Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/4446f542-38a3-3bbd-b670-b982c7e117c6.roa
File:                     4446f542-38a3-3bbd-b670-b982c7e117c6.roa (raw, json)
Hash identifier:          480m/4txYzGrnEVN/273zF4jFzDIJLg66iM4FmeeyXU=
Subject key identifier:   11:4A:80:7A:9E:E5:FD:17:B8:B7:C0:26:54:12:CF:00:F5:C3:A2:63
Certificate issuer:       /CN=55452ee1-697d-484d-b971-7a8c75820ecc
Certificate serial:       010D0C9F4328583946EC2873CA7725E9310665F6
Authority key identifier: B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/4446f542-38a3-3bbd-b670-b982c7e117c6.roa
Signing time:             Fri 12 Mar 2021 05:00:00 +0000
ROA not before:           Fri 12 Mar 2021 05:00:00 +0000
ROA not after:            Tue 28 Jun 2022 04:00:00 +0000
asID:                     32391
IP address blocks:        130.51.0.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:46:ec:28:73:ca:77:25:e9:31:06:65:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55452ee1-697d-484d-b971-7a8c75820ecc
        Validity
            Not Before: Mar 12 05:00:00 2021 GMT
            Not After : Jun 28 04:00:00 2022 GMT
        Subject: CN=38bbdc04-d778-473b-bd98-fe0d806db14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:9c:cc:0e:a2:11:aa:12:42:d3:00:5a:4c:
                    36:b1:d9:df:c3:c7:2c:32:eb:78:42:67:76:4b:c3:
                    9d:be:8a:ef:b9:e4:10:94:7a:59:5b:79:69:7f:21:
                    1d:82:d6:e7:35:07:37:1d:74:a9:08:a9:04:01:d8:
                    14:f4:5d:c8:f2:e3:f8:06:15:1d:d2:6a:20:11:5a:
                    a9:c8:f9:5e:3f:35:27:32:e2:20:24:18:94:9c:fc:
                    a1:2d:cb:ce:96:5d:a3:ad:da:db:9d:4f:f1:62:cc:
                    35:76:cf:c4:76:44:29:93:29:34:e2:44:2a:ce:c8:
                    ae:d3:ab:16:1c:0e:aa:be:cc:7c:1f:0d:94:dc:b5:
                    c7:f4:44:77:4d:a5:68:dd:c7:ae:94:f0:fd:71:63:
                    fc:9f:95:a2:74:bc:68:97:17:41:b0:de:c0:16:29:
                    5c:66:a2:b3:a6:3f:0d:09:e7:19:19:28:de:ee:02:
                    68:a1:5f:af:75:af:99:96:8d:93:ee:78:80:d0:7e:
                    e6:91:06:b5:3b:21:39:4b:8e:4f:eb:dc:b1:93:3d:
                    b4:79:ee:37:a8:06:d3:22:fa:45:39:66:1e:2b:5d:
                    93:2c:2a:52:40:de:ff:78:a7:9b:22:27:d3:a3:72:
                    b2:87:b0:68:82:d2:9a:e3:de:f4:c1:24:57:4c:ac:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4A:80:7A:9E:E5:FD:17:B8:B7:C0:26:54:12:CF:00:F5:C3:A2:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/4446f542-38a3-3bbd-b670-b982c7e117c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc/55452ee1-697d-484d-b971-7a8c75820ecc.crl

            X509v3 Authority Key Identifier:
                keyid:B6:86:A0:07:79:5A:6A:89:6F:58:55:92:09:53:B7:56:7D:D3:7C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55452ee1-697d-484d-b971-7a8c75820ecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f1:a4:0d:1b:1e:d1:b2:e1:77:30:82:32:f9:ad:d5:e8:75:
         ef:e6:3b:14:9b:b5:43:9f:ab:03:9a:34:ca:56:14:7c:a0:bf:
         b4:91:f9:78:50:23:ad:eb:1e:21:3d:13:97:bb:a3:c1:ed:8b:
         8c:fa:fa:8d:a8:a8:ab:a9:5a:84:47:fe:a3:20:21:b8:fa:13:
         9e:c9:14:2e:24:89:88:3b:c6:1f:ce:9a:a1:99:4b:2d:2b:48:
         02:43:42:63:a5:ed:3d:87:d1:8c:92:4e:dd:19:72:f6:0d:1b:
         9b:d7:d8:9e:42:1f:d1:44:fa:18:79:b5:e9:22:fd:a6:6e:6a:
         ac:63:03:55:29:d6:22:9e:63:23:60:14:2a:14:be:3d:be:15:
         44:75:ca:f6:25:14:e0:b2:a0:bf:7b:91:09:3b:08:1f:f0:fc:
         b3:20:0f:fe:79:90:00:b2:65:a8:f5:4e:a3:fc:d3:14:2f:fb:
         02:d7:9e:72:4a:00:b8:ce:bd:70:fd:c9:97:e9:ac:17:c4:40:
         89:dc:d9:f9:bc:ad:8c:ee:32:25:1e:70:98:e9:06:19:a0:bf:
         83:02:41:35:53:f6:db:1e:ed:d6:b0:d2:de:f4:df:24:a8:01:
         ef:f4:72:81:7e:99:30:01:16:7b:c2:d6:75:33:8a:99:5d:ab:
         83:82:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----