Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3e68c36-2537-3c0b-9eca-e3ca188b71a3.roa
File:                     a3e68c36-2537-3c0b-9eca-e3ca188b71a3.roa (raw, json)
Hash identifier:          NesHCbiyLfGRwzrZyDQcbduaXFpf1RmScentyUKhYK0=
Subject key identifier:   EF:78:1A:1E:CA:BE:A2:C8:E3:33:F3:77:86:2D:15:0C:11:16:CA:5E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2B4957E38A29AF951871E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3e68c36-2537-3c0b-9eca-e3ca188b71a3.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     35911
IP address blocks:        209.226.48.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2b:49:57:e3:8a:29:af:95:18:71:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=6f862f89-de02-4ce8-9898-739c17125262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:fc:1c:3d:7a:48:27:da:fe:97:d6:d3:59:
                    12:e3:c0:af:9e:23:e2:35:60:2a:61:14:f5:78:f0:
                    7d:2d:9c:f8:7a:16:dd:24:42:8a:c3:b7:f2:61:65:
                    1e:9d:af:52:2f:3f:46:9c:10:e1:71:57:fa:6c:de:
                    8b:b9:fd:bb:37:f7:80:96:4f:c7:ac:63:af:22:fb:
                    36:bf:69:ab:b3:ea:c9:81:22:af:85:bf:31:bc:5b:
                    2f:ae:84:43:7c:5f:8e:f9:f0:7f:75:49:75:53:08:
                    1d:b8:1f:fc:f2:5d:05:5f:35:6a:1b:de:9d:f4:c1:
                    01:ba:64:71:56:d0:1a:59:2a:19:96:cc:3f:77:77:
                    85:63:13:8b:27:df:71:9e:ac:eb:d7:8c:61:51:c9:
                    ab:fc:e5:80:0d:9f:fc:31:75:aa:24:9a:f0:36:cd:
                    8c:8e:e4:57:99:84:ee:be:bc:16:c9:cf:31:e1:02:
                    9f:d7:c1:93:b3:b6:bf:00:86:a2:f6:7f:28:39:2a:
                    b1:bd:bc:71:3f:db:32:0f:aa:84:36:51:10:f0:4f:
                    a8:6f:5d:b0:7c:04:73:47:92:06:8b:8d:a3:27:87:
                    8c:4d:4c:c2:72:5a:0a:8e:b0:e5:40:6e:4c:f3:b3:
                    51:ba:4a:5f:71:87:cc:a6:65:aa:e2:3f:9e:dc:3c:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:78:1A:1E:CA:BE:A2:C8:E3:33:F3:77:86:2D:15:0C:11:16:CA:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a3e68c36-2537-3c0b-9eca-e3ca188b71a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:7d:58:88:29:cb:f8:92:ce:4e:50:13:b5:e0:bd:70:9d:87:
         66:91:ec:e7:d5:cd:d2:ff:27:13:49:19:61:79:43:4c:0b:09:
         e1:e8:81:92:ad:7e:be:57:eb:83:7a:c9:b2:9d:13:45:2d:5e:
         4b:8b:e1:fb:08:4c:78:c1:71:af:0f:c7:1b:6f:07:d4:29:ff:
         bd:99:15:eb:54:c4:f9:32:5c:35:08:4e:1a:69:76:03:49:5c:
         4a:2e:75:ce:28:d3:e4:a4:61:f5:ab:ce:aa:9b:0d:64:c2:bb:
         c1:3d:4e:16:08:f8:62:b9:14:ef:e7:4a:f1:29:ff:33:93:c0:
         d6:cd:3e:39:be:12:17:27:50:47:fd:40:7b:64:ca:cd:d6:3f:
         06:88:ae:a6:a3:5a:f8:f2:a8:a9:60:da:8f:a7:bd:51:13:21:
         51:00:60:95:8a:db:b7:73:9c:ff:9e:19:65:8a:04:b7:c4:74:
         e0:c1:42:fa:be:6c:d3:c2:95:58:63:af:97:20:2c:8e:51:b0:
         cf:c3:c0:46:9e:20:38:e4:80:0a:4f:e6:23:1d:2a:2d:e4:e7:
         2f:2d:97:51:ca:f0:a9:d6:ac:9a:a5:cd:09:fe:1d:65:63:e7:
         0d:91:3f:6b:08:b4:dd:b2:7f:8a:2b:c4:46:6c:ed:e2:5e:02:
         37:bc:a5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----