Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dcf6f98c-c414-3528-b60d-e815175be085.roa
File:                     dcf6f98c-c414-3528-b60d-e815175be085.roa (raw, json)
Hash identifier:          rFPR3xbHEwKd/tbAXHcci4llDfcx1JzWeOV20q/KBFM=
Subject key identifier:   C7:3C:B5:1B:4F:49:ED:D3:71:96:6B:90:0E:D1:75:ED:E4:D9:C9:96
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328583FEA74EE937757900D248B5080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dcf6f98c-c414-3528-b60d-e815175be085.roa
Signing time:             Mon 14 Nov 2022 12:00:00 +0000
ROA not before:           Mon 14 Nov 2022 12:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     577
IP address blocks:        2001:4958::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ea:74:ee:93:77:57:90:0d:24:8b:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov 14 12:00:00 2022 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=6efebe8c-44f0-4c8b-97b1-a1c303cdfbd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:06:80:72:86:01:5e:38:0e:62:a6:d8:9e:7b:
                    c7:19:66:3e:ff:c5:56:1e:6d:fc:44:60:c9:72:74:
                    22:82:e4:ec:57:89:39:33:77:81:e4:c0:44:e2:e2:
                    32:4a:7f:ea:f6:a0:b9:16:cf:ad:a2:57:e7:da:6c:
                    15:40:43:3f:1d:41:45:bf:dc:fe:85:ff:32:36:57:
                    a0:83:bb:45:9c:87:68:75:5b:08:ee:44:c2:cf:5f:
                    a3:81:66:e4:3e:75:65:6a:49:e7:c6:9c:ea:f2:e6:
                    92:f2:a1:8a:23:c9:e6:ff:6b:b6:ba:19:9e:58:be:
                    12:dd:ea:93:1e:b2:78:68:6d:92:ac:eb:ad:e9:7c:
                    6f:12:82:98:a5:d5:01:d2:3c:cc:75:f9:3f:ea:25:
                    17:b3:06:87:68:06:bd:33:16:4e:ca:56:f1:88:b6:
                    38:02:f5:8a:b7:fd:b4:ac:76:ed:f7:0f:ce:bd:88:
                    67:63:06:97:56:62:06:61:90:e5:5d:fc:6d:e3:b2:
                    ed:15:88:ed:da:a8:81:3e:49:b7:f3:f7:fc:92:a8:
                    43:62:fb:39:6c:1e:fa:0a:63:23:38:5b:6f:4d:97:
                    59:61:c7:d4:f6:f9:b0:97:8e:55:92:4d:1c:c5:2f:
                    dc:fa:46:1d:30:da:8f:e7:9e:5d:ec:0b:25:e5:a1:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3C:B5:1B:4F:49:ED:D3:71:96:6B:90:0E:D1:75:ED:E4:D9:C9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dcf6f98c-c414-3528-b60d-e815175be085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4958::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:35:05:a6:2e:47:a5:99:57:7d:41:54:66:fc:7b:c3:6e:d1:
         b8:6e:31:cc:f7:5d:a6:f9:61:87:06:6e:ac:37:e2:bd:e7:8c:
         44:71:53:f0:ff:9b:50:a2:5e:08:b5:35:b4:01:89:04:f3:02:
         4e:96:61:7a:d0:f6:0a:d5:7a:ec:5e:95:66:71:42:31:76:bf:
         7d:7c:cc:4a:e2:8c:ab:10:0d:d5:9b:cd:e8:6d:40:ad:69:85:
         e7:76:7b:89:11:cc:89:c5:64:08:e0:78:a3:23:8e:15:f3:b7:
         91:7f:30:29:05:09:1d:99:e9:29:27:d9:1a:62:6f:2a:c7:ba:
         1f:2e:7b:36:f2:0e:a0:2a:59:cc:2e:cf:47:ae:e9:7c:e2:d4:
         98:71:91:36:25:47:8c:38:2b:75:79:f8:2e:8f:0f:e0:cf:b0:
         c2:86:fe:4d:41:7f:28:c1:77:f2:0d:15:4c:c3:84:67:32:b2:
         7e:3c:42:5d:05:a5:03:77:80:7f:22:92:13:7b:41:57:44:b8:
         4f:33:3e:b8:01:46:93:86:1c:ec:41:4f:ee:92:56:5f:63:99:
         57:f7:50:49:a1:22:3c:d4:4e:33:00:cb:67:39:d8:9c:d1:1e:
         a6:5c:b9:b1:94:76:c9:aa:d1:82:27:b8:90:4c:e0:57:af:39:
         d9:83:c6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----