Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/36a2a757-dd1a-301d-a934-10139e16f89c.roa
File:                     36a2a757-dd1a-301d-a934-10139e16f89c.roa (raw, json)
Hash identifier:          gJFgNM3nQCxHv46f+ABYG5C3LkqlY7yM+U91ZTF95+U=
Subject key identifier:   1A:B2:1A:E9:34:42:7E:B3:BC:39:4B:C8:07:16:B0:B5:A5:53:8E:01
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7B9A740D06A2A6161731980
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/36a2a757-dd1a-301d-a934-10139e16f89c.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b9:a7:40:d0:6a:2a:61:61:73:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=0c105c2c-a046-48c4-b2a8-805403d92e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:77:62:ba:00:0e:d9:a0:85:e6:6a:2f:24:d8:
                    2f:65:1e:af:3f:24:02:c6:3e:a0:a6:52:77:1e:63:
                    ca:83:19:53:52:7a:a4:7a:3c:ce:6b:08:17:66:07:
                    4e:82:7b:b9:14:f3:bd:df:3e:9a:9d:56:d6:aa:df:
                    9b:06:e4:3f:ce:72:93:f2:8f:24:21:08:fd:b3:2c:
                    fb:6a:f3:fe:74:40:01:73:d0:11:95:00:bf:0e:05:
                    dc:dc:f4:f6:72:67:8d:c3:e5:ef:d8:f9:4c:48:34:
                    a7:7c:93:ac:63:4c:8a:cb:db:21:82:af:5e:2a:25:
                    b8:94:e7:18:f0:41:dc:89:27:33:d2:c9:2e:75:ca:
                    93:e2:e7:3a:8f:4b:7c:e5:18:91:b2:3a:fd:32:d7:
                    ee:94:f9:97:a6:8a:e4:4b:ee:43:eb:6c:23:16:9f:
                    be:23:50:11:16:12:05:b9:fc:14:0c:f3:9c:4c:29:
                    52:32:47:d4:28:7c:c2:d1:aa:35:ea:75:e1:b7:de:
                    3d:a0:76:d9:d0:aa:5c:0f:1c:a1:3b:9e:fb:ab:cb:
                    08:ed:4e:d8:b9:40:d3:2d:e9:f9:07:32:60:c2:92:
                    73:d5:3a:69:e6:5c:67:8c:04:3b:8a:54:33:bf:4b:
                    0f:46:cf:32:17:31:a5:e8:2e:72:97:8e:e0:dc:a5:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B2:1A:E9:34:42:7E:B3:BC:39:4B:C8:07:16:B0:B5:A5:53:8E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/36a2a757-dd1a-301d-a934-10139e16f89c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7c:a0:0c:3f:9b:2d:02:a5:c4:0e:1b:90:6e:47:c3:05:36:
         60:c5:fc:2c:7a:ce:13:19:8e:1f:21:74:97:fb:9a:a6:7d:1d:
         28:08:c2:62:b2:af:d1:45:57:64:0b:3d:a5:3a:6f:02:a1:c6:
         1f:ac:12:f3:38:c5:dc:24:18:a8:2c:91:b0:5c:f1:de:a6:d6:
         c6:53:5e:80:f3:dd:de:cf:6a:58:81:81:e0:a1:f7:ab:52:f8:
         9b:51:95:90:cf:1b:9f:f6:e8:9e:30:87:66:9f:03:2c:9b:27:
         0c:e5:d7:bf:f2:ee:c8:78:8c:71:40:6d:1c:79:ce:52:85:77:
         07:1f:b2:e0:e6:23:2d:90:22:25:13:c4:2a:da:4f:9b:c6:b3:
         45:a1:7d:d7:8e:ba:87:19:ca:54:10:4c:79:84:25:6f:c2:ef:
         06:3e:e4:b9:95:82:dc:c4:92:39:c1:e5:dc:eb:6c:ec:a4:5b:
         e5:29:18:72:f0:e2:c2:60:23:11:e1:9a:ba:b9:3a:98:6b:4a:
         1d:c9:e9:63:aa:09:80:fe:5a:cd:d9:be:62:82:8e:a6:fc:26:
         2f:a6:dd:ee:0a:3a:f5:73:cb:f4:b9:9f:af:8f:b0:62:6e:1a:
         5f:0c:f9:79:53:15:86:f9:35:5c:57:49:b5:4c:40:06:0b:52:
         fa:90:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----