Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e97c1802-b120-316e-b42a-d5b0dee7db12.roa
File:                     e97c1802-b120-316e-b42a-d5b0dee7db12.roa (raw, json)
Hash identifier:          dHe9vt1EhjHPPMP9gEyddN5OBc715QExsEHWHbTxGfM=
Subject key identifier:   DD:00:A9:22:E3:EF:B2:B8:3E:F8:D1:32:B2:AE:EC:76:A4:DD:9B:6B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285841AF756214F164CB6D72376E40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e97c1802-b120-316e-b42a-d5b0dee7db12.roa
Signing time:             Tue 25 Apr 2023 12:00:00 +0000
ROA not before:           Tue 25 Apr 2023 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     36522
IP address blocks:        174.90.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:af:75:62:14:f1:64:cb:6d:72:37:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 25 12:00:00 2023 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=92593a0d-504d-4257-9f61-828ae483f634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:05:10:14:6e:c7:ef:2e:de:a6:17:dd:74:a3:
                    20:86:ac:ad:d0:f4:25:33:90:ec:a1:b8:cb:04:d3:
                    34:f0:95:f4:8e:ee:be:6f:1a:ee:8b:27:d0:26:cb:
                    94:55:f9:20:36:6c:df:c8:05:ac:65:fc:d2:7d:e7:
                    65:be:78:5f:f2:7f:88:70:72:e9:f2:e8:d7:1a:7a:
                    dc:24:bc:79:9f:57:7e:3a:5a:56:3f:47:2f:6b:02:
                    64:b7:1a:b6:b4:dc:27:3f:95:b2:c3:7e:aa:b3:3b:
                    c0:6e:2e:d0:c9:6b:bd:54:9a:e6:7b:6b:36:18:dd:
                    7d:74:63:bb:79:41:d3:3c:74:ea:a0:a2:50:20:e5:
                    c0:34:a6:00:68:29:0f:e5:ac:bf:de:92:83:05:8d:
                    fe:a4:72:80:6b:a2:cd:76:79:9f:31:11:57:ba:5b:
                    91:9f:34:74:e9:14:70:a2:7d:17:22:30:97:fa:0d:
                    87:88:07:a2:a7:d3:cf:cf:74:4a:5e:70:c3:4b:7a:
                    bc:c8:51:e2:1f:e6:34:3b:77:ba:2e:c1:1f:10:3a:
                    44:88:c4:75:d0:c7:73:82:ac:03:3b:3b:34:7b:fa:
                    3a:b1:d7:1e:14:02:be:29:0c:09:2b:e5:e2:53:2c:
                    55:bd:20:c5:58:5d:3d:77:dc:9c:4a:37:cb:d5:d3:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:00:A9:22:E3:EF:B2:B8:3E:F8:D1:32:B2:AE:EC:76:A4:DD:9B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e97c1802-b120-316e-b42a-d5b0dee7db12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:36:5c:28:c3:73:90:cf:1c:8d:2d:5e:e6:81:79:07:a6:
         a3:35:bd:81:88:e9:14:04:34:b8:56:34:b7:53:10:fa:b9:39:
         88:f9:d6:6f:bb:ab:ce:fc:a8:97:2f:ff:f6:da:7b:7e:c1:0e:
         5c:fc:5a:e7:c9:73:14:d1:a7:d4:28:a4:20:75:5d:3a:24:7d:
         3f:a6:c0:cc:10:22:1c:f5:83:cd:2b:1e:54:0f:c3:c2:f9:de:
         3b:7f:2a:e3:cf:d6:69:d9:d1:aa:db:32:44:01:4f:bb:50:cc:
         c5:99:e9:97:73:83:33:5a:a4:60:75:ee:87:9a:e8:e3:ce:cb:
         a8:a7:b3:46:66:30:22:eb:c6:cb:e8:24:3d:76:ea:9b:07:6e:
         82:6d:4c:6a:84:fe:bb:0c:e6:7f:39:26:e9:64:e9:3d:c3:79:
         6f:86:99:a3:b0:54:71:a9:2d:70:a1:ba:5d:db:aa:d5:f8:83:
         1f:74:b1:94:33:a4:a8:16:f1:d1:a6:0d:a3:3d:65:79:b5:ac:
         05:e3:22:93:81:a0:6b:30:b3:e8:90:28:3f:8c:44:9f:0b:41:
         d0:b7:41:e5:f8:58:34:c2:96:42:ba:11:c3:2d:4e:90:84:d5:
         80:52:42:32:30:04:7e:c4:f3:df:90:c8:9a:f2:41:79:3a:8e:
         f4:88:6e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----