Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/ed85c450-93dc-3425-ba68-81fac3e42f93.roa
File:                     ed85c450-93dc-3425-ba68-81fac3e42f93.roa (raw, json)
Hash identifier:          4H2pVm/wE4h7bELP2LcE9La0fNJjZgw8l2VCExQsFMM=
Subject key identifier:   15:3D:36:83:B8:5F:87:C6:EA:2D:21:D4:5C:A3:FF:7B:BA:D4:0E:F6
Certificate issuer:       /CN=417c06d0-3203-44fd-b164-0aed50f5638b
Certificate serial:       010D0C9F4328583C3EA2D9484C1FF07A5B7247F0
Authority key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/ed85c450-93dc-3425-ba68-81fac3e42f93.roa
Signing time:             Mon 13 Dec 2021 05:00:00 +0000
ROA not before:           Mon 13 Dec 2021 05:00:00 +0000
ROA not after:            Wed 17 Aug 2022 04:00:00 +0000
asID:                     397423
IP address blocks:        147.124.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:3e:a2:d9:48:4c:1f:f0:7a:5b:72:47:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417c06d0-3203-44fd-b164-0aed50f5638b
        Validity
            Not Before: Dec 13 05:00:00 2021 GMT
            Not After : Aug 17 04:00:00 2022 GMT
        Subject: CN=6a5291df-435a-409e-a102-74995d4c8efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:3a:14:77:05:6c:8e:3d:91:74:ec:7b:18:
                    b8:30:30:3b:82:8f:fd:c3:cb:71:e8:38:d9:d2:f6:
                    65:b0:0e:f8:dc:48:6b:a1:00:25:b3:11:13:d3:d2:
                    6c:87:1d:39:c3:0e:1c:57:ca:36:bc:c4:23:47:64:
                    5b:e8:73:d0:f9:73:1e:84:fb:25:bd:b1:95:a1:5c:
                    67:2c:b9:79:b2:44:2b:3c:af:fe:80:cb:01:73:cd:
                    4e:08:30:7b:ef:54:40:c5:28:88:6c:81:a7:c4:93:
                    28:e4:bb:b9:83:b1:d9:b6:56:40:7d:24:cc:49:f2:
                    3c:40:93:0a:67:e0:76:db:4e:a1:c0:5e:d9:2b:62:
                    2e:2f:80:c9:0d:f3:44:5d:9b:07:03:80:fc:19:95:
                    92:eb:3b:de:bd:49:8c:2a:1c:f0:ce:54:44:48:98:
                    7a:40:45:f3:fd:64:55:53:6c:87:77:c7:66:e2:54:
                    c9:b7:da:8a:ba:e5:d9:72:65:42:29:6c:d5:b0:d1:
                    01:5d:a9:4f:c7:f3:06:84:d9:ed:21:a5:80:28:c8:
                    aa:17:58:c6:9b:65:fa:ab:4e:4c:8b:25:05:b1:e3:
                    1d:0f:35:34:76:15:e4:a9:c3:e0:bb:16:a8:7c:48:
                    e2:76:96:e1:9a:27:a3:76:b6:c6:0c:75:ec:c0:2d:
                    39:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3D:36:83:B8:5F:87:C6:EA:2D:21:D4:5C:A3:FF:7B:BA:D4:0E:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/ed85c450-93dc-3425-ba68-81fac3e42f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.crl

            X509v3 Authority Key Identifier:
                keyid:00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:65:bf:da:b2:2d:54:03:fc:90:55:6e:b7:c9:8d:f8:5f:8b:
         d9:21:9b:fb:fe:a3:5d:53:e3:a9:27:73:d9:ed:68:2f:d6:b6:
         ba:ee:b5:61:8e:82:ee:2a:fb:b2:21:fb:37:5d:47:ca:fa:b0:
         7d:37:a2:30:9a:aa:1c:f6:99:b3:f6:55:bd:77:e0:7c:77:d3:
         4d:0e:f1:2b:3a:bb:9f:c9:a1:70:3d:83:76:d5:fe:08:4d:60:
         b4:c8:d1:fb:12:0f:16:a7:fb:a1:06:fa:8f:e6:ca:70:ff:8f:
         25:8e:af:92:96:a7:5a:7e:dc:c5:ff:a8:71:46:0b:87:f9:53:
         f2:2a:23:62:59:bf:5f:14:04:5e:f5:8a:ea:58:89:27:d7:94:
         b4:9b:a2:e0:d0:9b:d9:2f:63:4c:fd:fe:75:a7:d3:e2:0c:50:
         c0:39:30:b0:79:f8:28:df:8c:45:a7:1c:88:b3:57:e7:f0:2c:
         09:98:0a:b9:b3:fe:6f:ab:64:60:95:c6:4c:78:8e:6f:52:bd:
         4c:48:f2:1d:8d:09:c1:d2:0c:fb:9d:ac:bc:a2:07:21:49:e4:
         5b:e6:17:f1:4b:1f:18:f0:36:42:d8:88:fa:fa:2d:f6:29:3e:
         99:24:4a:30:c0:24:76:ff:57:21:ea:4b:b1:65:ed:e2:e4:bc:
         71:7d:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----