Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2807fef-293c-3bda-a8f3-e860a020686c.roa
File:                     d2807fef-293c-3bda-a8f3-e860a020686c.roa (raw, json)
Hash identifier:          kTa2dMdIDk5Ed8+wfpSuAftD+fuvXONrCRotjhwJBdg=
Subject key identifier:   76:A4:89:36:25:BB:66:CA:4F:45:51:4A:28:2B:86:CD:7E:46:A9:6A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF7581F417C2A48F212D0A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2807fef-293c-3bda-a8f3-e860a020686c.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     577
IP address blocks:        184.150.215.0/27 maxlen: 27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:81:f4:17:c2:a4:8f:21:2d:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=ab560f25-5210-48f6-b886-40ae7822820a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:ca:a8:51:b1:39:8f:53:b7:4c:67:3b:5e:
                    03:e7:0a:89:d6:e9:ed:cb:a7:c9:62:2e:5b:5e:c4:
                    54:3f:b8:55:6e:99:66:57:bd:5b:4e:59:44:65:9b:
                    fa:93:8d:04:6f:fa:7b:10:55:a3:90:16:26:12:07:
                    fa:12:15:1d:42:8f:15:f9:c5:52:ca:93:e1:fc:42:
                    26:5a:57:c5:28:8b:96:af:70:28:4b:18:34:b9:81:
                    92:ec:58:86:66:67:aa:d3:5b:82:5b:b3:44:3c:68:
                    2a:64:66:8b:11:a2:5c:0e:d4:78:c4:ae:88:46:1b:
                    79:58:16:51:d6:77:84:c7:a1:95:9d:c9:fc:f9:7d:
                    60:25:d2:9a:89:57:3d:4a:3e:5e:4f:7c:4e:49:4e:
                    06:fa:cf:2e:57:97:ea:f6:43:e4:cc:46:f3:4d:5b:
                    20:37:46:49:8f:c0:1d:16:26:6a:49:17:8d:a7:32:
                    1e:48:5f:91:51:4f:af:fe:b3:34:13:02:7c:43:a3:
                    51:90:30:c0:28:cb:0c:f1:4c:d0:55:3f:56:b5:68:
                    9f:3e:ff:42:8f:8f:68:8c:42:50:a7:b6:6d:49:57:
                    16:82:cd:a1:e9:59:51:7e:fd:33:6f:8c:db:fc:98:
                    64:20:3e:52:85:d3:af:ca:14:98:d6:79:65:3d:51:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A4:89:36:25:BB:66:CA:4F:45:51:4A:28:2B:86:CD:7E:46:A9:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d2807fef-293c-3bda-a8f3-e860a020686c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.215.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:5b:70:67:35:e4:61:c1:d6:c7:a1:f4:5b:8d:31:7a:f6:fc:
         92:e0:0c:c2:60:57:14:39:b2:fe:79:af:b1:02:ec:63:c3:ee:
         64:ac:7e:38:d2:15:7a:66:fc:5d:ab:50:61:38:13:c3:57:e0:
         26:81:94:18:87:5d:c7:84:cc:45:42:e5:7a:c4:47:05:03:b8:
         aa:da:c2:31:23:b9:74:1f:fa:c3:d2:42:22:f6:d2:78:9f:d5:
         e9:f4:3f:d3:52:5e:be:6c:e2:d4:8b:7e:0f:91:2a:57:f2:41:
         07:d6:e8:06:d1:90:94:b1:71:cb:73:75:b1:f3:01:06:f8:4b:
         00:10:0a:6c:64:83:71:bb:86:8c:b2:ce:28:8d:65:ff:44:cb:
         80:d0:d6:19:e4:85:f9:c3:d1:11:7f:b5:85:7d:60:f2:98:dd:
         6f:7f:b5:75:0c:a2:49:33:80:32:25:e4:5a:63:05:72:c9:db:
         5d:ec:68:c9:42:75:1d:9e:26:2e:1d:39:c2:a6:89:c0:bc:e9:
         b6:9a:ee:50:23:90:06:d3:f6:83:a2:ad:4d:a7:08:05:50:3e:
         fc:23:14:82:97:94:20:2f:e6:9d:ca:f3:0d:3d:ab:59:d0:25:
         03:2a:9c:85:37:1f:c1:ee:3d:e4:86:9c:10:88:9d:5f:d5:5b:
         dc:8e:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----