Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/7fd9634c-68c6-3e2c-99c2-d9ab3c4526d3.roa
File:                     7fd9634c-68c6-3e2c-99c2-d9ab3c4526d3.roa (raw, json)
Hash identifier:          bNbF70EAxe3e5TwmoZx4DjMATR8kqIKH3MTj+EKlTak=
Subject key identifier:   36:03:3D:75:FF:A9:9E:7F:2F:D0:AE:8E:DC:23:5A:42:24:2D:92:34
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328583B057BD4A1ECF280F0B3DB8B80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/7fd9634c-68c6-3e2c-99c2-d9ab3c4526d3.roa
Signing time:             Mon 23 Aug 2021 04:00:00 +0000
ROA not before:           Mon 23 Aug 2021 04:00:00 +0000
ROA not after:            Mon 31 Jan 2022 05:00:00 +0000
asID:                     11164
IP address blocks:        163.253.30.0/24 maxlen: 24
                          163.253.40.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:05:7b:d4:a1:ec:f2:80:f0:b3:db:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Aug 23 04:00:00 2021 GMT
            Not After : Jan 31 05:00:00 2022 GMT
        Subject: CN=2a81b955-a61b-467d-bdce-895b30e301cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:38:39:8e:e4:f6:b6:30:17:c8:3c:62:92:
                    f5:44:75:ea:07:48:f2:bf:75:58:3e:2b:93:cd:63:
                    27:59:d8:7a:50:ff:7e:2d:da:ed:cc:da:19:a1:9f:
                    af:cd:85:33:fe:35:d3:7d:e1:56:13:b9:ba:47:03:
                    11:b0:46:dd:6b:b7:3f:1d:a8:ce:35:f4:86:aa:5c:
                    32:68:e2:e6:5f:f6:0d:54:09:96:95:c4:9c:ba:3c:
                    ca:46:ab:4d:e6:11:33:91:cf:f9:66:df:cc:74:f9:
                    60:e4:02:31:90:bf:59:a6:2b:1b:db:88:0b:35:03:
                    d5:c6:f3:a3:92:04:9b:31:47:c3:f7:ea:6a:74:df:
                    dc:c3:45:1e:b1:90:13:3d:0e:2f:49:31:2b:10:7d:
                    cf:ed:65:10:1d:fd:e4:e9:17:27:d4:7b:36:74:d0:
                    11:48:68:c3:a8:47:cc:c5:eb:f3:e7:85:e9:29:55:
                    37:ed:73:96:ad:4f:80:6c:4d:50:ed:91:6b:c4:73:
                    9e:cf:94:e5:f6:c9:a2:28:e5:4d:4c:72:3a:c0:02:
                    e6:28:7b:65:24:0d:48:9c:c9:52:7d:1e:66:64:7c:
                    9f:1d:66:34:7b:9e:92:df:6c:e5:ea:d6:e2:0a:10:
                    df:0a:b9:03:b4:3f:e9:f7:10:3c:5a:12:96:dd:27:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:03:3D:75:FF:A9:9E:7F:2F:D0:AE:8E:DC:23:5A:42:24:2D:92:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/7fd9634c-68c6-3e2c-99c2-d9ab3c4526d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.30.0/24
                  163.253.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8a:f0:1a:54:c8:b0:40:78:87:94:41:a3:e0:bb:97:d0:d4:
         dc:90:5d:b0:8f:83:d1:03:07:fa:38:05:30:d6:70:73:ad:e6:
         39:66:ac:94:e9:7c:60:25:3f:21:bf:b8:27:75:42:44:1d:b8:
         31:ab:4c:f8:d6:00:3b:7d:1b:74:52:84:42:12:46:39:ef:1a:
         3d:fd:e9:23:bb:5d:15:3d:ca:df:c2:63:c3:12:d3:ad:b5:2b:
         59:c4:0a:b7:cc:c3:ad:95:e8:51:89:a2:4c:4d:de:e5:7d:32:
         ec:17:ca:5b:74:cd:79:ab:91:ae:40:f1:ad:be:4a:ba:91:bf:
         2b:56:1a:58:67:5c:4f:99:6a:8c:e8:84:07:ec:57:2b:7c:b7:
         db:23:ef:48:97:54:3b:86:e4:ff:62:cf:27:86:84:9f:20:2d:
         76:59:0e:67:da:98:97:b8:57:b5:11:ca:fd:cf:77:60:71:00:
         3a:d3:a2:af:41:7d:6a:fc:3a:e4:63:86:95:88:5f:05:ef:05:
         1a:36:7f:70:f3:51:25:66:55:13:70:a7:a3:f0:08:ba:33:11:
         4b:50:3e:f5:7a:93:89:d0:b6:a4:0b:76:c6:b8:42:4d:94:33:
         08:56:65:58:1d:5b:dd:3d:e0:16:5b:a4:1d:50:72:ac:2d:13:
         a0:81:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----