7f:51:f2:a8:9a:c9:
                    3b:11:71:a8:a8:17:fd:b5:71:a5:20:38:90:63:4d:
                    44:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:27:A7:10:E3:8F:5E:D3:AF:DF:89:4C:72:E8:3F:6D:93:AA:C8:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c8889542-533c-3c2e-a271-bf9c0c3e99e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:1b:73:ec:76:c3:6f:6a:cf:3c:a1:96:17:96:f6:34:7e:39:
         0b:19:79:63:41:ce:0f:70:e7:99:ee:b7:d3:a5:79:8a:56:1f:
         f8:24:07:dd:27:67:a2:b3:4a:d7:8b:73:aa:30:16:09:c2:a6:
         0b:f3:30:1e:77:5b:9e:c5:09:52:c4:e1:bd:15:ad:28:48:03:
         4e:10:19:a6:58:85:b8:6a:24:a3:38:92:98:f4:07:96:04:61:
         85:8a:a6:a1:77:5a:d6:74:a5:2f:5d:ce:78:b4:b7:69:6d:21:
         a7:83:f5:2c:fc:0e:50:4e:6c:5d:4e:5d:ea:c1:78:c8:2e:e0:
         fa:74:af:09:95:6c:f2:a2:da:5b:71:dc:98:e5:92:08:99:83:
         95:cc:7b:26:fe:88:68:0c:d9:77:d8:cf:bb:f8:13:11:ee:c5:
         3a:27:42:fb:af:d7:c7:49:f3:29:69:5c:18:a3:4e:90:ad:bb:
         ec:8c:34:92:db:77:d2:4e:f2:2d:d2:15:57:2d:6d:27:ec:87:
         e9:48:eb:97:e8:50:ec:3f:e1:16:50:1a:86:5d:cd:00:d2:ab:
         be:da:93:05:4d:79:db:f9:fb:60:0c:c1:e0:a2:37:44:8f:2a:
         6c:3c:fb:3b:62:76:60:b2:36:ea:46:c5:f5:c4:6d:bf:10:55:
         74:8d:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----