Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bc66904a-5590-3424-a6e6-d3758a8ee752.roa
File:                     bc66904a-5590-3424-a6e6-d3758a8ee752.roa (raw, json)
Hash identifier:          Bq0wqKyZt6dM4qPGKxIOZhR8ZToPgufy8MhVyakcr7U=
Subject key identifier:   05:5D:1F:A3:45:62:CA:60:66:53:D4:64:3C:88:F6:E8:71:AB:2A:21
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA79F6140A4AF62F9466F3240
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bc66904a-5590-3424-a6e6-d3758a8ee752.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        108.177.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:9f:61:40:a4:af:62:f9:46:6f:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=57f5988b-5656-4fb4-bd24-e61e427e7f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:57:7e:39:ac:60:98:40:cd:20:4f:8a:84:
                    b0:63:11:bf:25:d5:5a:ba:cc:ec:d8:ac:f9:62:62:
                    57:c9:99:0c:b5:d3:69:8b:b3:44:57:2e:36:14:84:
                    70:fa:81:1e:f4:e6:6f:39:d7:21:8f:4f:53:a8:e6:
                    2b:28:b2:48:29:cd:53:33:00:f8:a0:65:ac:e7:ea:
                    48:01:09:b9:99:da:5a:cb:84:e4:0f:13:8c:d4:7a:
                    87:b1:de:c4:15:41:a3:b0:73:0d:e3:43:99:2f:d4:
                    49:ad:48:d4:de:7f:3e:1e:db:30:d6:1d:49:cb:55:
                    c3:8b:ee:5e:ac:0f:8f:c5:44:f7:55:f6:15:2b:df:
                    33:38:4e:82:1e:8f:c1:47:b0:56:5f:ae:68:fd:3e:
                    66:fd:8c:b1:2c:4a:03:24:04:71:50:b5:16:d0:ce:
                    0d:0c:17:fe:aa:01:d7:8d:8a:2d:88:f4:c0:66:15:
                    41:7c:d4:e3:09:6a:3a:b3:d4:cd:bd:be:7c:14:5d:
                    13:f4:97:ca:7a:c5:14:99:31:95:e9:55:46:f4:a0:
                    b8:f7:50:17:dd:f1:ab:bc:af:04:cd:44:af:2f:64:
                    2d:f1:81:d2:dd:ae:d0:87:61:86:bb:3c:ce:dc:0e:
                    93:f9:de:2e:01:82:8c:c5:18:fa:5c:66:b1:23:83:
                    f2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5D:1F:A3:45:62:CA:60:66:53:D4:64:3C:88:F6:E8:71:AB:2A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bc66904a-5590-3424-a6e6-d3758a8ee752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e3:a0:08:79:12:f6:cc:34:05:e3:a9:24:29:12:95:5f:22:
         e1:66:ab:76:99:d0:9e:07:d9:12:e6:1b:cf:5e:81:87:67:9f:
         8d:cd:3e:91:f4:a4:c5:65:c2:0c:ee:25:a8:93:e9:a5:cf:f1:
         ce:aa:da:02:09:a8:16:95:28:64:51:fa:26:ed:d4:0d:84:f9:
         a8:49:77:3f:32:2e:18:83:39:8f:9e:2a:6a:4a:f2:58:f0:de:
         f6:ac:41:02:b0:80:8f:8d:78:25:a1:80:aa:bb:62:a6:d1:66:
         4d:77:3e:ea:46:56:ab:60:c2:bb:86:ae:a1:32:22:f8:1d:e1:
         d3:84:35:45:f5:8c:e0:ff:ee:f2:3b:b1:1c:c2:ca:60:6b:c5:
         80:0e:b7:a0:2f:2c:ac:88:7e:9c:2e:7a:07:2f:56:c6:8b:ab:
         eb:c0:ea:48:de:d9:de:cb:e6:df:d9:a1:64:e0:71:93:1c:4d:
         24:16:8b:68:fe:0c:da:a2:50:ce:e8:b9:67:e5:ad:b1:d5:f7:
         b4:ff:87:73:5f:0f:c6:d6:47:9f:cf:11:37:3f:8f:19:1c:1a:
         15:a1:9f:a5:8f:1b:52:b2:0c:27:a6:f1:2b:04:c9:f4:da:c7:
         bb:b3:0b:20:b1:d8:14:20:15:81:8e:dc:41:68:0a:e5:ee:08:
         d3:0a:bb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----