Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/c7afeed1-b4c4-350c-85a4-8dfcfa4a4ba9.roa
File:                     c7afeed1-b4c4-350c-85a4-8dfcfa4a4ba9.roa (raw, json)
Hash identifier:          dNDAlOfelWtyDSZttgR0th2BaSYA4PEddPZ8XZbVf4E=
Subject key identifier:   90:DD:51:10:24:EA:42:AE:E1:3E:1A:11:0D:33:6C:51:09:B5:1E:C3
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C09911ECCAD65781D67BCBC40
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/c7afeed1-b4c4-350c-85a4-8dfcfa4a4ba9.roa
Signing time:             Wed 24 Nov 2021 05:00:00 +0000
ROA not before:           Wed 24 Nov 2021 05:00:00 +0000
ROA not after:            Mon 26 Feb 2024 05:00:00 +0000
asID:                     32381
IP address blocks:        207.126.159.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:09:91:1e:cc:ad:65:78:1d:67:bc:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 24 05:00:00 2021 GMT
            Not After : Feb 26 05:00:00 2024 GMT
        Subject: CN=96632f88-9e32-4911-9975-d9c6af3dc62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b7:b9:25:43:51:dd:19:2b:24:23:70:17:5a:
                    fb:ba:7d:7b:7e:f6:6d:f6:b7:96:0a:9a:43:79:04:
                    1b:a7:12:bd:f4:81:d7:04:03:66:f5:09:74:dc:92:
                    bb:b8:c1:2c:15:37:63:79:95:11:80:54:99:fc:c5:
                    b6:af:69:f0:fb:79:1e:ac:33:19:c4:85:e3:1e:81:
                    f7:b2:21:54:b5:79:ec:53:11:20:50:c1:a3:86:0f:
                    40:77:f7:a5:9a:11:75:17:58:d0:a7:e1:db:03:9e:
                    45:7e:7e:6b:e5:d6:13:7f:8c:da:cb:69:33:40:6c:
                    a8:ed:22:dc:f3:40:53:9a:79:f6:c9:88:bf:82:67:
                    bb:6d:e3:00:2a:85:1c:9b:3a:db:d5:93:af:9c:a2:
                    6f:8f:a8:d0:09:59:5a:4d:11:06:4f:04:b0:4f:32:
                    22:90:1a:b0:74:49:b1:5e:f5:42:d7:9f:6b:82:08:
                    29:3d:44:39:f4:71:fc:de:cf:0e:26:51:6d:66:d8:
                    09:29:63:a4:1e:8d:c9:4c:13:ca:03:69:70:1b:57:
                    ce:48:a0:50:16:f2:9c:37:c3:87:0e:62:4f:25:74:
                    14:88:5c:21:77:22:a8:4e:a5:7f:11:ec:c0:95:77:
                    7f:af:0d:dd:ec:5a:c2:01:f4:e9:61:f6:4c:be:49:
                    dd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DD:51:10:24:EA:42:AE:E1:3E:1A:11:0D:33:6C:51:09:B5:1E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/c7afeed1-b4c4-350c-85a4-8dfcfa4a4ba9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:9b:f9:2c:32:f2:56:55:c0:6f:d1:d7:97:f7:49:1c:db:
         ba:8d:10:2a:7f:48:8e:4a:1b:77:8a:5b:9d:53:96:c8:b1:13:
         ca:ee:1f:5b:38:27:f4:dc:16:2f:91:40:b9:32:99:1f:b0:4d:
         e7:bc:2f:00:c8:32:e8:0a:d1:1f:45:3c:02:b3:69:52:d8:1f:
         eb:dd:c7:08:c0:be:97:0e:5a:09:78:64:73:15:0a:fd:82:ee:
         c1:d7:d7:6d:55:85:60:11:81:fa:52:9f:9e:91:42:e7:42:ee:
         fc:fa:aa:56:e7:51:42:f6:01:c9:59:cf:fc:3b:9b:fc:3f:60:
         a2:76:ae:68:4a:ee:1f:35:2a:98:b3:01:09:fc:99:91:0d:40:
         44:b8:64:0a:2b:a8:99:69:0a:cf:1f:06:bf:86:2d:2d:34:a9:
         b7:f7:3a:8f:3c:53:15:86:f3:5d:5a:df:79:10:17:78:79:3f:
         c2:f4:b0:a7:ea:37:dd:fc:28:29:8e:81:45:f6:a7:60:b1:cb:
         38:41:55:60:e8:6b:15:92:b9:69:62:2d:0c:56:bb:f6:5f:99:
         e4:6d:57:cf:db:86:3d:5e:45:80:06:9e:ff:9d:80:44:57:84:
         57:5b:12:fb:06:cf:94:3b:61:e7:0d:5f:10:8f:7f:0f:c3:7d:
         9b:04:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----