Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/9be4460d-bd89-3ed6-90b7-583c9e3a0ce4.roa
File:                     9be4460d-bd89-3ed6-90b7-583c9e3a0ce4.roa (raw, json)
Hash identifier:          MHOr6AZMSdnaLzU9YgSCEAjcCZlFEb0R+5XMDTPu9SY=
Subject key identifier:   85:82:B2:4D:63:18:D1:4B:A5:05:0A:D9:AC:F2:20:60:69:7D:FB:6A
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285841F7F4661C3DD06229F2C76B00
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/9be4460d-bd89-3ed6-90b7-583c9e3a0ce4.roa
Signing time:             Mon 22 May 2023 18:15:25 +0000
ROA not before:           Mon 22 May 2023 18:15:25 +0000
ROA not after:            Sun 20 Aug 2023 18:15:25 +0000
asID:                     61317
IP address blocks:        72.14.141.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f7:f4:66:1c:3d:d0:62:29:f2:c7:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: May 22 18:15:25 2023 GMT
            Not After : Aug 20 18:15:25 2023 GMT
        Subject: CN=5f07c276-5904-44ac-b2d7-2c589183b59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fe:0e:f6:5e:b2:7d:cd:64:44:8d:59:bd:79:
                    21:66:f6:f4:52:6c:9d:c0:cd:95:a0:a5:4b:e3:50:
                    13:ed:c3:36:a5:2c:01:17:ba:51:c1:12:01:90:39:
                    a4:fc:a0:af:f3:45:90:17:f8:28:31:5e:79:f5:09:
                    3d:ea:fb:ab:6e:b3:3b:fc:f0:5f:c0:85:5c:62:8f:
                    d3:fc:c6:b5:4a:0a:01:a3:28:1d:5e:6e:f6:97:76:
                    cb:65:92:ee:44:1b:6a:09:5b:99:25:60:18:52:33:
                    15:4d:17:15:5c:60:bb:a8:9d:59:27:0d:28:86:3b:
                    12:cb:0b:6f:89:e2:66:f0:0b:4b:a4:41:9e:e4:b1:
                    a6:7b:fe:ca:35:7c:07:6a:9d:d8:35:f9:b5:c8:be:
                    80:5c:79:bc:b3:64:4c:7a:98:fd:71:f7:3f:a8:d4:
                    fa:af:da:df:33:42:46:c3:9d:06:0a:60:16:e3:1a:
                    ba:6c:5e:89:89:e3:8a:af:b2:79:85:ae:97:f6:f1:
                    b6:2c:30:f6:42:db:98:33:d8:58:bc:cf:e6:b1:fe:
                    3a:8a:96:47:4e:d1:7a:76:a2:bb:d5:85:31:0f:75:
                    4c:e8:9d:eb:34:36:f5:ed:8e:73:ec:b9:a6:eb:3f:
                    5d:75:a9:d6:c8:ff:77:72:30:d9:dd:1a:ca:df:1d:
                    30:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:82:B2:4D:63:18:D1:4B:A5:05:0A:D9:AC:F2:20:60:69:7D:FB:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/9be4460d-bd89-3ed6-90b7-583c9e3a0ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b4:eb:9a:64:47:9a:b7:0e:4a:0f:8e:fe:ba:de:f9:06:5f:
         67:9c:20:b2:e5:91:fd:ff:84:da:14:e7:14:d7:69:79:ab:21:
         57:08:4c:c0:89:26:78:76:1d:c5:d5:bc:f6:7e:98:3d:f5:26:
         16:4a:5e:2a:b7:30:d3:fd:48:98:46:30:3a:c9:de:7f:0b:a3:
         b2:26:17:b9:42:37:c9:68:42:d6:5a:6d:b9:89:9c:46:e7:46:
         41:79:57:c4:87:5d:d3:a9:7e:eb:90:c4:11:3b:1c:57:f9:98:
         d3:f9:ac:86:9d:07:46:cb:b0:6a:f2:53:a5:61:ca:0e:45:08:
         f9:29:45:7b:fe:47:0e:e6:77:88:0d:80:96:38:8b:17:7c:8e:
         1a:6f:78:fb:c3:7f:6f:05:97:6e:5f:b2:41:33:dc:e8:3a:5f:
         2f:99:51:a2:f3:74:fa:27:9e:e8:98:5c:3b:04:1a:79:8f:2f:
         8c:3c:84:f4:ec:f0:f8:ff:f6:15:52:b5:21:3f:7a:db:d4:64:
         ae:19:4b:ea:72:e7:15:58:3d:d7:4f:11:91:fd:04:2b:a0:22:
         69:99:f7:82:1f:0c:b9:7c:d7:45:08:97:0e:22:4c:8c:7d:80:
         a7:a8:46:54:ff:81:7e:64:08:a5:e3:b4:b4:a6:c1:60:4e:bf:
         7c:0c:69:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----