Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/df60c14f-ceba-33ea-9a15-9ade765c7353.roa
File:                     df60c14f-ceba-33ea-9a15-9ade765c7353.roa (raw, json)
Hash identifier:          OGTnS4M3hS4bSfnL0y95e1AuZNcm7X426X2fcJcoGlw=
Subject key identifier:   CC:61:8D:A2:72:7A:55:1C:CC:59:08:B5:75:23:92:1F:99:C3:BF:1A
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7B1A670FF0BC45A0363C380
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/df60c14f-ceba-33ea-9a15-9ade765c7353.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b1:a6:70:ff:0b:c4:5a:03:63:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=e9655813-48ab-4a89-bc6f-ef228c8aad4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f2:77:1a:a9:c1:aa:34:de:dc:df:3b:06:a5:
                    50:55:6f:0f:77:12:5f:18:cc:4e:91:e0:dc:e7:8f:
                    96:07:a8:c8:ea:cc:99:b4:75:d4:b5:b6:57:52:6a:
                    df:f3:7c:ac:ed:7d:ff:f2:2e:4f:ea:e4:2c:da:9a:
                    fd:5e:99:04:80:af:c0:de:53:65:c2:b2:aa:bc:88:
                    b2:14:0d:45:8c:6a:fa:1c:2d:06:87:4f:7a:ce:cb:
                    8c:8f:82:e5:b0:5c:21:50:b5:4d:cd:bd:30:40:5b:
                    da:8b:c1:d1:0e:74:7f:dc:4c:37:59:43:ba:45:9e:
                    c4:a7:40:46:a8:c3:eb:d4:4e:97:25:86:79:de:15:
                    83:cd:4e:b8:b2:0c:db:f4:81:ea:41:9b:63:f5:a2:
                    3f:f8:41:ec:b5:1f:b6:92:2a:43:06:f7:e9:1a:51:
                    26:56:38:c2:95:2f:e6:7e:36:4a:25:c9:15:20:2c:
                    e1:1f:cc:5c:af:17:d0:4e:16:b6:a7:70:47:45:5a:
                    69:95:69:8f:02:8f:a6:81:84:b5:44:64:3a:20:ee:
                    5c:57:4c:5d:5e:6b:27:b7:e3:57:3b:19:2e:4a:5f:
                    96:b2:a3:14:38:23:7f:37:c5:2b:ce:63:d8:42:20:
                    b6:f8:41:97:66:02:fb:39:bb:e2:f2:88:82:73:28:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:61:8D:A2:72:7A:55:1C:CC:59:08:B5:75:23:92:1F:99:C3:BF:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/df60c14f-ceba-33ea-9a15-9ade765c7353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d6:71:eb:64:c3:56:7b:90:47:ef:47:ba:f4:29:12:51:0c:
         a4:04:16:bd:c5:62:56:85:90:dd:2e:01:f4:83:42:bd:88:b1:
         13:13:df:6e:91:16:b1:3b:33:80:69:06:1e:1a:58:20:ee:82:
         87:d3:6c:8b:a3:ff:19:fb:30:b1:45:8e:58:d2:58:0e:3f:68:
         7e:d4:20:39:3d:0e:3a:0f:70:3c:99:ac:3e:08:79:90:59:4f:
         a1:6b:db:6a:81:a3:a2:05:45:23:d7:04:47:5c:b9:6c:b0:41:
         0c:e3:7e:16:1b:38:48:9e:43:04:73:44:58:0b:71:3d:1d:aa:
         cd:7d:4d:ac:c1:ac:3c:50:aa:1c:c3:77:73:00:61:ab:60:04:
         3b:a9:65:58:7d:64:cb:96:b5:ee:37:09:30:9c:fb:18:27:7d:
         b5:a1:eb:80:a9:7e:2e:cf:b0:65:0d:32:6f:ba:06:eb:57:49:
         ad:3a:c5:c4:ec:2b:d2:97:cd:db:94:41:c0:c2:cb:a4:e8:7e:
         ac:7c:f7:43:77:a1:00:9f:5b:40:a3:11:25:71:0a:aa:f8:da:
         7f:f4:db:d4:93:69:05:7c:48:a9:dc:dd:8a:54:1a:31:ec:a9:
         35:0f:ae:14:a8:45:04:ba:99:93:16:a4:53:5e:80:5b:c5:cb:
         a6:6f:ff:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----