Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/67e5518d-c25d-3543-9ac3-4b0f8e5dc8b3.roa
File:                     67e5518d-c25d-3543-9ac3-4b0f8e5dc8b3.roa (raw, json)
Hash identifier:          MtdYHUhNdPCnZYaDjKcC2qvK59bhbc6GzfdqzKFVI+s=
Subject key identifier:   82:FE:AB:85:2E:23:26:C5:C1:2B:88:B9:99:13:F9:AD:F3:60:88:06
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7B6B7CCAE178D8411A4B580
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/67e5518d-c25d-3543-9ac3-4b0f8e5dc8b3.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        208.117.234.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b6:b7:cc:ae:17:8d:84:11:a4:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=61f58e26-319a-4b44-826a-fbf0abff3415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a3:7a:e3:04:20:09:c7:49:81:8d:33:08:e3:
                    25:dd:12:3f:06:8e:37:93:28:17:54:21:5e:34:44:
                    c5:9d:72:a3:83:3d:f4:c4:2d:92:9f:f3:77:19:6c:
                    d7:f6:1c:e1:ee:76:ac:8e:60:0f:6a:2f:18:a2:75:
                    72:4f:a4:d3:6a:bd:a5:23:6b:74:62:20:ca:52:fc:
                    73:f5:a4:2f:fe:e6:82:d9:64:03:65:8b:0a:d6:59:
                    d9:a9:60:5a:04:e9:bf:0f:b8:31:fb:04:f3:12:2b:
                    34:c8:34:ad:2f:83:87:1e:ce:44:ca:8b:ea:50:c3:
                    bf:2d:8b:f8:3c:49:95:d3:c9:3f:a8:8d:82:82:29:
                    71:f3:67:57:81:4d:2a:6e:94:b9:f7:be:ac:87:3d:
                    3e:50:f7:0e:38:84:5c:e4:4d:10:34:e5:02:a8:a5:
                    7e:48:fe:ad:1e:cc:91:c3:38:90:1e:5b:db:5a:b1:
                    66:76:a0:c7:99:b3:12:93:23:fa:d0:4f:d1:cc:3e:
                    fe:7b:41:67:19:41:2b:60:bc:b2:9e:f8:20:30:ed:
                    14:a0:d8:d1:52:95:f9:61:af:21:2f:3b:0a:a7:75:
                    d4:b5:c1:9a:f3:f9:53:a0:a1:1d:96:6c:47:e3:68:
                    37:76:38:72:c1:b2:96:7f:c4:1d:2f:87:5b:11:60:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FE:AB:85:2E:23:26:C5:C1:2B:88:B9:99:13:F9:AD:F3:60:88:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/67e5518d-c25d-3543-9ac3-4b0f8e5dc8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:67:2f:d0:80:0a:2e:b8:d8:e7:34:7e:01:00:8a:19:ab:77:
         86:75:df:82:22:2c:5c:46:3f:f2:94:8a:20:e7:28:dd:7d:ea:
         ff:f5:3e:ac:38:4e:e7:02:79:06:e9:de:0d:8b:2c:cc:1b:6c:
         9f:2d:5d:b1:5d:29:bb:72:d2:f0:d4:bd:58:0b:a6:ee:08:1a:
         05:d4:26:45:93:81:d3:53:b0:7c:f6:70:98:3e:87:36:01:f3:
         be:52:28:97:88:30:c5:13:ec:c2:0a:33:2b:1b:7b:9c:eb:98:
         cd:cb:29:e4:c1:97:3c:74:69:78:bc:3f:fa:fd:a0:e4:9b:10:
         57:be:91:cb:88:a0:47:2c:f6:f5:72:88:75:b0:b1:62:f8:fd:
         25:ad:87:84:5c:bc:06:fc:cc:83:d2:ac:d7:06:ae:11:d5:fd:
         6b:5e:8c:5b:dd:b5:2a:54:60:68:9a:d0:a8:0d:1c:08:b7:d8:
         89:e6:f8:59:a4:db:72:88:d3:4f:72:4f:37:2c:9a:86:73:ab:
         c0:54:8f:22:e9:85:96:7a:e5:a7:e5:27:a4:fe:ab:f2:58:83:
         38:df:96:51:3e:dc:6c:24:1f:14:2b:bb:30:71:e2:8b:83:08:
         2e:94:1c:9e:1c:05:f5:7a:99:f3:a1:27:a2:4a:d3:d7:34:d4:
         ba:11:43:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----