Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/da695cc9-a906-320e-9b57-d83a0381d33a.roa
File:                     da695cc9-a906-320e-9b57-d83a0381d33a.roa (raw, json)
Hash identifier:          Jyd2nigSJ2l5NJVq/HoFnFy3VKcREzPlUat0l4sPg1c=
Subject key identifier:   09:86:81:CF:BD:A1:23:47:76:07:C4:95:4C:27:3D:80:FB:DE:44:C5
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F43285841E46CCB70B80795809F596588
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/da695cc9-a906-320e-9b57-d83a0381d33a.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Mon 05 Jun 2023 15:09:00 +0000
asID:                     7922
IP address blocks:        72.22.32.0/19 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:cb:70:b8:07:95:80:9f:59:65:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun  5 15:09:00 2023 GMT
        Subject: CN=847efc82-1a87-488d-95db-607263c07ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c0:9f:1e:f2:1f:7a:c9:43:2c:77:04:f9:16:
                    78:69:f0:a5:99:c7:5e:76:83:64:02:1f:a5:76:08:
                    db:7b:c9:fb:c9:c7:49:e0:e4:7a:e8:35:b2:96:78:
                    f6:8b:c7:ff:e5:08:65:46:33:f5:c2:72:23:e3:ea:
                    4d:a3:12:b0:66:b1:7f:29:93:9a:82:35:67:e7:0a:
                    c2:71:7e:dd:6c:55:5e:18:c6:26:8e:60:e5:14:99:
                    1f:5d:1c:ed:9d:f7:90:19:d7:8a:1c:7a:ae:e3:ce:
                    79:69:fe:8a:21:7a:d6:3f:00:27:90:23:b1:f5:a8:
                    53:17:14:d0:29:c1:f9:18:99:72:c5:c8:48:61:cb:
                    32:49:58:f4:6a:65:75:53:65:a9:66:d6:fe:4e:d5:
                    c4:09:e1:80:5f:c3:f4:bb:46:21:06:6e:01:90:94:
                    32:ab:63:2d:b1:be:ff:37:8a:4e:bb:54:b7:2c:79:
                    a4:72:a5:ef:2a:63:46:ba:df:24:e6:62:50:aa:2d:
                    e9:19:f3:d1:22:bd:e8:ee:40:26:0f:73:ee:d9:13:
                    fe:bd:e0:c3:5e:d2:bd:e8:ea:2e:a7:69:42:8b:5d:
                    78:4a:df:1a:4d:1d:2f:fd:83:9d:9a:71:6c:47:5e:
                    73:d4:01:38:b7:2f:97:28:c9:cc:66:57:5e:c3:44:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:86:81:CF:BD:A1:23:47:76:07:C4:95:4C:27:3D:80:FB:DE:44:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/da695cc9-a906-320e-9b57-d83a0381d33a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:78:08:f6:b6:3b:6c:aa:6e:4e:7f:5b:ef:03:bc:26:c4:c4:
         75:77:06:18:37:62:6c:ef:61:cf:6d:8b:1e:ea:22:b6:ff:e9:
         60:60:02:c1:1b:55:fc:4a:bd:3c:90:88:5a:89:97:3f:14:5b:
         4a:82:63:ed:c2:92:5d:38:cb:79:75:40:54:9b:de:d0:f6:89:
         4f:93:1a:fb:4d:17:42:fa:08:ad:61:20:12:df:f5:b0:47:08:
         08:f2:a2:50:3a:0b:9d:0d:ee:26:c8:a0:0f:25:ac:c5:43:99:
         42:ee:0c:2a:53:04:3e:eb:d6:f6:43:12:26:9f:05:d2:bf:ba:
         8d:b0:d7:f6:39:25:5a:e7:88:b7:09:12:70:10:5f:bd:ae:50:
         98:de:21:8b:22:65:06:d7:1a:03:9e:22:e4:06:24:b0:a7:d3:
         73:76:b8:7c:78:28:13:c7:f3:be:4a:8c:0f:83:ae:dd:95:b6:
         52:ef:c0:17:bd:7b:1d:8b:65:58:10:c8:72:6d:9d:49:7e:f3:
         88:b7:d6:5a:91:a9:00:82:9d:ca:53:e3:d3:9a:4f:3c:b4:8c:
         c3:33:bc:ac:d4:d2:c0:60:62:2b:48:93:10:a0:6c:3f:77:9c:
         5f:95:c7:46:4a:df:e1:47:8e:66:6b:d6:66:5f:cd:9f:f5:8b:
         4f:5f:ee:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----