Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/c88ac8db-1abf-36a1-9961-4c93c19c1067.roa
File:                     c88ac8db-1abf-36a1-9961-4c93c19c1067.roa (raw, json)
Hash identifier:          jwVizg5jkvz2BlYrXkI1q56OjWahfG9yNMgJPn0N+Ck=
Subject key identifier:   2A:40:0D:3C:A0:60:45:4C:88:E0:EC:22:11:35:40:C1:25:13:85:93
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F43285838E28712FFC95D6715A0799AC0
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/c88ac8db-1abf-36a1-9961-4c93c19c1067.roa
Signing time:             Mon 25 Jan 2021 05:00:00 +0000
ROA not before:           Mon 25 Jan 2021 05:00:00 +0000
ROA not after:            Sun 14 May 2023 04:00:00 +0000
asID:                     36445
IP address blocks:        161.38.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:e2:87:12:ff:c9:5d:67:15:a0:79:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Jan 25 05:00:00 2021 GMT
            Not After : May 14 04:00:00 2023 GMT
        Subject: CN=ea94d209-a57d-4b2e-8be3-1db53fb914be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:3f:63:5a:3e:39:cf:af:cc:80:c2:59:c4:
                    47:d5:4f:2d:cc:8c:0d:61:37:99:86:2d:f5:75:bb:
                    f7:cd:92:37:3b:eb:8d:04:bc:c0:7c:63:c3:02:3a:
                    c1:a0:89:af:13:5b:4f:3c:d6:36:cb:28:46:5e:11:
                    44:40:2a:b8:bd:ae:29:5c:c5:70:eb:53:04:d5:fb:
                    f9:86:e8:06:ea:bc:67:17:0d:5c:3e:70:91:7f:5b:
                    29:a9:5d:76:45:88:c9:0d:3f:0d:eb:11:ae:66:4c:
                    f7:f4:39:ce:c7:d0:c6:8d:fc:b5:52:91:67:17:0c:
                    c3:e4:13:0c:cc:ac:b6:42:9f:49:d1:6f:dd:36:99:
                    8a:7b:6c:99:33:48:4a:4b:e9:91:05:0e:8a:2e:57:
                    7d:56:17:9d:b2:a5:ba:85:08:d5:27:ae:3a:2a:31:
                    71:49:05:b4:15:c2:6c:31:50:85:72:da:8f:cb:06:
                    f2:19:e2:f5:47:dc:a2:49:5e:f5:ea:28:56:72:c0:
                    0b:d5:e0:19:6f:e3:53:86:21:c3:f8:70:ae:0f:3e:
                    78:20:d7:6b:57:a3:3d:83:e1:ea:78:97:60:45:d2:
                    d6:8a:ef:05:29:07:3a:15:b4:8a:3d:35:60:6e:b3:
                    eb:ad:e4:e8:c0:ad:5a:47:14:d9:aa:8f:a7:5a:f4:
                    fd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:40:0D:3C:A0:60:45:4C:88:E0:EC:22:11:35:40:C1:25:13:85:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/c88ac8db-1abf-36a1-9961-4c93c19c1067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:76:79:f4:8d:48:da:51:e2:7a:f4:f3:da:24:ec:c1:d2:98:
         38:52:0e:20:36:a4:59:d4:54:79:8c:af:75:b3:30:b1:d7:0e:
         76:9d:2b:31:a4:1c:ce:71:e9:0e:cc:44:94:0f:f4:91:56:fd:
         6e:71:c6:77:b4:a9:4a:44:8a:64:80:7f:be:eb:81:18:4e:8a:
         f6:84:20:96:ff:9c:bf:e9:b7:73:39:e0:c0:39:46:c1:82:e2:
         53:dc:8f:72:94:8c:50:6b:a7:5b:9d:b4:2a:82:42:be:79:39:
         b2:b9:84:1b:23:ac:32:d2:3b:2c:06:bf:ca:39:a5:d6:b0:a5:
         f0:ae:72:00:95:e1:c9:be:00:1e:2b:03:f2:65:1d:71:56:9f:
         07:19:45:dd:84:4e:b8:b0:f1:d4:2d:df:75:1a:86:01:fa:a8:
         da:4b:14:95:cf:06:9e:13:1b:f8:91:5f:49:91:e2:ec:91:63:
         86:08:fe:14:87:0a:27:33:4b:f1:89:31:c1:76:07:2e:bd:3d:
         e0:3b:43:0e:44:60:63:48:ef:1f:ee:f5:71:e2:d5:2d:27:c5:
         b3:0d:4a:4a:a9:22:39:1a:fc:cd:dc:b7:25:0a:ce:cf:16:96:
         d0:06:42:5d:67:4b:2d:a3:11:26:9a:68:1a:ab:18:1c:45:0c:
         f7:29:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----