Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c74f5b4-1884-36a5-ae30-4b2129191b99.roa
File:                     3c74f5b4-1884-36a5-ae30-4b2129191b99.roa (raw, json)
Hash identifier:          XMLMTJ7G0KD/eU2Vu84BggnjnOw4FPmSRaIhnoCM8SM=
Subject key identifier:   B2:C8:F1:84:CA:61:B3:CE:96:1B:3C:B6:00:51:88:56:2E:CE:D2:D1
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7AA0D0319078BD18F4EAC70
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c74f5b4-1884-36a5-ae30-4b2129191b99.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        70.32.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:aa:0d:03:19:07:8b:d1:8f:4e:ac:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7d76e7c6-3e24-4f4e-b378-5587e8336060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:18:32:cc:f9:66:65:90:db:48:38:69:24:ab:
                    26:6f:46:57:da:19:ee:b5:61:94:4d:43:b0:c7:35:
                    11:9e:c1:63:1d:4c:e1:1e:1d:74:ba:74:61:8e:0b:
                    6d:78:ef:39:cd:09:66:78:68:f2:c2:b7:1c:a7:f1:
                    08:35:2b:15:c1:6d:94:33:f0:18:6b:60:7e:4a:82:
                    17:63:34:d9:4e:28:33:ff:0c:06:7c:f6:e2:db:b2:
                    54:09:60:33:8e:cb:f3:0f:c6:b7:ac:5c:33:2d:94:
                    8e:fc:cf:19:88:fb:c8:5f:49:8f:b9:33:a5:0b:77:
                    65:b5:9c:a0:36:f9:6a:88:0e:7e:9d:b0:3c:4b:a1:
                    76:64:84:ed:0f:ba:68:05:89:50:ab:46:9a:c0:62:
                    2d:7e:e3:77:0f:e1:b4:85:fd:cd:8c:d2:ed:ae:43:
                    1d:6f:80:dc:f8:91:d4:a3:a0:25:73:c2:15:fa:da:
                    09:70:de:e5:75:c3:36:78:e0:6f:7e:87:87:77:f3:
                    21:87:ce:bd:f2:63:ae:ca:52:85:fa:77:81:4b:e4:
                    9f:74:72:79:04:bd:87:8f:02:39:41:04:56:9d:ab:
                    e6:99:a9:0f:3b:19:81:64:48:d2:4f:06:63:da:79:
                    29:21:97:b3:db:60:a5:05:be:04:75:87:77:fd:2d:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C8:F1:84:CA:61:B3:CE:96:1B:3C:B6:00:51:88:56:2E:CE:D2:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c74f5b4-1884-36a5-ae30-4b2129191b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:99:dc:d6:61:68:40:24:e8:af:b2:e2:77:fb:2e:af:50:78:
         1a:da:0a:3b:c8:34:4c:77:82:df:b6:24:91:18:72:4b:44:0e:
         66:23:cb:02:5d:51:6b:11:5a:ba:a0:c5:20:ff:95:95:98:06:
         3f:08:1c:0e:76:43:13:59:cf:67:c4:21:25:5c:40:4c:8c:72:
         6f:b0:ec:ec:8c:9b:07:53:97:2b:0f:e0:7e:e1:a2:c2:e4:8d:
         c1:24:5c:56:91:8d:65:f0:ed:b5:a3:12:94:cb:76:55:42:e4:
         2a:48:b7:15:a8:22:e1:22:e3:36:c3:80:c9:53:56:db:79:ad:
         91:12:c4:28:98:c4:f1:30:6f:f0:f7:f4:b0:0c:f9:78:cf:1e:
         08:ec:2a:bf:df:95:48:f0:66:2c:52:f5:3f:24:3a:ce:98:5b:
         ab:36:c5:30:75:2b:7c:1d:ce:70:ba:8c:d7:d9:8a:ee:06:a5:
         1c:67:c8:1a:69:9e:7f:b5:f2:0b:52:f5:44:8e:f1:e5:50:70:
         ea:8c:4a:db:74:e4:ab:88:96:67:ea:e1:6e:fb:2b:76:ea:4b:
         c9:c0:ab:e6:b3:24:e4:6b:6a:c1:c6:bb:09:4b:f3:c0:22:79:
         e0:0a:87:5d:44:39:21:a0:96:62:c8:37:e9:13:60:c4:8e:3e:
         60:e1:8e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----