Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/0f7e258e-6c8a-38c1-bb75-2c8a9730b6c3.roa
File:                     0f7e258e-6c8a-38c1-bb75-2c8a9730b6c3.roa (raw, json)
Hash identifier:          5UlV1bAGg7Edq9ZcBxUKR13ci5RceoXEagfcmn8Nd9w=
Subject key identifier:   7C:92:2C:29:81:6C:61:1E:A4:3E:79:51:C7:93:8D:85:B3:3B:37:EF
Certificate issuer:       /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial:       010D0C9F4328583D9D71739B3622B8FEF327AD40
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/0f7e258e-6c8a-38c1-bb75-2c8a9730b6c3.roa
Signing time:             Mon 18 Apr 2022 04:00:00 +0000
ROA not before:           Mon 18 Apr 2022 04:00:00 +0000
ROA not after:            Wed 21 Dec 2022 05:00:00 +0000
asID:                     396073
IP address blocks:        147.124.204.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:9d:71:73:9b:36:22:b8:fe:f3:27:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
        Validity
            Not Before: Apr 18 04:00:00 2022 GMT
            Not After : Dec 21 05:00:00 2022 GMT
        Subject: CN=db35acb3-0f77-4d8b-aae0-97cd763983ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:40:3c:35:c2:2c:52:40:4a:d3:46:9a:2a:c0:
                    3b:cb:a6:5c:29:32:7d:f5:de:bd:c0:ed:ef:a2:25:
                    0f:b1:f2:b9:36:19:e8:85:09:1f:58:6f:99:82:ee:
                    b3:a4:74:40:a5:0f:34:82:e3:7d:a1:da:59:5f:c3:
                    59:04:56:f3:e3:de:ac:03:44:ac:b2:04:35:e6:0a:
                    9a:70:80:93:18:12:df:e7:97:24:01:fd:ab:84:83:
                    07:0d:ba:1d:8d:14:35:cc:8b:18:8d:a6:9c:96:77:
                    f8:1f:e9:7c:44:8f:eb:0a:f5:b8:2a:80:0e:6c:c5:
                    04:9c:60:79:62:de:20:9e:46:50:73:2a:94:f1:cf:
                    e5:a2:ab:3d:a9:07:f5:94:6e:b7:dc:2c:22:d4:1f:
                    9b:b2:c8:13:2a:b5:86:6e:7c:77:f8:2e:b6:ba:fa:
                    6b:30:16:2e:70:d0:9d:69:2a:96:d0:6d:4c:86:26:
                    3a:d8:bf:3f:21:38:ce:22:32:8c:3e:80:bb:50:bb:
                    e1:98:8f:85:8d:8d:f9:50:97:12:ab:84:4e:72:44:
                    51:71:d0:f6:47:70:67:2a:b8:8f:4d:26:8e:f0:c1:
                    7f:92:1a:40:15:10:58:cd:eb:37:a1:5b:7d:3a:1f:
                    29:85:74:9d:28:f2:5d:69:2e:83:4a:a3:a4:a8:28:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:92:2C:29:81:6C:61:1E:A4:3E:79:51:C7:93:8D:85:B3:3B:37:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/0f7e258e-6c8a-38c1-bb75-2c8a9730b6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl

            X509v3 Authority Key Identifier:
                keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:18:f1:c4:1a:f0:96:02:66:05:be:c7:27:01:a1:df:69:6f:
         42:e6:47:da:bb:6b:a3:c3:24:68:e7:ed:31:c3:88:1e:95:c5:
         e6:18:67:d0:95:43:72:d6:80:a2:7f:60:17:8b:a6:54:16:93:
         d3:a2:88:a8:f7:37:02:a3:d7:ce:33:cb:28:c2:70:91:9e:c4:
         14:ff:b6:9a:e7:7e:b1:1f:20:64:c7:d4:4a:66:67:54:62:ad:
         1a:c3:e0:2f:8e:ee:8b:bb:88:d5:77:63:c6:4a:4b:06:9a:ef:
         c3:ff:dc:51:8a:16:59:a0:3c:d1:28:63:59:e9:90:0a:8b:48:
         94:bc:4b:36:18:7c:46:5b:3d:36:da:41:e8:c7:96:04:e1:db:
         32:62:81:99:33:64:74:27:1e:5e:02:25:46:ed:c0:28:4c:f8:
         34:d5:62:69:40:e4:36:35:cb:af:11:86:48:4c:c3:29:2b:fe:
         10:a1:3b:8e:68:91:c8:62:39:82:bb:2e:db:62:4c:7a:a5:af:
         8c:d1:75:04:54:9f:6e:d1:f1:b5:03:63:ff:38:d5:95:d3:3e:
         27:96:af:6e:1a:d7:03:d1:7e:84:c8:d1:d9:b8:fc:f3:a8:56:
         9f:91:2b:1a:af:8a:46:04:61:ab:6b:5c:17:53:48:be:c4:95:
         a5:87:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----