Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e3bce59a-b9fd-37c1-b6dc-3ed62fdc981b.roa
File:                     e3bce59a-b9fd-37c1-b6dc-3ed62fdc981b.roa (raw, json)
Hash identifier:          VY+S/aoVv5QMQyJ5Y3qtKBdK+0wYpYhMEf2yyHdfT+U=
Subject key identifier:   34:A5:32:D9:C2:4F:27:EA:03:A2:6C:BA:BA:BE:9F:F3:AF:2D:90:21
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF76410CF2CD3F73D1F9F000
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e3bce59a-b9fd-37c1-b6dc-3ed62fdc981b.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     855
IP address blocks:        2001:4c0:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:76:41:0c:f2:cd:3f:73:d1:f9:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=b6939f6d-4d8f-4048-979c-4acf10df1747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:53:c1:ee:1d:51:70:e0:a4:06:76:4c:39:09:
                    c6:00:28:a3:3e:83:96:43:a0:b0:35:3b:1c:c6:e4:
                    43:66:be:bf:23:66:54:63:cf:fb:1c:89:c1:4a:1e:
                    19:25:f4:f7:cb:06:40:94:b9:c3:e5:18:a3:aa:78:
                    86:78:50:ef:4a:7f:12:7f:11:ad:d9:a0:a6:07:b7:
                    7a:ba:17:a3:c8:71:a4:94:ab:fa:e4:25:cc:fc:af:
                    85:0e:12:c6:dc:98:b4:0f:57:fd:eb:98:40:f7:36:
                    33:11:01:e0:38:bd:e2:f1:c2:0d:11:a2:79:9d:d7:
                    53:d6:73:89:a5:5a:80:87:c7:39:7e:4a:d4:fa:69:
                    7b:02:78:a5:bd:a3:a0:4b:ce:03:46:cc:1f:45:49:
                    97:15:91:2a:de:2c:58:3a:db:c9:27:d9:fa:23:86:
                    a2:6b:03:56:6d:5c:b6:d1:58:fc:dd:1f:ef:4c:86:
                    e8:d9:81:d5:51:c6:8a:07:6b:19:7b:aa:72:a1:a1:
                    76:dc:0e:49:13:b8:19:6f:83:d3:dc:bc:f9:06:52:
                    24:a4:a1:99:71:ca:36:c5:ab:49:4e:24:63:5f:10:
                    d6:48:0f:94:eb:47:6c:56:eb:f4:ec:99:7a:b3:bf:
                    8c:5f:78:c8:a9:ca:7a:08:36:9a:a0:8e:17:88:1b:
                    15:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A5:32:D9:C2:4F:27:EA:03:A2:6C:BA:BA:BE:9F:F3:AF:2D:90:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e3bce59a-b9fd-37c1-b6dc-3ed62fdc981b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c0:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ae:82:22:52:61:c6:f2:91:43:93:bd:38:25:4a:ea:be:c7:
         5d:f0:1b:dc:7c:c9:ec:37:90:bc:44:29:c2:43:41:9a:b3:90:
         91:cd:b6:12:4a:d5:5c:5e:38:d9:02:31:48:54:c6:a1:08:89:
         0f:26:9a:82:92:fe:e3:55:ec:44:36:36:e7:a2:af:d0:f6:ea:
         06:af:64:45:9d:c6:9f:50:0f:73:eb:29:fc:b8:91:e6:f8:6f:
         c6:b5:f0:cf:a4:32:dc:1d:5c:f3:72:09:f8:ad:e4:54:9c:4e:
         8e:b4:e2:c0:69:8a:2f:dd:6c:2c:53:46:b1:73:bf:77:30:95:
         1a:7e:80:4f:46:f7:f9:f6:fb:7e:94:2b:e5:50:ae:06:71:6a:
         bb:31:ba:cf:c6:fa:9a:a0:86:95:d3:35:2f:39:ee:cb:9f:4c:
         1e:48:f1:ca:09:ef:89:d1:d7:17:26:48:57:33:f0:28:45:ec:
         25:09:b4:34:80:a4:9d:19:6b:19:77:f7:48:a9:8b:73:1f:81:
         e5:a0:4a:52:5f:30:31:86:55:d4:71:da:5b:0c:11:7d:0f:e4:
         32:53:43:84:53:2a:8a:19:1f:0e:4e:08:10:9f:94:57:e0:9d:
         2b:81:de:e5:a6:5d:9e:2a:11:48:f5:df:35:ee:98:a4:0e:c9:
         cc:40:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----