Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61f43a00-c78e-34f0-9424-a83b165b8eef.roa
File:                     61f43a00-c78e-34f0-9424-a83b165b8eef.roa (raw, json)
Hash identifier:          caYvIIcnl6Fp7G6+CB9KJAu/vTeuWGlXUaHXArGV89Q=
Subject key identifier:   07:78:66:5B:B5:36:41:1D:32:E2:29:C8:C1:7C:B9:CB:9A:75:A9:81
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583AEEBBA9D27521EFF1904CB880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61f43a00-c78e-34f0-9424-a83b165b8eef.roa
Signing time:             Sun 15 Aug 2021 04:00:00 +0000
ROA not before:           Sun 15 Aug 2021 04:00:00 +0000
ROA not after:            Tue 15 Feb 2022 05:00:00 +0000
asID:                     394708
IP address blocks:        216.66.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:ee:bb:a9:d2:75:21:ef:f1:90:4c:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 15 04:00:00 2021 GMT
            Not After : Feb 15 05:00:00 2022 GMT
        Subject: CN=37704aaa-c361-423c-8563-568a6d321a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:65:4f:b5:6b:f2:37:a7:f8:03:8c:ef:f2:94:
                    18:ca:f9:78:76:79:e2:bd:03:12:2d:ef:9f:69:ae:
                    d6:2c:66:c2:f5:ce:9a:d5:64:66:46:16:9a:67:b0:
                    e8:79:c1:19:66:e9:3d:74:47:2f:ca:43:f2:65:1e:
                    26:c2:88:92:b8:80:55:69:ee:95:a8:a6:15:32:62:
                    57:86:0c:fc:20:5f:94:b6:b2:40:6a:1d:f8:c5:81:
                    2e:fc:c7:1a:79:1d:22:10:b0:c9:4d:f2:01:98:d0:
                    ad:2f:43:67:b3:4d:5f:56:44:02:21:5b:f4:40:aa:
                    a6:f5:6b:f4:53:3e:26:23:f4:8d:42:4d:30:78:2d:
                    62:89:65:9d:7a:18:67:9e:f4:28:63:46:44:65:b0:
                    3d:a4:92:1a:a6:5f:f6:33:57:41:45:a7:d9:55:4f:
                    26:5e:15:c5:82:82:9e:f5:15:6e:02:d1:05:80:b0:
                    90:68:bb:ff:a3:26:dc:8a:60:6c:0c:0e:99:3e:b6:
                    3a:bd:ba:9e:92:f3:f6:d2:6e:ba:e4:f2:a8:2c:02:
                    c3:6b:8e:56:74:89:3b:be:23:22:89:2b:cc:71:b4:
                    13:ed:64:f0:da:fe:f5:35:36:eb:6a:cd:2a:d0:e2:
                    99:18:67:b2:d8:64:31:ca:7c:71:f1:68:62:ce:e3:
                    6c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:78:66:5B:B5:36:41:1D:32:E2:29:C8:C1:7C:B9:CB:9A:75:A9:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61f43a00-c78e-34f0-9424-a83b165b8eef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:3d:cf:d7:c8:66:72:50:ae:55:cb:30:d6:25:be:67:78:3c:
         56:63:14:c2:93:98:da:95:8b:61:d4:d0:ae:18:07:30:ba:19:
         f4:6a:2c:db:0c:53:a5:1b:c3:d6:0c:9a:39:09:62:26:52:5b:
         46:2f:8d:01:ee:6d:88:ef:59:a5:03:63:89:5d:fb:10:92:ba:
         08:d0:00:b1:9b:5e:89:00:df:f1:c5:90:46:f6:88:e6:39:c1:
         ab:b1:1f:35:4b:d0:74:ca:8c:93:d2:40:40:ee:57:3a:e1:a2:
         4b:9e:74:19:e6:5f:bb:64:cf:70:f3:a6:b9:7e:cd:1f:c8:f3:
         02:85:fa:70:a4:f2:6e:e3:13:f5:3c:99:83:9f:4f:50:ac:29:
         d9:0a:2b:91:5d:c8:9b:5a:a4:3f:88:a2:df:b7:b0:e6:2e:c8:
         f7:33:05:c6:65:00:cc:a8:f1:79:18:40:3c:0f:f3:0c:5b:23:
         46:6a:46:48:97:59:1c:34:c4:03:ee:79:d6:d2:f5:98:d0:6c:
         af:17:2f:9c:62:94:f2:46:9e:3e:50:a6:3b:37:30:7b:ad:53:
         ca:0c:ea:05:3a:88:e1:b9:99:7c:5a:20:27:4f:25:47:d4:ab:
         92:c5:1f:97:08:ef:16:d9:3e:f5:71:f2:da:b0:0d:19:8f:13:
         12:71:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----