Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/210adaff-0698-31ee-a2c6-6ce1a46eec08.roa
File:                     210adaff-0698-31ee-a2c6-6ce1a46eec08.roa (raw, json)
Hash identifier:          202hacq+6uVvTErVk1hjH8p3ZKFSX4/Z8EYPAmGDo4k=
Subject key identifier:   25:61:37:AD:20:6C:A6:22:D8:38:0F:F7:BD:F9:87:0C:EC:47:E3:8E
Certificate issuer:       /CN=0679e601-ff38-42c1-9b52-0b5bad96b962
Certificate serial:       010D0C9F4328583C9890ACDBA1581C3336CE6A80
Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/210adaff-0698-31ee-a2c6-6ce1a46eec08.roa
Signing time:             Wed 12 Jan 2022 05:00:00 +0000
ROA not before:           Wed 12 Jan 2022 05:00:00 +0000
ROA not after:            Thu 18 Apr 2024 04:00:00 +0000
asID:                     398355
IP address blocks:        207.90.241.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:98:90:ac:db:a1:58:1c:33:36:ce:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962
        Validity
            Not Before: Jan 12 05:00:00 2022 GMT
            Not After : Apr 18 04:00:00 2024 GMT
        Subject: CN=177f9c99-1d14-48b5-b5ad-c2509c1b1195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:b1:41:25:69:6d:d4:8d:1b:b5:09:07:da:
                    10:41:d5:8a:79:1d:64:29:ef:a4:2d:22:2c:f0:f2:
                    5b:b3:da:22:83:6c:ae:c9:1c:9b:42:89:b8:6d:89:
                    16:4f:9a:7d:b5:10:e8:cb:70:29:1d:a2:ac:50:92:
                    e1:ec:aa:f2:8d:97:3f:fa:6c:12:83:7b:03:b8:64:
                    27:79:6b:b8:e8:94:40:d2:b2:ba:29:64:5d:a6:21:
                    9b:8f:60:44:6f:67:d9:21:47:b3:8d:c9:78:25:47:
                    69:b6:b9:9c:3d:a7:3b:e3:f7:53:55:41:61:de:af:
                    2d:6d:2b:f3:7d:00:4a:69:f9:69:cb:89:b3:2f:06:
                    d8:a2:4a:a6:ed:2e:f4:37:7c:d6:a4:46:5d:09:d5:
                    a9:80:cb:79:de:09:fa:ed:42:a3:88:5d:4a:c5:ed:
                    72:c0:63:f5:5f:0d:77:de:1b:ef:5a:0c:16:64:e6:
                    39:88:75:d1:93:d1:b4:7e:67:a0:91:1d:38:4a:ef:
                    4b:70:fd:a0:a3:68:a9:37:4d:8b:3c:5b:88:f4:e8:
                    44:d3:93:0e:bb:08:07:29:7c:7f:29:a7:da:7a:07:
                    ba:c9:a7:5e:f2:06:1c:52:5c:87:64:8f:01:e6:da:
                    41:b0:3a:fa:cb:9c:2f:62:03:15:b9:71:c4:56:27:
                    a2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:61:37:AD:20:6C:A6:22:D8:38:0F:F7:BD:F9:87:0C:EC:47:E3:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/210adaff-0698-31ee-a2c6-6ce1a46eec08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl

            X509v3 Authority Key Identifier:
                keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:6e:18:d7:dd:43:08:16:8f:9f:bb:56:66:7f:37:17:56:59:
         94:16:fd:3a:e1:38:46:d6:a3:e2:23:87:bf:5d:49:1c:2c:79:
         5d:5b:ba:c4:15:b9:f5:2d:b7:35:d4:94:b9:fa:55:ca:06:32:
         a0:79:d7:3f:e3:70:de:e7:58:dd:bf:6b:0a:71:24:52:97:11:
         f1:26:f0:0f:3b:05:c6:9c:06:f6:92:d2:4c:a0:64:57:f0:5c:
         a9:60:9e:e9:28:82:99:87:a9:28:54:a5:c7:29:35:5c:1d:7c:
         48:5c:c0:3d:b5:39:1c:e8:c1:29:b5:24:60:04:ab:3c:9f:3c:
         8f:ad:69:5b:fc:68:75:ff:c6:a4:a6:43:fa:fe:d8:b0:16:17:
         fa:ef:76:50:48:43:cd:28:92:73:c1:9b:d8:b9:92:ff:6a:4a:
         dc:9b:dd:8d:06:d6:80:98:5a:22:12:f7:3f:d5:83:46:f8:90:
         83:15:d1:61:9f:a0:af:9e:8c:25:5c:9d:2c:0d:d4:87:63:b0:
         64:90:05:cb:34:66:e8:bc:b2:61:ce:cd:cc:67:50:14:c0:ea:
         95:3f:86:92:82:8b:92:f6:6e:86:e8:3b:f5:e8:8c:a7:76:7e:
         98:a0:43:f1:6d:4a:f4:aa:46:da:12:ce:a8:aa:b6:27:e1:8d:
         17:b0:04:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----