Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5956b84c-d718-383a-8cc9-7b118a1c7932.roa
File:                     5956b84c-d718-383a-8cc9-7b118a1c7932.roa (raw, json)
Hash identifier:          ZN+CwOk2XlW+onQQ+kTDdA4cHseMJKLa0rYDAyzzTuU=
Subject key identifier:   9E:06:87:C4:31:E6:85:76:74:4E:32:0A:97:FE:8A:19:1C:E3:12:62
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7BD3BA7EFCDB3689B8BD180
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5956b84c-d718-383a-8cc9-7b118a1c7932.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bd:3b:a7:ef:cd:b3:68:9b:8b:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=ad2808a4-9f71-4cdd-ab62-ff66d2a9f530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:54:3c:97:db:5c:73:3c:33:27:be:52:0e:07:
                    f2:e5:6a:5a:11:11:ff:58:f5:e5:6f:ac:1a:7a:7b:
                    79:40:2e:cd:67:55:d0:af:c5:42:75:bb:51:6c:07:
                    6e:c0:3e:99:d6:c3:45:c1:63:87:68:17:9a:55:54:
                    26:05:da:75:84:50:32:e0:80:0a:64:64:88:2d:29:
                    6a:8f:b2:12:44:de:6f:23:a1:b3:aa:1f:18:71:5c:
                    3e:e1:cd:c2:1b:bc:47:4b:14:d7:65:13:41:f7:47:
                    7f:61:1d:46:50:2f:72:93:90:81:cd:44:15:df:2e:
                    5c:62:e1:fc:ec:bc:7d:50:6c:34:4d:25:77:28:5f:
                    d6:7c:81:c6:5f:8d:07:f0:fb:b6:06:b7:6d:d6:da:
                    95:f4:6e:ba:b4:a1:de:a6:12:0c:d2:74:29:e2:c6:
                    95:1d:4d:65:90:a0:44:a4:b1:da:de:6f:35:5d:09:
                    6d:3c:81:10:c8:83:93:ab:25:b3:66:98:c5:0a:24:
                    bd:26:6b:d1:1e:7a:24:48:dc:93:da:2d:91:b6:d4:
                    0e:d8:43:6d:69:e2:67:69:31:ef:a5:26:71:6a:82:
                    85:6d:f6:96:8d:8c:0e:d1:f7:f8:aa:c4:8f:47:22:
                    b7:3d:94:1a:dd:75:a2:46:c0:7e:a8:d9:60:11:a0:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:06:87:C4:31:E6:85:76:74:4E:32:0A:97:FE:8A:19:1C:E3:12:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5956b84c-d718-383a-8cc9-7b118a1c7932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:61:09:1a:0a:d4:02:23:ac:cd:fa:16:21:9e:4a:15:16:83:
         99:91:b4:0b:73:0e:50:72:25:e2:55:60:6f:47:4a:8a:15:1d:
         29:38:5b:f5:70:33:c7:20:95:97:bb:05:01:97:5a:38:dd:6c:
         3b:76:2c:48:18:06:5e:c4:a3:0b:80:66:61:4d:63:95:4d:4f:
         34:f0:0e:a6:62:2e:b5:22:03:ef:83:6f:d3:96:96:02:4b:94:
         15:d6:ea:fc:50:4e:9b:be:6b:a0:e7:7c:99:e5:1f:ae:76:46:
         4d:b9:79:04:66:92:fe:b4:6e:44:80:79:d7:c6:d0:2c:b4:a0:
         03:b1:16:f8:53:a8:f0:a7:60:68:63:ee:a4:ec:4a:e9:e9:a4:
         9c:de:75:9c:a7:4b:ac:af:d0:bc:b8:8e:95:02:df:ca:1f:a8:
         be:fa:a1:2f:0c:41:2d:a2:8f:ca:68:8c:f0:b9:bb:3f:63:21:
         8c:04:da:e5:6a:d6:45:76:7f:db:71:72:5a:fa:a3:cc:a6:f4:
         c6:c7:14:22:79:08:bd:06:c0:3d:8e:29:04:ce:5f:5e:8d:6f:
         2a:1c:d5:47:b1:cc:ff:ca:f8:21:7a:bf:1e:12:ed:df:5f:d3:
         97:8b:ce:7a:e8:ec:71:a1:c4:ce:2c:79:d7:78:b9:97:4a:bb:
         af:dd:b2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----