Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec510961-7265-3778-bc8a-62267f358be0.roa
File:                     ec510961-7265-3778-bc8a-62267f358be0.roa (raw, json)
Hash identifier:          mhJOry/gcJF7aUEgR9F4RFU8EILLY7NKm9MX09U0svM=
Subject key identifier:   65:F6:B0:AC:B0:9E:A7:82:E2:EA:33:E9:92:35:F3:D3:EE:6D:9A:F8
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7B2D6145D4E069E88E61080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec510961-7265-3778-bc8a-62267f358be0.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        173.194.35.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b2:d6:14:5d:4e:06:9e:88:e6:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=8ce78aa0-1852-4bae-bb4b-d2f7e2bed38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:66:e2:e6:44:b3:83:26:fd:5d:c0:73:21:
                    e2:3b:bd:9a:0b:0e:11:c5:70:cf:1d:ba:26:d4:8d:
                    85:99:c8:f1:03:d0:50:44:03:6e:6a:63:21:45:63:
                    ae:36:9e:f7:e7:49:b6:a4:47:24:6f:87:02:ac:e9:
                    6c:6b:d6:30:b5:97:5f:04:b6:f8:e3:65:f2:0f:76:
                    18:ec:3f:b2:c5:a7:e6:1d:ec:21:07:dc:79:88:9e:
                    39:94:c4:f3:76:6f:ad:d2:e3:76:ca:3f:a2:de:fa:
                    ee:8d:bf:52:6c:08:83:cd:ab:ff:26:52:ea:bf:d3:
                    e9:6d:45:fb:7a:43:3f:29:fa:fb:67:56:df:dd:6d:
                    70:2c:3f:be:28:e1:f0:6a:93:79:47:e1:83:3d:00:
                    79:a1:4b:83:fb:c9:ad:ed:ff:59:67:4f:e3:eb:4b:
                    0e:63:21:4b:b6:59:9a:86:bd:e8:c0:da:6c:32:1c:
                    c7:a1:ec:51:75:2e:0a:ad:96:21:53:6b:46:4c:a5:
                    74:2a:7e:93:88:ad:ee:06:e9:5e:68:9c:dc:3b:f5:
                    39:19:a6:ef:42:a2:cf:12:6c:c7:c2:5d:ff:be:d3:
                    d5:2c:6b:e6:31:80:6d:4c:4f:4f:0b:ec:86:62:33:
                    d3:3e:28:11:aa:ad:77:e8:bc:0b:41:4d:62:c3:e5:
                    33:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F6:B0:AC:B0:9E:A7:82:E2:EA:33:E9:92:35:F3:D3:EE:6D:9A:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ec510961-7265-3778-bc8a-62267f358be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:00:2d:6e:05:92:30:35:c9:0d:e4:42:76:fe:dc:14:8b:72:
         6d:53:b1:19:77:cc:89:1e:3f:e7:7c:02:e1:c1:c0:44:20:7d:
         b8:83:7d:f5:9a:d2:4d:ee:22:5e:65:8c:22:2b:77:db:6f:5a:
         31:3c:3c:5b:2c:eb:f6:0e:47:99:a8:15:76:5f:e4:b1:dd:9c:
         fa:b4:be:e8:a3:78:90:e9:f7:ea:4c:5a:5a:03:26:6f:c3:bb:
         2f:52:29:e2:42:66:d0:a0:df:07:2b:41:c9:12:25:e8:f6:ed:
         64:89:02:ba:1e:91:88:f2:8c:dc:44:b3:0a:7a:90:e5:d3:18:
         6b:39:98:79:5a:79:a5:5b:35:0a:89:3b:4b:be:92:10:46:00:
         4c:c8:9b:42:b8:20:41:e6:ca:73:8a:99:45:54:4b:f7:e2:a7:
         32:76:a9:6e:06:eb:1e:81:f8:4d:63:cd:a1:23:ee:78:d1:0c:
         8c:66:14:b2:a7:8d:bd:f0:f3:15:80:6d:ef:5c:7f:4f:2e:f4:
         b2:5a:be:40:1e:51:b2:0c:65:dd:f9:27:b6:b8:e5:c1:db:0e:
         25:99:71:85:13:a4:05:01:f1:01:69:cc:48:9f:34:db:0b:40:
         05:1e:9a:bc:6d:52:fb:3c:e6:a2:b5:04:81:cd:b0:17:03:19:
         40:de:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----