Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/3b26ea35-ed9e-3807-bea4-8027fec44b6b.roa
File:                     3b26ea35-ed9e-3807-bea4-8027fec44b6b.roa (raw, json)
Hash identifier:          f4dgv2ilIbHoej4Vzkqy4UNEhtVcQU+eDp7q7Z0rd2Y=
Subject key identifier:   D4:75:F3:E0:E2:73:DC:42:0E:1C:B4:AB:21:26:4F:D3:D6:90:E4:2C
Certificate issuer:       /CN=7838225a-28c8-4c97-8ba3-272c018c5ee5
Certificate serial:       010D0C9F4328583DBA49513D5559F3861F5A4B60
Authority key identifier: 14:4C:2B:DD:17:84:8D:53:A6:6E:0A:BC:7F:21:DB:78:B4:31:03:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/3b26ea35-ed9e-3807-bea4-8027fec44b6b.roa
Signing time:             Thu 28 Apr 2022 20:29:53 +0000
ROA not before:           Thu 28 Apr 2022 20:29:53 +0000
ROA not after:            Thu 31 Aug 2023 04:00:00 +0000
asID:                     1239
IP address blocks:        158.51.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ba:49:51:3d:55:59:f3:86:1f:5a:4b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7838225a-28c8-4c97-8ba3-272c018c5ee5
        Validity
            Not Before: Apr 28 20:29:53 2022 GMT
            Not After : Aug 31 04:00:00 2023 GMT
        Subject: CN=81a5ccf3-7b66-4d98-9e1e-d6c03d2c8a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:f4:00:c7:31:d6:8f:e1:e4:73:e7:aa:6f:
                    45:b9:05:13:e6:0d:62:27:26:4e:52:c9:4f:dd:4b:
                    9b:58:61:24:0a:3e:af:00:9e:e8:b9:80:dc:51:d1:
                    93:db:43:02:7e:6f:86:f8:55:55:ff:ff:aa:a9:50:
                    63:9b:00:92:f9:9e:1f:e4:96:43:8b:1e:aa:ac:5d:
                    27:11:ed:b1:93:5d:64:1f:96:46:ba:87:c9:78:6b:
                    6f:cd:22:9e:a5:73:47:b4:7f:a2:c4:39:8b:f2:28:
                    53:63:c5:89:70:25:81:76:83:02:b9:d4:8a:ba:4a:
                    64:ec:b6:3a:a1:23:29:68:bb:54:c5:9b:1e:d0:0c:
                    26:42:1c:a0:a1:91:ff:e7:99:ee:cc:7e:06:e3:48:
                    a2:1a:20:22:b7:bb:36:cb:57:9d:46:66:f4:b3:8f:
                    de:a9:41:89:cb:22:73:ef:0d:7c:be:27:5a:ed:2d:
                    24:55:6d:72:c6:cc:8d:8c:0d:df:f7:97:76:26:8b:
                    22:0d:aa:cf:a5:a3:27:eb:03:7d:67:7c:7d:5c:61:
                    3e:5b:f4:7c:51:8c:a4:3b:20:3e:f3:c6:08:c5:5a:
                    55:12:77:36:b5:87:ab:bc:9b:ea:89:41:80:a7:47:
                    37:55:3c:54:c0:42:47:e9:29:c7:23:3d:42:13:bb:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:75:F3:E0:E2:73:DC:42:0E:1C:B4:AB:21:26:4F:D3:D6:90:E4:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/3b26ea35-ed9e-3807-bea4-8027fec44b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5/7838225a-28c8-4c97-8ba3-272c018c5ee5.crl

            X509v3 Authority Key Identifier:
                keyid:14:4C:2B:DD:17:84:8D:53:A6:6E:0A:BC:7F:21:DB:78:B4:31:03:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7838225a-28c8-4c97-8ba3-272c018c5ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:63:7d:14:86:e8:55:b4:b5:19:97:9e:21:58:42:eb:a1:da:
         8c:ee:d7:ec:26:f6:19:99:aa:ef:39:41:91:de:8e:ee:a5:06:
         00:fa:fd:9e:83:08:1b:0e:39:03:a8:15:4a:74:94:26:24:05:
         e0:50:f0:83:1a:fb:4b:f8:00:0f:79:e4:9a:7a:3c:7e:2c:08:
         6e:45:a7:a3:41:4a:94:7e:97:0b:a5:09:fc:a5:fc:dd:fe:f6:
         10:dc:8d:69:f4:79:12:1d:ae:68:cf:a5:60:a3:eb:26:be:ac:
         dc:d8:54:c2:e8:66:29:91:4e:0d:c1:3e:b0:5b:04:4a:bc:af:
         5e:80:17:a0:77:06:0e:dc:22:87:39:71:bf:70:e2:8d:f7:ad:
         a3:41:72:00:c6:2d:51:15:5c:73:ce:94:d3:0c:ba:f4:74:91:
         dc:f6:13:93:c3:57:49:38:f4:95:6b:ca:3c:79:b4:a8:02:e2:
         e4:13:db:72:1b:d6:bb:13:cd:62:8d:cf:03:cb:2b:bd:93:b8:
         dd:fe:ce:66:3a:c9:58:80:13:22:02:d4:9c:f1:29:c0:46:8f:
         c1:80:85:b9:d0:fe:a7:70:06:52:42:08:7f:bb:04:53:0b:3b:
         a0:40:63:8b:7c:3b:46:0a:00:64:ec:c6:72:b3:50:cf:f8:ce:
         a3:ba:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----