Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91b78456-963e-35de-968d-8d4aae9f1310.roa
File:                     91b78456-963e-35de-968d-8d4aae9f1310.roa (raw, json)
Hash identifier:          LlZvy/EI4Ck+woE36i4mK/g2YMomh5EcT8uIj1q3AB8=
Subject key identifier:   07:D5:EB:41:2D:81:07:40:89:E5:FC:26:C7:99:7D:E1:5C:07:A4:33
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285841E446DB39A41231F75CB5F680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91b78456-963e-35de-968d-8d4aae9f1310.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 18 Jul 2023 05:30:39 +0000
asID:                     61317
IP address blocks:        108.165.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:46:db:39:a4:12:31:f7:5c:b5:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Jul 18 05:30:39 2023 GMT
        Subject: CN=f44c281a-e972-4fe4-a112-fcaea7c12cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8f:69:96:5f:14:cf:ae:ce:d0:f0:20:ca:9c:
                    83:f5:29:95:74:f5:ed:d7:e4:d6:e2:8f:0a:96:23:
                    05:1c:85:c9:42:04:c5:73:33:39:e7:47:e8:49:06:
                    97:24:eb:c5:2c:75:26:ec:ad:30:af:0d:b8:ea:94:
                    de:d3:70:69:24:5b:00:cd:4a:9b:2d:3a:40:7e:9b:
                    46:81:6c:78:25:75:66:1b:57:63:c2:fc:83:ee:7b:
                    80:3f:d5:14:c1:71:71:45:24:79:73:4d:75:9e:ec:
                    fd:4d:d1:23:66:3a:4a:13:e0:45:b7:2b:99:12:21:
                    2e:70:5c:83:a7:01:2f:28:40:c3:2e:cd:5e:25:2c:
                    4a:cb:58:5c:57:60:de:5a:3f:f5:9c:bf:22:2a:c6:
                    30:fd:48:99:5e:8c:fa:24:94:28:af:34:35:55:47:
                    81:3d:fd:04:99:31:11:b9:f4:b5:dc:ca:a6:e5:25:
                    03:bb:97:e1:c5:bc:f7:3a:52:97:66:d2:59:db:2a:
                    a8:76:9d:b5:65:eb:b8:b2:92:8b:b2:2c:05:e8:cc:
                    ca:ff:bc:4d:bb:58:fb:dc:2c:3f:e9:77:60:95:38:
                    cc:46:28:04:91:61:7b:20:fe:29:d2:65:ba:92:81:
                    8f:b2:bf:ba:be:4e:40:8d:f4:51:b1:5e:e3:f0:ce:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D5:EB:41:2D:81:07:40:89:E5:FC:26:C7:99:7D:E1:5C:07:A4:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/91b78456-963e-35de-968d-8d4aae9f1310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:54:35:90:d8:f4:3b:37:9a:c0:1c:a6:84:95:55:9c:b7:68:
         80:3e:d4:28:58:4a:b6:4f:f2:1f:b0:82:1c:74:8d:ff:8b:bb:
         01:ff:84:aa:a7:38:d3:d6:5b:b3:96:a5:6e:e3:c8:5e:e7:15:
         3c:b1:4f:33:6f:16:c1:cb:06:fa:33:e8:36:e3:59:57:0d:d2:
         14:8c:fe:c4:3e:ff:c5:70:47:54:7a:9d:24:c2:9a:71:ac:0c:
         0f:28:21:46:d2:ee:01:73:b5:f6:1b:30:fb:b9:e7:fc:e5:2c:
         a8:f2:a6:cb:69:bf:54:27:8e:88:39:b4:40:6c:1b:7a:e5:53:
         67:6b:63:e6:40:94:87:49:c3:3b:1b:58:73:90:6d:ac:52:49:
         59:84:46:2b:57:68:73:ee:14:be:b5:7c:01:07:50:08:73:9d:
         bf:14:c0:ba:99:81:6a:33:f4:48:17:ba:20:24:77:bb:56:dd:
         f5:4a:d6:ab:01:50:cf:c2:67:c8:78:4b:4a:a1:32:d8:71:40:
         4d:8f:a2:67:36:87:09:68:0a:75:6a:9b:2e:81:b8:75:66:6e:
         23:39:a7:09:15:fe:10:8e:7e:84:23:c3:64:49:1b:65:40:bb:
         9f:65:3e:ec:0f:32:ab:23:ba:a0:88:b2:89:69:f6:b9:52:99:
         c1:e0:d2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----