Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb8fca6c-1b2e-323d-aa6d-73e2e3b2583e.roa
File:                     fb8fca6c-1b2e-323d-aa6d-73e2e3b2583e.roa (raw, json)
Hash identifier:          8l8A6SYrcQrJQ5XszQSf+gr1Qo3IjI5YH+Wmcr7/A8w=
Subject key identifier:   53:CD:2E:B1:0F:42:B2:D5:CA:B1:FC:9B:A2:E8:1F:07:AD:F9:CD:54
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584493145D7076FBEC3C22BB16C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb8fca6c-1b2e-323d-aa6d-73e2e3b2583e.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     36522
IP address blocks:        174.90.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:5d:70:76:fb:ec:3c:22:bb:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=ae90b60b-e205-4670-a8ed-4d5c20780f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:ed:aa:fa:7a:10:d9:67:94:38:58:82:c3:
                    0e:a0:45:4b:ba:f6:17:c5:f3:0c:c7:6d:6c:72:fa:
                    7d:11:98:8c:a1:df:9d:b1:13:ee:35:35:6a:6b:00:
                    fd:ed:93:b0:5f:f9:c1:83:b0:26:ea:6d:bf:35:cd:
                    d2:c0:41:a5:da:b0:5f:5a:45:3a:aa:6c:fa:b3:b5:
                    78:a9:c1:86:e5:0d:1e:eb:8c:eb:60:04:0a:86:6e:
                    18:3e:d1:02:66:52:0c:f3:7f:fb:f2:40:f0:f5:18:
                    80:ea:d2:97:9a:47:2e:82:e9:d1:f2:91:68:a5:83:
                    e6:f8:f5:52:6b:c1:49:a3:36:ef:49:e4:d3:fc:e2:
                    a5:00:d0:f2:54:af:8d:c2:90:50:c0:32:09:75:95:
                    6a:c2:3c:01:2d:f8:23:12:f0:d6:9e:d7:90:11:b0:
                    1e:b9:f9:29:08:9b:9b:6b:23:2d:99:dc:da:ff:22:
                    14:e5:83:f2:a1:08:cb:bc:e1:0e:4f:a6:9b:41:8a:
                    a0:6c:58:03:52:82:45:61:8b:5d:cd:f4:25:fa:96:
                    c6:0d:cd:c5:fd:20:5f:8f:71:00:ab:d4:db:7a:34:
                    a9:d0:9a:f2:67:7c:84:08:45:0a:52:0b:67:30:f2:
                    9f:f7:74:ab:17:15:a3:dd:4b:48:b6:3c:59:67:0c:
                    a0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CD:2E:B1:0F:42:B2:D5:CA:B1:FC:9B:A2:E8:1F:07:AD:F9:CD:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb8fca6c-1b2e-323d-aa6d-73e2e3b2583e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.90.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b0:4c:69:a6:3d:3c:2e:5e:cd:eb:45:73:2a:0b:ac:dc:43:
         f0:44:12:d4:35:aa:f7:00:0b:92:ce:a6:0b:79:a8:7f:c6:fd:
         3f:a5:1b:0a:33:88:6c:1c:f5:5d:75:5d:14:8a:0a:02:0a:15:
         49:fc:76:e8:e3:9e:dd:ac:aa:87:42:91:04:c1:e5:b6:68:b1:
         3b:9a:de:62:3c:49:6c:d1:e9:22:97:32:4b:53:f5:b8:b5:0a:
         cb:e4:94:a5:09:a8:53:d7:9a:1a:28:94:1b:ed:ae:7c:29:2e:
         fd:8c:00:20:c4:f2:53:9f:52:7e:d7:94:16:77:a3:e5:c0:67:
         72:fd:98:de:85:19:3c:06:31:76:a9:ab:ec:ce:07:d1:26:6d:
         9f:b2:9c:61:4d:8d:d1:59:f3:22:28:3c:41:75:f8:d5:0c:fb:
         d1:4b:7a:70:d7:96:19:16:4b:5c:67:12:09:f3:a6:f4:88:c2:
         5d:15:6e:49:cb:f0:30:d9:07:0a:71:4b:48:d5:95:94:93:ff:
         1f:5b:7c:b0:66:7e:67:bf:3a:1e:2e:9d:1d:a4:8b:5b:c6:3d:
         c6:a3:f3:ce:4b:54:d2:e6:f9:44:5b:09:13:18:7b:1b:70:0f:
         1c:c3:6c:2b:b3:7a:6c:cf:9b:00:9f:22:40:03:d9:bb:14:6f:
         04:f0:b1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----