Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb093a7d-1e70-3633-acdd-a8b6933f902b.roa
File:                     fb093a7d-1e70-3633-acdd-a8b6933f902b.roa (raw, json)
Hash identifier:          SLbzALcv/ZINTu3kI19X3obFRgfQGMFWjzMPKFI/3KM=
Subject key identifier:   29:9B:B2:5F:2C:CB:E6:44:0C:09:B4:86:A1:A0:55:D7:DE:8B:C4:1E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285840C1D3F619D2EFC80153F861C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb093a7d-1e70-3633-acdd-a8b6933f902b.roa
Signing time:             Mon 30 Jan 2023 12:00:00 +0000
ROA not before:           Mon 30 Jan 2023 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     577
IP address blocks:        70.30.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:d3:f6:19:d2:ef:c8:01:53:f8:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 30 12:00:00 2023 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=c2441263-b014-4882-91d9-02e62f5f3caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:18:21:c1:9a:5c:a7:51:cf:ce:1b:2a:81:
                    c4:e0:44:5f:6e:e9:48:59:8c:62:67:72:55:d2:47:
                    2d:f7:74:04:06:8c:51:f0:16:c5:e0:a1:5d:fa:2e:
                    ea:9e:aa:74:88:5c:3f:91:03:a0:0f:38:75:16:a3:
                    95:50:84:83:52:cd:0c:44:7d:14:a7:11:5c:53:41:
                    d4:c7:38:78:20:08:c0:af:09:54:73:7c:7b:bb:81:
                    76:01:5b:78:ec:c5:cf:22:74:19:93:85:88:bf:d6:
                    56:54:79:b0:a0:70:22:e4:00:c3:60:ee:c0:65:af:
                    bd:d4:32:11:75:ae:29:d6:8d:87:54:6b:51:33:6f:
                    ad:17:40:18:35:d6:5c:e1:b8:84:f6:dc:e8:f3:95:
                    15:a3:5f:fe:b5:7a:53:63:92:cb:46:c5:06:64:72:
                    13:e4:d3:8b:3a:c7:36:18:05:6d:4d:bc:42:1c:6d:
                    a7:a2:dc:1f:6a:16:67:37:5c:84:e9:9b:f5:1d:7d:
                    98:df:f6:a4:56:3b:52:60:62:7e:ff:b7:dd:76:42:
                    b7:bc:c8:86:aa:0a:52:00:36:c3:d0:b9:3b:91:37:
                    fa:ef:9f:82:3e:4f:83:de:9c:16:3d:a6:5a:97:9e:
                    27:f6:19:91:8c:24:93:56:98:76:02:2c:b8:08:4b:
                    b8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9B:B2:5F:2C:CB:E6:44:0C:09:B4:86:A1:A0:55:D7:DE:8B:C4:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb093a7d-1e70-3633-acdd-a8b6933f902b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.30.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a2:1f:63:07:40:bd:08:f2:ac:d4:dc:93:71:dc:3e:69:16:
         47:27:1c:47:c3:30:1b:fa:e1:fa:ee:6a:df:6d:6e:93:91:27:
         b2:9e:62:bb:d2:2a:7e:da:4c:2b:84:36:38:8e:f1:f9:8a:32:
         70:3b:13:56:03:d3:6b:2a:78:10:4d:79:04:7b:f3:a6:1e:e2:
         25:1c:9e:15:e1:54:de:ea:29:f3:81:d6:e5:9e:9e:fb:5a:1a:
         c3:23:d3:8f:14:04:e2:61:86:61:e6:b9:92:ad:88:55:bd:78:
         ce:fa:64:9f:10:f3:a1:04:c6:1a:bd:11:2e:fc:7f:ee:5f:02:
         03:40:74:f3:45:23:6c:b1:54:86:bb:f3:81:c8:9c:99:98:fc:
         1e:9f:88:ad:50:4c:02:b6:1e:f4:0b:53:13:52:ab:b1:39:95:
         86:18:ea:05:27:84:c2:df:15:f9:c4:39:3b:1f:7e:07:1b:e5:
         ad:8d:3a:0a:e9:77:64:35:5b:d5:17:e3:1f:59:39:8e:df:5f:
         1c:5b:86:59:bd:b9:75:88:2e:4b:a0:59:d3:c4:40:8e:3a:be:
         20:4e:de:07:1a:cf:bc:1d:68:ac:53:7c:66:85:13:5f:60:a0:
         3a:6b:18:bc:8f:16:46:b4:25:74:74:65:c1:34:6f:93:e3:94:
         9c:f9:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----