Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8eac136-1daa-3624-8daf-aecc6f073dc5.roa
File:                     f8eac136-1daa-3624-8daf-aecc6f073dc5.roa (raw, json)
Hash identifier:          TZQhdHete8yjGCfGkQI+RUS+YAYIc/iEKygrwawesYk=
Subject key identifier:   7D:63:9B:2A:DB:71:29:5B:4E:BC:5A:D0:62:55:F8:ED:14:B4:A4:38
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE46324A6F1671EC0883E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8eac136-1daa-3624-8daf-aecc6f073dc5.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        70.54.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e4:63:24:a6:f1:67:1e:c0:88:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=3de3e92f-56a7-4455-b890-b6bc47b2424c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:8d:cb:fd:24:4b:1f:a3:28:80:ce:e4:69:
                    bf:18:c8:d1:e3:b0:72:6b:b4:d3:6f:72:c4:43:a1:
                    60:b0:14:1b:cf:70:15:01:a6:aa:e9:58:0e:e0:68:
                    6f:94:13:6b:ce:2e:9a:d2:63:81:f4:88:36:79:49:
                    8a:93:04:2b:76:0e:9f:23:b5:4b:9e:47:50:49:0d:
                    46:fa:b4:20:17:38:97:89:f6:6a:34:ec:81:ec:79:
                    9d:f0:4d:ef:5f:9d:af:d6:23:47:19:a2:cc:3b:26:
                    e4:86:10:bd:f2:0b:8a:31:66:b5:33:6d:d5:c7:95:
                    41:2a:e5:a9:6d:61:05:85:85:ac:e6:67:2d:61:66:
                    53:85:fc:e5:4e:a2:d8:a2:6a:98:e0:b1:e7:ae:20:
                    16:a0:98:cf:19:40:96:b9:16:5f:3a:3e:9c:ca:7a:
                    74:6b:37:79:34:4a:dc:b7:0d:10:7e:c7:0a:83:43:
                    d3:03:3e:07:7f:eb:f3:92:bb:7b:20:24:aa:33:dc:
                    dd:94:35:b1:a8:d1:7f:ad:8a:1e:51:7a:e0:5b:53:
                    1a:5d:94:ce:08:ab:bb:a9:f8:e2:ea:e6:c3:6c:70:
                    81:0b:5b:d1:56:ef:e0:8b:d0:f7:82:ee:a7:ec:28:
                    20:2f:c7:67:1c:81:1d:6f:25:40:79:03:3d:50:57:
                    40:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:9B:2A:DB:71:29:5B:4E:BC:5A:D0:62:55:F8:ED:14:B4:A4:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f8eac136-1daa-3624-8daf-aecc6f073dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:21:39:7e:51:6f:62:1f:ad:68:e4:2f:f9:3f:8a:d8:d3:
         b5:18:d3:8f:73:95:7b:8c:33:53:bd:ee:1d:d9:cc:e2:5f:3d:
         c4:bb:7e:d3:48:11:e7:db:1d:a6:c8:19:23:69:ef:13:d0:4a:
         94:fa:05:a0:b0:a6:ef:ba:cb:c0:30:c9:07:a5:d1:0e:c8:61:
         6a:47:88:de:ff:48:3f:7f:d7:7e:09:ad:26:38:79:f4:6f:5d:
         ab:3e:44:eb:82:e2:4f:29:09:b8:45:eb:54:b8:77:0d:e6:17:
         1f:9c:d7:98:3a:ce:b0:17:29:c1:fc:1f:36:e1:45:19:d8:b6:
         02:d8:27:d3:09:9b:f2:ac:cf:07:d5:6f:8c:0c:40:dc:5d:ef:
         af:b9:56:67:f1:b2:53:f1:8f:5f:bc:66:b3:0f:30:89:48:f6:
         e2:60:71:7d:c8:55:68:af:7d:cd:cc:3c:e2:23:cf:3d:ba:ac:
         b6:6d:34:78:68:28:85:aa:c6:e7:5b:fa:c0:db:0d:8c:c7:0a:
         d4:ac:cf:a4:60:c9:8a:19:7c:41:0f:0b:3a:0f:5a:96:51:08:
         54:9d:24:40:e1:21:8b:1d:67:2d:91:e1:60:92:31:66:ef:d9:
         43:be:a5:5a:98:c1:ac:b5:24:76:74:fd:6d:f9:c7:ac:a7:94:
         3c:f2:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----