Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7f5a3986-eeea-3e24-a4ee-ae61026e3020.roa
File:                     7f5a3986-eeea-3e24-a4ee-ae61026e3020.roa (raw, json)
Hash identifier:          Lq2fm6JpP/6mDrVWN7y/bi5Z0p3LbydgRKeP0jz0mg8=
Subject key identifier:   87:A9:26:E7:DA:BC:5A:55:2B:69:52:3C:4F:41:9D:46:67:9D:38:31
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285842B0FE7C5C51E239BAD2BA9E00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7f5a3986-eeea-3e24-a4ee-ae61026e3020.roa
Signing time:             Fri 28 Jul 2023 01:00:16 +0000
ROA not before:           Fri 28 Jul 2023 01:00:16 +0000
ROA not after:            Thu 26 Oct 2023 01:00:16 +0000
asID:                     60800
IP address blocks:        69.30.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:fe:7c:5c:51:e2:39:ba:d2:ba:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jul 28 01:00:16 2023 GMT
            Not After : Oct 26 01:00:16 2023 GMT
        Subject: CN=d7e8b6c6-0e38-4a70-af0d-3c900eb2cbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:98:2b:fb:69:3d:5c:a3:49:e9:d8:cc:12:
                    94:d7:94:06:f2:d2:ed:85:aa:18:6f:8a:95:87:9d:
                    df:cd:90:79:15:b4:33:0a:58:52:72:cc:10:ef:ef:
                    11:e0:5c:34:03:f7:57:76:ad:5f:f4:3b:74:3f:af:
                    62:89:da:e7:e5:2b:44:8a:94:21:e4:3b:61:c9:8c:
                    bb:84:32:9a:91:af:d6:a5:90:a4:4d:36:43:09:32:
                    fc:1b:cd:46:4a:cc:b3:ae:b7:3c:7f:37:5d:da:4a:
                    cb:d6:30:59:f7:52:be:13:31:a7:9d:1a:95:f3:36:
                    15:eb:5b:b4:24:fa:2f:6a:86:e0:93:00:f7:3e:4d:
                    54:af:d1:c2:a8:4a:1d:c9:c9:01:39:a9:7a:49:62:
                    f1:ac:8a:17:7d:29:eb:ea:2d:a2:ac:fa:65:c9:28:
                    10:6b:cd:10:c6:f7:77:65:0c:bd:fe:05:e7:a7:0d:
                    bc:ef:15:d9:a3:14:ff:39:40:1c:42:56:1e:ae:f8:
                    cf:88:a6:c8:61:5e:ee:94:bc:a2:ab:b9:28:07:bb:
                    ba:32:9e:66:45:e7:3c:99:01:9a:4f:a2:ca:3a:e2:
                    8b:8e:f3:ff:54:d3:db:95:43:7f:70:1c:e0:8f:1a:
                    b0:40:72:02:b0:cf:7e:7a:b2:f1:26:57:de:b5:bc:
                    f5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A9:26:E7:DA:BC:5A:55:2B:69:52:3C:4F:41:9D:46:67:9D:38:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7f5a3986-eeea-3e24-a4ee-ae61026e3020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.30.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3a:66:0d:f5:4b:d3:99:e5:ec:6f:e9:2c:9d:2b:4c:47:d7:
         a8:9e:26:3b:cf:89:fe:f1:ca:0e:9a:cb:35:4c:06:31:f9:6e:
         49:3f:45:7e:b0:0f:ba:ba:4f:29:3d:24:78:37:21:23:da:a7:
         3d:9d:81:c2:b6:4d:f0:f6:5d:11:51:c7:8e:38:b9:ad:e4:02:
         c0:06:b2:0e:05:7e:ab:1e:5a:5c:1b:45:ee:4a:ff:73:96:d1:
         5c:c4:f6:24:a0:1a:b2:8c:38:0b:04:14:2d:d6:d2:f6:41:81:
         ee:cc:2b:8a:ab:2e:81:6f:92:14:f0:bf:f5:b3:2c:a7:ad:25:
         5d:fc:fe:1b:a0:53:f6:3e:af:04:ab:1b:28:2c:29:5e:50:9f:
         68:c2:55:26:27:c7:40:3c:f3:01:33:e5:2b:0b:d3:cd:d9:f5:
         82:c2:7e:4f:6b:e5:d0:8a:0a:40:95:92:0d:fe:bd:51:5f:68:
         0b:e5:fa:ff:0e:f8:6c:df:8e:90:c8:09:f9:31:f9:fa:19:6f:
         7e:e0:a5:65:07:f1:a4:21:d5:a6:7e:18:df:fb:cd:f9:66:79:
         b1:e8:cf:51:9e:ee:ab:b7:9c:c8:df:0a:02:70:00:f4:e4:f3:
         40:17:13:80:a8:cb:3e:a2:04:05:f9:b6:6d:f1:aa:a5:f6:00:
         c6:03:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----