Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/029539e8-340c-3938-a9bf-a582dd32ed48.roa
File:                     029539e8-340c-3938-a9bf-a582dd32ed48.roa (raw, json)
Hash identifier:          gfD1M+ePEkujYvBwEjNWp7/troCjHTB1Dj/CIjrsVoQ=
Subject key identifier:   B9:FB:4A:EB:24:E7:E5:3A:F8:45:5F:00:D7:5E:18:D4:3C:93:E7:97
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7A197A46C1FDE918DE50940
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/029539e8-340c-3938-a9bf-a582dd32ed48.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        216.58.218.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a1:97:a4:6c:1f:de:91:8d:e5:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=39055125-5fc1-44ae-b416-01032977d8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:23:9a:ff:88:77:20:71:3c:7e:22:63:ce:
                    91:3a:65:05:05:de:ae:81:c4:87:8f:ad:d9:01:17:
                    c4:c1:0d:fb:61:de:82:65:07:9d:aa:f6:f4:06:a4:
                    ac:78:fc:2b:c8:66:47:4b:99:34:60:8c:3d:0c:bf:
                    81:7e:e8:e3:8f:c9:46:4a:0e:34:b0:03:73:8f:4f:
                    65:0b:f7:4a:d2:5a:b9:d9:f4:02:99:4d:d7:0f:a4:
                    ab:4b:55:12:ff:4d:b3:87:c1:ab:70:7a:06:91:72:
                    bc:ab:cd:e3:85:f7:e2:2a:2e:c4:64:3f:db:7f:7f:
                    a6:ab:0d:52:41:02:f3:0e:19:cc:b1:c1:4b:1d:41:
                    e2:39:8c:88:08:8f:5f:95:c5:47:dd:3d:86:8c:f6:
                    39:14:e7:14:f6:62:e3:59:18:79:bb:9b:ad:80:f4:
                    54:d9:97:ee:b9:38:65:86:68:81:76:64:89:47:05:
                    c3:30:2c:49:6b:b6:c9:de:02:6c:9c:1e:5f:b2:81:
                    6d:0b:af:c5:78:db:66:08:20:98:a5:f2:8b:83:ab:
                    9e:d1:65:1e:67:f1:7f:e5:a3:06:53:d5:54:ac:cf:
                    1b:ec:67:b1:14:a5:7e:1d:a5:13:77:5f:46:6b:58:
                    7d:21:30:8d:2e:6e:20:b3:91:e2:df:6f:62:6b:03:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FB:4A:EB:24:E7:E5:3A:F8:45:5F:00:D7:5E:18:D4:3C:93:E7:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/029539e8-340c-3938-a9bf-a582dd32ed48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:b7:cb:0d:7b:77:6f:5d:de:fa:ab:6d:5a:f7:08:2a:f3:
         e7:e5:b9:91:8e:fb:8e:da:ce:7a:c7:a4:b0:c0:da:8e:75:42:
         30:ef:87:7f:dd:ed:62:30:d3:77:53:62:d3:c0:54:ad:d2:fb:
         3a:5f:9b:06:fb:1c:5a:37:30:06:83:10:60:76:1f:68:4b:a6:
         f1:8b:62:6f:c9:69:f7:f5:d1:bb:fb:33:88:ed:8d:8a:7d:e3:
         21:0f:4d:b3:af:d9:5b:36:ef:1d:41:61:bc:b6:31:3b:57:95:
         a8:ba:a2:75:8f:64:fe:2b:a8:47:04:33:9e:bf:fa:e0:cc:69:
         db:65:b8:0c:3c:cd:06:97:66:e9:b9:73:97:99:55:08:d7:a3:
         05:7d:81:9e:43:68:5b:b3:54:83:50:c6:b0:9c:ba:24:69:b9:
         1f:91:bf:a5:2f:45:d1:14:0b:73:8b:2c:96:10:b3:15:91:26:
         92:64:8e:2f:ad:79:06:98:e3:19:52:71:03:60:66:bb:ee:f9:
         8c:c0:90:ab:ce:6c:69:c3:a1:4b:44:53:bc:17:e9:5c:53:42:
         e5:c6:72:41:ff:1b:6a:40:a1:b8:2b:3c:fb:7b:a3:45:f6:7e:
         ce:73:7f:7e:89:23:52:8d:1e:a6:fd:7a:8a:13:ca:55:ac:39:
         4c:1e:44:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----