Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f9782fe8-159c-3587-a9f8-a90666e3cabe.roa
File:                     f9782fe8-159c-3587-a9f8-a90666e3cabe.roa (raw, json)
Hash identifier:          YjaUfszPsESBa8qMZdWpmWkbL6dPfy7a5/53L52Yde4=
Subject key identifier:   0E:01:F0:F5:B1:9A:A5:49:05:02:35:A7:9C:13:DB:D5:7E:FE:0A:56
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7B7E9CA4A6E81D65AD9B480
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f9782fe8-159c-3587-a9f8-a90666e3cabe.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.120.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b7:e9:ca:4a:6e:81:d6:5a:d9:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7fc7ce4c-fee7-4faf-a2a6-6dd94708cab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:34:2f:0b:04:70:02:ba:b7:e0:b0:68:d3:21:
                    d6:8b:27:a4:8c:c8:78:94:80:d2:53:bc:3b:79:21:
                    e9:3e:e3:6a:f7:98:a0:cf:54:58:a4:98:9b:df:74:
                    c0:08:d3:d1:d1:9e:5e:85:d9:3e:26:39:df:16:15:
                    3f:d8:20:36:1d:e8:12:17:36:a0:14:9e:1b:f0:21:
                    e7:1a:71:55:e5:ce:61:14:1e:bf:c8:b7:cb:f7:ab:
                    16:fb:f5:68:61:d1:db:2a:75:fd:c9:30:0a:9f:4a:
                    f2:d7:a4:05:bb:f7:38:46:ad:30:23:4b:85:f2:fd:
                    2a:1c:13:9f:c2:0e:22:59:6c:69:68:74:e5:94:77:
                    cd:fc:1d:bf:ca:2e:d5:e5:b2:77:ab:07:c5:f7:a7:
                    5c:1b:be:a6:c9:39:cd:56:88:f4:00:5d:5d:e7:53:
                    cd:61:96:04:ec:46:26:69:67:6c:74:d1:7d:4a:ed:
                    f3:df:ce:e7:c2:64:4d:ef:d9:32:5a:70:be:f6:4f:
                    c0:23:74:61:91:ea:e7:13:98:50:e4:6d:08:4f:32:
                    17:cb:de:45:0a:ac:42:78:b0:fb:ab:79:01:8c:d6:
                    5b:d5:29:8d:00:87:1e:df:d0:c7:99:85:e6:b0:b6:
                    b1:84:8b:39:68:d3:26:67:cf:3d:54:6e:3b:e0:6e:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:01:F0:F5:B1:9A:A5:49:05:02:35:A7:9C:13:DB:D5:7E:FE:0A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f9782fe8-159c-3587-a9f8-a90666e3cabe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0f:f1:19:5c:12:e0:2e:8b:d3:36:5a:0d:9b:82:70:30:5e:
         5c:1c:e0:44:d2:e1:44:d1:c2:63:50:fd:75:14:9b:03:c8:f4:
         db:61:31:38:b8:3c:0c:1f:02:d2:ac:d0:bc:ec:2f:1f:0c:ec:
         4e:7a:d6:50:e7:91:32:a9:24:91:a1:95:60:6a:c6:33:1f:75:
         a4:22:5a:16:18:fa:f3:85:cf:5e:2c:f3:3e:26:f1:71:c3:07:
         21:36:27:c6:3e:ca:fd:f7:c7:76:7b:ed:6e:6a:91:a1:3c:f0:
         0f:6b:63:77:25:69:15:61:75:6f:da:e3:ef:71:08:8c:e9:7b:
         aa:96:2f:5a:29:72:2c:3b:87:9d:41:c3:26:e8:89:99:55:68:
         f2:dc:84:e4:2e:92:fa:e7:54:c2:a5:64:85:61:19:0e:f1:c8:
         b6:6b:70:d5:85:33:44:42:b0:6a:fb:99:2b:09:55:10:af:24:
         64:42:4d:68:77:b7:8f:1d:7b:a3:58:bc:a4:48:98:53:d1:ba:
         65:66:d5:76:4a:fc:ea:2e:8d:1e:ed:30:1e:dd:3d:0a:68:20:
         94:8a:2d:42:63:f1:de:8f:81:aa:5c:a5:67:ff:3d:bb:9a:a0:
         92:4d:8e:21:0a:33:33:aa:99:06:97:46:51:71:29:8a:7e:d1:
         a1:7f:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----