Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/40ba5054-bb25-3533-a6d5-845bdc392d88.roa
File:                     40ba5054-bb25-3533-a6d5-845bdc392d88.roa (raw, json)
Hash identifier:          Gjp6ENGGXa7VK32uAQd11bZtj9YSzOQKHwij/ywokWM=
Subject key identifier:   0E:BE:64:30:18:1E:66:3C:54:36:54:75:C5:42:10:A2:E4:97:CB:9B
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328583CC6B689AEA1559D7F0E5FF980
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/40ba5054-bb25-3533-a6d5-845bdc392d88.roa
Signing time:             Mon 31 Jan 2022 05:00:00 +0000
ROA not before:           Mon 31 Jan 2022 05:00:00 +0000
ROA not after:            Sun 31 Jul 2022 04:00:00 +0000
asID:                     11164
IP address blocks:        163.253.31.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c6:b6:89:ae:a1:55:9d:7f:0e:5f:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jan 31 05:00:00 2022 GMT
            Not After : Jul 31 04:00:00 2022 GMT
        Subject: CN=a936cc7e-5d3d-4fbb-8621-bba486cc1383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f5:75:f2:83:ac:da:1a:45:cf:76:fc:7e:37:
                    e5:00:69:65:5c:d9:09:71:81:2b:5a:f3:c5:b9:23:
                    56:e4:3b:cb:0b:57:d8:1a:2c:7b:6e:8d:a1:8a:e7:
                    d6:e7:fe:47:8c:e1:61:79:bc:d3:e7:e1:0c:4e:2f:
                    04:c6:13:ae:32:cc:04:93:37:5e:0c:1d:46:76:58:
                    8c:a5:ef:4c:c9:c5:5b:49:f7:2b:a6:11:d7:13:fd:
                    0b:00:a2:89:ff:3f:2d:6c:dd:5e:c7:56:b7:2f:84:
                    55:77:6f:8e:b2:ba:ea:81:e6:e0:7b:b8:f7:d5:b2:
                    ca:e6:7f:80:56:df:0d:5e:db:9b:5d:83:88:21:20:
                    f2:97:89:4e:13:a2:06:ea:a2:9a:49:0e:a2:c9:50:
                    6f:1a:26:28:46:99:0e:c0:3a:30:d9:09:2c:8e:0a:
                    c8:02:5d:23:9d:f7:5a:e4:b0:62:27:8d:81:fb:1f:
                    7e:b1:a2:15:dd:3b:c8:63:5e:d3:f7:0a:b8:e2:a2:
                    be:ac:19:65:ba:3f:ae:84:c5:d4:ba:ff:39:48:6b:
                    87:e3:21:3c:84:1b:8c:07:dd:48:5b:9b:15:bb:bf:
                    8c:2b:dd:f0:e6:5a:04:67:42:0b:e6:cf:b1:10:19:
                    7b:df:76:80:13:49:ec:f4:fb:3e:20:af:4c:2e:8b:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BE:64:30:18:1E:66:3C:54:36:54:75:C5:42:10:A2:E4:97:CB:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/40ba5054-bb25-3533-a6d5-845bdc392d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:08:6c:0e:a6:5f:b4:29:a1:55:53:6a:3a:d0:c7:f5:0f:04:
         60:ed:fc:8f:ce:c3:0f:b6:a5:70:8e:89:8a:ad:74:82:b8:67:
         ab:ec:71:cf:eb:30:c8:51:57:39:ba:78:42:04:c8:04:fb:29:
         68:8a:39:fe:d3:30:69:7d:3b:38:84:94:ec:49:39:e0:e0:b3:
         1b:48:3f:0d:cc:c8:da:50:36:a7:e5:c1:82:b6:37:f6:e1:6d:
         e3:3f:71:91:ef:8b:34:05:59:73:56:01:2e:ee:f5:28:3f:c9:
         4e:a5:3c:fb:19:1d:12:c5:d3:65:cf:a2:7a:4d:66:d7:88:1a:
         5e:dd:4d:78:ac:cd:de:5c:79:65:e8:05:ef:ae:1e:d9:9c:4c:
         a3:dc:c6:db:0a:72:34:ab:8b:2f:ff:75:c9:8e:3d:48:38:ea:
         6f:db:a3:13:12:9b:03:6c:93:25:7b:60:30:5c:37:13:1d:71:
         3c:80:c0:97:45:fa:ff:f7:05:13:c9:80:f3:88:d3:e8:41:77:
         05:02:1d:ae:ce:d8:f5:1d:07:b9:68:8a:03:b1:3e:66:f0:69:
         ae:a5:c8:f5:ed:23:85:4d:c0:b2:c2:67:ea:68:9e:70:30:0c:
         92:a2:da:09:1a:59:01:2b:44:37:65:17:88:69:0e:66:d3:b1:
         b7:d2:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----