Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/091cdfdf-3b80-3673-b729-49c1211a4df1.roa
File:                     091cdfdf-3b80-3673-b729-49c1211a4df1.roa (raw, json)
Hash identifier:          kjzgJnWW1TCYCYUmfpVtF6JaKUM4wYlgLZMtQpUGPVE=
Subject key identifier:   73:0B:8F:B4:D8:7D:90:87:F0:95:90:4E:25:4E:5D:BD:26:85:86:64
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F43285839BE720FB82875522192D00040
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/091cdfdf-3b80-3673-b729-49c1211a4df1.roa
Signing time:             Wed 28 Apr 2021 04:00:00 +0000
ROA not before:           Wed 28 Apr 2021 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     29016
IP address blocks:        168.146.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:be:72:0f:b8:28:75:52:21:92:d0:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Apr 28 04:00:00 2021 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=90d5f2f8-48a4-4670-9983-e45ea99e98be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:54:56:6d:09:d3:8e:67:63:a7:21:18:b4:a1:
                    96:01:2e:e0:a5:93:28:c9:60:02:09:23:10:61:af:
                    8c:fe:f4:71:8b:44:f7:0a:e9:bd:22:c6:df:1f:65:
                    8e:db:66:9c:61:3b:64:da:35:49:a6:74:5c:12:91:
                    1f:a4:9d:4b:e9:ed:80:ab:17:fc:e0:cd:15:00:cd:
                    7e:b0:37:df:d6:79:4a:9e:15:1d:6f:5a:89:5b:4b:
                    18:8d:24:90:44:8f:09:80:5b:50:37:68:a4:a3:15:
                    23:62:f7:79:a2:83:65:00:6b:a0:8a:8c:2d:f1:b2:
                    47:bd:78:92:f6:89:4f:e3:72:3f:0e:5a:10:3e:43:
                    97:19:2e:df:bc:fa:0b:38:1d:79:a6:69:f0:04:fb:
                    40:30:d9:1c:23:6a:55:c7:9d:ef:98:a3:fb:ab:32:
                    ea:d3:82:51:50:44:37:f4:ed:10:2e:4d:06:1f:7c:
                    38:79:35:5b:28:8a:8d:f6:62:b9:6c:94:fc:48:ad:
                    54:4a:64:bb:d4:26:09:b7:6a:87:e4:3e:27:15:7e:
                    58:1f:f0:5a:0c:32:5a:f2:74:c1:2c:6c:72:68:b5:
                    c4:05:c7:55:11:bb:61:ec:3a:c3:c9:1e:20:6b:c1:
                    74:8a:5d:7e:3c:0e:87:c8:99:71:c4:91:dd:fb:02:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0B:8F:B4:D8:7D:90:87:F0:95:90:4E:25:4E:5D:BD:26:85:86:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/091cdfdf-3b80-3673-b729-49c1211a4df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.146.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:e0:b1:d6:c6:67:34:d2:f6:4f:99:d4:d0:b7:0a:2c:f7:15:
         ac:ff:be:a1:59:01:37:f0:2f:cc:04:57:fe:53:57:18:c9:cc:
         b7:ee:53:af:1b:ab:76:13:32:c2:00:39:2e:a6:fb:2a:3c:12:
         64:02:4f:f8:11:4f:dc:44:4a:2d:1a:c2:9b:c6:f7:eb:07:48:
         6e:a2:74:e1:6c:aa:de:20:c4:70:da:e6:0c:65:e1:d6:00:d1:
         72:4d:05:c3:dd:a7:c0:46:f5:91:63:c0:9d:9f:6e:be:21:cc:
         80:b2:3f:e6:6a:d5:07:83:74:c0:7f:1e:b2:8f:d4:76:24:52:
         4f:e1:45:ca:a9:83:9a:1e:40:ab:e1:3c:74:6c:11:66:70:6f:
         0c:bf:3e:72:12:04:24:29:00:44:13:35:85:17:ad:03:7e:55:
         8e:ef:c9:bc:b2:da:44:27:d0:70:65:f5:f5:d5:7e:9a:98:fe:
         80:cb:78:4c:2d:fa:39:0a:87:6b:d0:68:00:d0:fd:cc:50:ad:
         79:8f:26:cc:79:12:33:27:1d:d6:aa:df:0c:b1:eb:b9:cd:c2:
         50:ef:11:ad:fb:51:78:3a:01:be:3f:55:d0:48:d2:63:57:ce:
         e4:33:e7:b2:0c:07:15:fe:32:4e:04:d3:b3:40:fe:a6:ce:59:
         68:fa:69:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----