Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f38c767-9c8f-3427-a5f1-db49e0a97b8d.roa
File:                     3f38c767-9c8f-3427-a5f1-db49e0a97b8d.roa (raw, json)
Hash identifier:          N5At8OVX63+wa4imX8oHiPPIbbIIBmnZBCdDvAVgstA=
Subject key identifier:   E7:E0:91:DB:F2:1C:FB:A2:50:E2:25:5F:0F:5D:F3:FD:15:31:45:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328583CBD05E16822B027C3A3452708
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f38c767-9c8f-3427-a5f1-db49e0a97b8d.roa
Signing time:             Fri 28 Jan 2022 05:00:00 +0000
ROA not before:           Fri 28 Jan 2022 05:00:00 +0000
ROA not after:            Mon 02 Oct 2023 04:00:00 +0000
asID:                     22773
IP address blocks:        50.158.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:bd:05:e1:68:22:b0:27:c3:a3:45:27:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 28 05:00:00 2022 GMT
            Not After : Oct  2 04:00:00 2023 GMT
        Subject: CN=23ea44ff-627a-42df-8668-1caeb18ed4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:db:99:b3:f0:c5:fa:ff:a3:57:07:0f:8d:92:
                    68:9c:f7:15:a2:a0:d5:1b:18:a4:42:2a:67:4f:34:
                    2f:e3:f2:7e:55:98:c1:c6:7f:18:bb:72:48:04:1c:
                    24:de:0b:a9:14:e8:4b:7c:98:50:73:e9:e7:39:9d:
                    7a:31:8c:92:ec:6b:01:53:d5:27:fb:18:fc:7c:df:
                    e1:69:27:29:80:10:67:af:01:c0:4e:4d:a3:d7:4d:
                    e8:ec:e5:f3:74:b6:4f:b0:7b:1a:fe:57:24:30:92:
                    ec:f5:60:13:69:33:05:fd:a5:20:40:78:e1:b5:7e:
                    a0:7b:3a:24:de:22:41:76:6c:a5:fb:c3:60:7b:d0:
                    80:c2:f4:4d:f4:41:d9:d8:b9:63:57:45:e4:35:2e:
                    41:cc:a7:64:14:07:07:37:a1:e9:4f:fa:57:d0:17:
                    35:4a:fa:6e:8f:47:5d:6a:ba:6b:07:3d:95:ae:cb:
                    a2:2e:e9:8a:c9:c7:e1:c7:e5:31:a3:a6:fa:1a:b9:
                    8c:62:b8:99:e2:f8:d4:99:c5:f2:8b:32:91:65:cd:
                    f4:1b:2b:36:bd:ac:d4:54:90:2b:66:a6:17:67:3f:
                    89:43:ad:dc:f4:1b:a0:fc:a0:05:5f:56:05:3c:d7:
                    06:8d:92:89:12:e8:0c:2a:e4:64:ef:db:b4:44:fa:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:91:DB:F2:1C:FB:A2:50:E2:25:5F:0F:5D:F3:FD:15:31:45:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f38c767-9c8f-3427-a5f1-db49e0a97b8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.158.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:d1:ad:7d:76:3f:c7:bb:c4:11:73:8c:9c:6a:1a:d5:15:54:
         c5:b8:c0:a2:f9:af:da:3d:a7:2e:f0:a0:31:13:ae:24:0c:a8:
         bb:69:d4:5d:0f:f4:87:33:32:bd:45:c0:44:d8:10:65:3a:e7:
         5a:97:c0:a3:9e:ac:a2:a4:3c:66:64:20:e9:e8:5e:7d:4d:01:
         fa:ac:c9:9b:3b:c2:70:76:ac:97:32:70:1e:3b:b2:93:ff:03:
         db:9d:76:79:b1:75:17:45:0d:42:86:00:6f:9c:e5:d5:ef:88:
         33:b6:d3:e1:12:4f:c9:eb:36:58:5c:69:af:40:e2:21:b9:a5:
         b5:79:fe:b7:74:93:7c:e6:c6:a7:24:7d:a6:e0:cb:62:53:83:
         ee:ba:6a:f2:5c:ea:15:cb:e7:d3:43:5c:6b:bb:62:0d:8d:03:
         16:77:99:41:69:ec:0a:b8:f7:ba:c4:b0:4a:03:4c:cc:4e:24:
         46:35:55:d5:2a:4d:22:de:15:26:07:26:4b:c7:3a:94:f3:07:
         f2:53:af:6c:1e:a7:ce:04:54:48:cd:b5:72:0b:d0:00:aa:23:
         6a:8a:da:2a:ab:94:fd:eb:36:a0:5e:e2:46:6a:a7:c7:f2:6f:
         57:41:23:38:3f:f3:9b:55:b3:01:33:4a:2b:69:28:fc:6a:c0:
         a8:38:61:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----