Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/e84e033f-4cad-3543-95c4-85dec0a9b85a.roa
File:                     e84e033f-4cad-3543-95c4-85dec0a9b85a.roa (raw, json)
Hash identifier:          4wTcck75ClmfgDnrBj3BVETz9XP/rV0+GYBCWG3IUDI=
Subject key identifier:   B6:5F:DE:14:7E:B5:B4:EA:4F:29:21:04:1B:F5:AB:7A:87:E3:70:1C
Certificate issuer:       /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
Certificate serial:       010D0C9F4328583E459E1E56E05688AD40C332C0
Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/e84e033f-4cad-3543-95c4-85dec0a9b85a.roa
Signing time:             Tue 14 Jun 2022 12:00:00 +0000
ROA not before:           Tue 14 Jun 2022 12:00:00 +0000
ROA not after:            Sat 17 Jun 2023 04:00:00 +0000
asID:                     7018
IP address blocks:        206.251.16.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:45:9e:1e:56:e0:56:88:ad:40:c3:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
        Validity
            Not Before: Jun 14 12:00:00 2022 GMT
            Not After : Jun 17 04:00:00 2023 GMT
        Subject: CN=c428c868-253d-4852-bfc1-6c3fea85d059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:13:33:d4:f5:4c:71:70:5a:36:cc:83:23:
                    17:f7:cf:78:1b:b3:d3:1d:55:3b:56:45:ed:0e:40:
                    a5:e9:ab:86:4c:35:da:df:c9:4e:61:e2:b5:f6:dd:
                    21:79:09:6c:65:89:1c:81:2a:f2:21:0e:85:23:02:
                    62:da:28:13:6d:65:4b:f8:54:4f:57:61:ae:86:99:
                    8a:f1:92:15:7b:a5:04:5a:78:68:02:c0:a2:3f:18:
                    92:bd:60:2c:31:cf:16:a6:d7:4b:ea:c9:dc:85:4f:
                    80:f4:c2:fd:26:ec:ee:9e:f8:08:6c:65:68:fc:5b:
                    88:a6:e5:61:67:9b:30:db:d5:59:85:d9:42:6f:52:
                    be:08:a7:31:40:5f:66:64:b7:fe:33:51:96:29:a0:
                    11:e0:ef:60:95:be:5c:c7:6c:60:a3:9c:12:28:57:
                    72:57:e9:90:54:ae:69:f8:57:51:d6:23:bb:0c:18:
                    2d:8d:2e:2f:d9:b3:00:83:8b:91:59:25:bf:7e:fc:
                    e0:50:9e:9f:32:74:20:a1:96:aa:dc:87:c6:de:c3:
                    d1:56:bb:d3:56:8f:77:a4:ed:f8:1f:52:f8:91:72:
                    44:c6:a7:a5:c2:5a:a7:12:85:9e:57:8e:95:7f:75:
                    d2:a2:fd:72:8f:29:86:a8:d6:51:03:6f:e5:83:59:
                    d5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5F:DE:14:7E:B5:B4:EA:4F:29:21:04:1B:F5:AB:7A:87:E3:70:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/e84e033f-4cad-3543-95c4-85dec0a9b85a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl

            X509v3 Authority Key Identifier:
                keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:69:a3:20:1d:87:57:3f:d0:d9:c0:92:7b:8e:59:26:1f:e8:
         af:df:80:4c:ca:3c:37:61:a5:8c:d6:4b:af:0f:09:62:c0:6a:
         bf:0c:f9:e7:d0:7e:5b:a6:e6:f8:d5:62:22:69:ab:b1:45:9e:
         d9:95:d2:9d:0a:27:6a:b1:1e:16:7b:80:01:a6:c2:6b:8c:21:
         c2:ee:f8:b1:df:d1:f0:2c:0d:92:ab:99:45:47:e0:d1:4c:3a:
         82:e3:13:d4:57:ae:cf:f7:55:0d:7b:c4:5c:26:6a:a1:14:5e:
         39:3c:ed:c2:fc:bb:0e:45:a5:1c:3d:a8:48:4a:32:31:93:16:
         a9:94:02:f7:99:b1:b7:7d:22:e9:46:ec:65:a5:b6:39:fa:08:
         68:00:62:11:de:e2:ba:05:be:7d:22:87:e1:c5:b1:20:95:f5:
         06:82:05:89:b5:aa:ae:a9:0d:5a:6e:cf:06:3f:8a:a0:2a:95:
         64:c6:16:08:84:5f:55:d7:12:9d:31:95:85:ee:eb:7d:b6:b2:
         b7:be:d9:75:06:ce:1c:09:22:9f:f8:05:9e:b6:44:53:54:0b:
         35:2b:1b:34:68:d9:dc:b9:0c:f6:ca:c1:f5:1c:d9:9a:f9:5c:
         4a:97:9e:73:e3:4a:26:72:27:f6:12:6c:79:54:e0:f0:6d:a4:
         74:cc:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----