Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/787b4396-9de7-311b-bb77-44f6355d6879.roa
File:                     787b4396-9de7-311b-bb77-44f6355d6879.roa (raw, json)
Hash identifier:          EO3R1SCALpN4pAzCL2Ipcliby6uTDx4V5IKsxmB7bmg=
Subject key identifier:   F4:1E:30:C2:B8:88:AF:D9:C2:FD:13:21:58:AB:18:1B:F5:E7:CE:A2
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328583AC82A44F71B43AE76E0D99180
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/787b4396-9de7-311b-bb77-44f6355d6879.roa
Signing time:             Sat 31 Jul 2021 04:00:00 +0000
ROA not before:           Sat 31 Jul 2021 04:00:00 +0000
ROA not after:            Mon 31 Jan 2022 05:00:00 +0000
asID:                     396955
IP address blocks:        163.253.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:c8:2a:44:f7:1b:43:ae:76:e0:d9:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Jul 31 04:00:00 2021 GMT
            Not After : Jan 31 05:00:00 2022 GMT
        Subject: CN=34cb4d37-d62f-4a27-b1fe-b8840815821e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:62:dc:89:8b:ad:47:83:81:fe:4c:0a:c8:a9:
                    36:ce:e5:cf:4d:6f:1d:92:45:f3:31:f9:c3:2c:0f:
                    7d:71:0c:63:ea:45:95:44:a4:ef:c8:1c:7b:95:ec:
                    0e:b5:1d:5b:26:f7:00:b1:e8:1b:c2:b5:33:e7:03:
                    a0:ed:0f:62:07:3a:05:db:b3:68:0b:e7:17:a2:bf:
                    3a:0d:e8:2a:ec:5e:cb:a2:4f:f1:70:4a:2f:07:1f:
                    6e:eb:3b:77:5d:18:48:d4:a5:0c:84:b6:4f:d5:61:
                    75:ba:e4:aa:02:ed:87:89:b2:16:fa:7e:fb:f7:a6:
                    0a:4b:19:b6:dc:c0:2e:fa:8e:e4:52:60:5f:d8:c5:
                    77:86:0a:6d:9f:bd:8c:25:64:17:b3:42:2a:94:a1:
                    00:05:bf:e1:46:92:73:8a:dc:6d:c0:f5:5f:cd:a3:
                    f7:c6:61:f3:47:00:d6:20:51:6e:f4:57:46:58:06:
                    44:36:bc:6f:32:7c:d0:aa:8b:db:95:95:14:fe:60:
                    1e:8a:e2:bd:51:b8:42:ce:5c:4b:b2:ce:f7:76:81:
                    52:b7:7a:74:4b:4f:79:6e:b3:9e:ef:ef:31:34:ca:
                    ba:36:39:f9:a6:39:c8:ea:73:b8:09:86:e7:08:da:
                    04:aa:e6:ef:1f:5b:3f:b0:f3:a9:5d:54:65:71:08:
                    b2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1E:30:C2:B8:88:AF:D9:C2:FD:13:21:58:AB:18:1B:F5:E7:CE:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/787b4396-9de7-311b-bb77-44f6355d6879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b0:90:c0:9d:08:2f:bd:f6:03:d6:56:37:24:89:f9:ee:9e:
         94:c3:5a:97:76:14:66:3b:c0:11:66:83:6c:68:32:a3:02:e3:
         c5:e9:5e:ce:05:af:1b:c8:7b:5b:92:62:32:30:00:4c:c3:51:
         cc:20:56:a9:5c:95:2a:0f:c9:a3:79:5b:bc:45:96:93:85:2f:
         43:75:fd:fb:42:06:6e:1d:80:1b:c7:30:63:dd:fa:2d:32:40:
         62:9c:96:32:7a:eb:54:62:2d:cf:1f:3f:79:ff:7e:ac:22:91:
         85:d0:5b:4a:c7:21:2c:b0:4a:8d:02:89:20:22:33:69:97:43:
         a0:b4:8b:82:a0:3c:17:0e:ae:3f:78:8d:50:b5:06:58:1b:52:
         d5:d3:df:87:3f:d1:5e:3a:a7:46:ed:dd:90:90:2d:20:31:d8:
         86:48:38:e4:14:1a:55:f3:0b:da:e3:28:56:4a:de:64:04:7b:
         e9:51:08:e5:bb:28:53:8b:4e:63:44:11:22:da:68:96:10:c0:
         06:00:51:29:4a:77:a3:0f:58:6a:ab:8d:4f:a7:6e:c7:56:4b:
         43:1a:23:36:97:a0:df:e8:53:e0:9f:b8:68:0f:ba:dd:59:ad:
         24:88:89:d5:8b:b8:b9:d9:0f:e7:5f:20:bc:bf:90:85:ad:1e:
         c0:67:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----