Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/26ab935a-b2c7-38c0-a29b-24fcf6ae82b6.roa
File:                     26ab935a-b2c7-38c0-a29b-24fcf6ae82b6.roa (raw, json)
Hash identifier:          rxubWswpBdQQmv1tpJzxKSq0GzK6cYe2/uqGhKdAPsE=
Subject key identifier:   C5:09:A5:25:03:C4:95:1C:EE:D3:1F:4C:FE:39:91:7E:DD:33:A0:A2
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C099116B07518C09BB7B29680
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/26ab935a-b2c7-38c0-a29b-24fcf6ae82b6.roa
Signing time:             Wed 24 Nov 2021 05:00:00 +0000
ROA not before:           Wed 24 Nov 2021 05:00:00 +0000
ROA not after:            Mon 26 Feb 2024 05:00:00 +0000
asID:                     15169
IP address blocks:        207.126.144.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:09:91:16:b0:75:18:c0:9b:b7:b2:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 24 05:00:00 2021 GMT
            Not After : Feb 26 05:00:00 2024 GMT
        Subject: CN=c8c90325-d268-4514-9112-8b39f9f10396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:67:b0:5d:a6:17:7d:35:16:56:f7:26:8b:37:
                    64:78:90:f5:7e:e2:6e:dd:1c:eb:0e:58:4c:fb:8f:
                    ba:af:63:65:23:e4:b5:1c:33:dd:ce:2f:db:81:cd:
                    c6:51:5b:e4:f3:33:11:60:4e:0d:b8:80:55:b3:ae:
                    d0:fa:28:71:9d:ae:ef:ef:cb:64:74:15:a8:5c:96:
                    54:ba:18:82:26:ef:65:08:2a:86:cd:75:28:91:7c:
                    c2:79:48:02:31:c9:1e:aa:75:37:2b:dc:06:34:5b:
                    dd:4b:58:6e:a6:88:5f:37:64:fa:aa:4b:d8:26:4e:
                    5c:0d:5e:e4:27:e6:63:52:ab:a1:a8:79:51:cd:31:
                    6a:4b:4d:12:9e:10:74:83:6e:50:29:62:d2:8f:b3:
                    18:b4:b0:a8:5a:20:b0:40:4e:4d:93:1f:58:cc:70:
                    7c:42:d0:35:c3:73:12:58:33:00:f0:c5:22:67:f7:
                    e2:70:78:57:5e:30:55:56:76:80:b7:93:39:4f:49:
                    fc:f8:85:88:11:03:5e:52:73:8d:77:19:b0:ff:5d:
                    ae:12:4c:30:c9:17:8b:8e:09:7c:7e:de:0c:18:f7:
                    e5:29:84:fb:2f:1a:a7:80:88:58:3a:b5:1d:ba:7f:
                    5f:d0:b3:8e:44:0a:b1:63:32:42:58:9f:18:bd:68:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:09:A5:25:03:C4:95:1C:EE:D3:1F:4C:FE:39:91:7E:DD:33:A0:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/26ab935a-b2c7-38c0-a29b-24fcf6ae82b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:16:b7:2b:e9:3a:9c:77:41:47:8d:6d:73:3d:87:f5:31:ae:
         e4:50:9e:91:cd:82:c8:81:11:b4:5b:3f:98:23:c9:fb:08:38:
         98:0f:34:f2:93:62:ed:6f:da:e1:e3:b7:c3:1b:d6:86:97:57:
         82:da:a3:27:a4:13:e9:8c:6c:3d:e7:0d:60:f0:c6:a5:25:6b:
         47:19:c4:f9:6a:62:e1:ec:d0:55:7a:bc:dc:e2:61:5b:80:e7:
         d0:95:00:42:0d:58:d1:bf:88:ab:be:05:a5:18:53:76:b5:14:
         d4:8a:34:01:d0:b8:1f:f3:8a:b6:8a:22:68:37:cb:a3:63:f5:
         b1:f9:55:7d:14:54:e4:aa:1d:1d:91:af:a7:f3:32:93:f2:2e:
         da:dd:75:94:7d:f8:b1:b2:af:80:45:7d:57:09:ee:26:c9:ef:
         b2:5e:1c:45:0b:02:4d:20:aa:ec:83:72:6d:fe:a8:2d:2c:61:
         bf:09:af:b4:f5:ef:5a:54:e1:be:de:77:0e:17:a1:cb:f8:b7:
         9d:ff:29:10:32:92:a1:d8:88:29:53:80:86:0e:95:29:37:d3:
         99:90:f3:bb:24:55:d2:5b:39:9b:53:19:a4:a4:34:d6:d9:f2:
         7c:8f:02:53:a2:a3:65:fe:71:20:72:ec:35:fd:8e:b6:02:20:
         77:67:36:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----