Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/4621f62f-df37-3c06-8b47-d08d804cfd6e.roa
File:                     4621f62f-df37-3c06-8b47-d08d804cfd6e.roa (raw, json)
Hash identifier:          pyTnW9OaHR12YVV8fOLtwyTB0RqukNFTNPWyt2zjJ74=
Subject key identifier:   AD:72:C5:50:B6:43:71:97:85:24:20:A7:BF:97:9F:34:59:EA:FF:32
Certificate issuer:       /CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f
Certificate serial:       010D0C9F43285841E46E2A759728C508DB0DE4C0
Authority key identifier: D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/4621f62f-df37-3c06-8b47-d08d804cfd6e.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Fri 21 Jul 2023 09:45:17 +0000
asID:                     7018
IP address blocks:        74.80.254.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:2a:75:97:28:c5:08:db:0d:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 21 09:45:17 2023 GMT
        Subject: CN=60309820-9fc4-48a7-83d7-a4091be9b3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:b9:01:1b:4e:c7:8e:4e:3d:97:a8:5b:f5:
                    0b:df:5f:aa:df:fb:c1:b9:55:da:14:07:41:dd:25:
                    20:34:74:1b:ba:ac:a7:19:b2:39:66:b0:cb:f8:5d:
                    a6:a3:ef:ff:79:89:45:eb:61:dc:c1:f3:77:4d:86:
                    b7:64:5f:11:5e:f3:9a:d4:45:92:3d:02:cb:a2:3a:
                    5d:9d:8d:44:46:de:ae:4f:96:58:72:63:a5:94:71:
                    dc:ec:40:95:1d:f5:80:86:f5:0e:63:64:e3:96:80:
                    50:2c:c5:ba:15:c9:f2:cd:22:28:3c:82:4c:eb:7a:
                    0f:6c:c3:8b:4d:a8:ab:e2:b1:16:ca:2c:a5:cb:36:
                    7c:60:2f:92:59:0a:0a:75:1b:24:5c:ca:62:ad:5f:
                    73:94:3e:6a:94:2e:85:d2:ac:7e:3e:4c:69:4e:12:
                    cd:ff:41:01:92:94:58:44:a5:6a:78:0f:fa:ec:b5:
                    9c:1f:8d:fc:fc:bd:20:2f:97:b0:c2:b4:c7:62:7a:
                    6c:05:28:17:7a:e8:32:f5:73:ea:22:87:fc:8b:dd:
                    e2:27:3a:ae:4e:c4:1d:6a:69:26:9a:55:fc:00:79:
                    a4:6f:fe:4d:42:a5:a7:99:ec:32:77:63:92:05:2e:
                    91:25:94:fb:5b:ab:57:3e:c8:65:fd:ea:b0:e4:38:
                    89:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:72:C5:50:B6:43:71:97:85:24:20:A7:BF:97:9F:34:59:EA:FF:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/4621f62f-df37-3c06-8b47-d08d804cfd6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.crl

            X509v3 Authority Key Identifier:
                keyid:D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c1:76:09:65:2f:64:ab:4e:16:39:9f:f5:f2:d2:ad:6d:0c:
         80:61:03:2b:f4:a7:ed:1c:44:c7:44:11:f4:45:7f:4e:9d:24:
         69:bb:89:89:b9:80:ff:37:6c:b5:e9:40:ba:f5:e3:bd:49:59:
         6b:12:02:e6:4e:df:bc:a4:93:12:8b:90:cb:25:14:e3:3b:94:
         fc:a9:9f:cf:30:ba:8f:84:28:97:b4:f4:83:1f:3c:30:4d:03:
         9e:34:1a:b7:fa:46:02:f9:4f:af:74:e3:0e:74:26:93:39:74:
         91:31:2d:9f:68:d0:18:e0:21:20:d1:4d:0b:5b:27:38:52:da:
         dc:91:0d:c5:75:f0:f7:67:25:50:d0:8b:ed:e4:47:f0:30:29:
         31:2a:54:cc:09:a1:4d:a6:71:e8:34:ca:51:5b:cb:ee:01:99:
         ab:9c:14:16:26:b0:d0:b0:8c:a4:c6:e7:8b:4f:2f:93:fe:1b:
         1b:7f:6a:09:fb:d2:72:91:03:79:09:d5:7c:68:07:05:0a:c7:
         f8:b7:38:fc:49:68:f1:9f:c5:ba:9a:07:37:e3:9d:ed:d3:a0:
         49:81:b8:d9:49:91:91:72:be:c4:af:5f:5c:86:84:68:a2:75:
         69:ab:9b:28:f0:80:e6:8d:4d:5b:b4:b5:3d:81:f0:10:d6:63:
         7e:2e:94:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----