Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a3495d0c-3c1b-31f5-a088-f65542ba1658.roa
File:                     a3495d0c-3c1b-31f5-a088-f65542ba1658.roa (raw, json)
Hash identifier:          WP9am1FigPyjTY2HkYCY/z+Ol4x0/DgIMmZ3k7IXsyA=
Subject key identifier:   CE:53:D7:62:98:B0:BB:CA:F6:C1:7C:45:EF:47:F7:FD:1D:73:B6:9F
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328583C40DA4C0C112A6B642B6FD580
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a3495d0c-3c1b-31f5-a088-f65542ba1658.roa
Signing time:             Tue 14 Dec 2021 05:00:00 +0000
ROA not before:           Tue 14 Dec 2021 05:00:00 +0000
ROA not after:            Wed 14 Dec 2022 05:00:00 +0000
asID:                     13414
IP address blocks:        69.195.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:40:da:4c:0c:11:2a:6b:64:2b:6f:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Dec 14 05:00:00 2021 GMT
            Not After : Dec 14 05:00:00 2022 GMT
        Subject: CN=18be883a-3284-43d5-ab01-72d3a89c291e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6c:63:09:fe:c3:cb:fc:74:d6:8e:5a:70:bb:
                    e7:36:4e:16:e8:24:65:e7:10:57:20:92:f6:3d:3d:
                    ea:1e:eb:31:c6:82:92:bc:cb:58:92:36:6e:c2:0d:
                    2a:4b:89:87:54:9e:58:ea:f8:15:b7:37:01:25:8e:
                    4d:6d:0e:28:7e:2c:65:09:ec:6c:7f:0f:9e:05:64:
                    0f:0c:0e:04:e4:c9:f9:4e:b9:54:16:7a:13:93:50:
                    2f:60:49:a9:66:73:6e:3d:b0:54:51:54:24:0a:e4:
                    b8:40:59:48:4d:93:e7:3a:e2:7f:b2:93:63:e3:03:
                    80:87:16:10:91:aa:23:af:bf:cd:d3:7b:05:ec:a3:
                    56:e5:0d:bd:11:ff:17:96:d2:08:1d:6f:38:dc:0f:
                    be:e4:78:8a:08:b7:75:0c:f9:dc:21:a1:f7:c5:12:
                    87:e8:8b:f5:27:48:03:9f:32:fd:08:ad:4e:a8:2d:
                    14:8c:78:99:7b:c9:68:4c:e3:51:eb:76:8c:f5:1d:
                    25:7d:82:6a:41:a3:dc:11:28:68:b1:0d:d8:85:96:
                    ce:0c:b6:53:da:21:07:e4:65:77:1e:da:80:09:fb:
                    a5:2e:80:97:e3:39:b8:bb:3d:70:b5:e6:2c:e9:6e:
                    64:73:d1:98:9c:f1:bf:12:53:26:6a:e5:a1:69:75:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:53:D7:62:98:B0:BB:CA:F6:C1:7C:45:EF:47:F7:FD:1D:73:B6:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a3495d0c-3c1b-31f5-a088-f65542ba1658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.195.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:28:94:17:7e:89:8f:98:4d:83:b4:43:67:be:25:35:d1:ed:
         15:8f:47:64:cd:fd:ed:34:98:15:fe:df:45:f6:4c:12:49:ed:
         af:12:07:d7:97:99:e7:c7:e8:87:6e:8d:02:fe:58:b5:6a:ef:
         f8:08:b0:66:81:e7:bd:2e:76:57:38:42:18:7f:f7:f2:6b:03:
         48:42:c8:50:87:57:d0:e2:53:e8:84:25:d2:51:0e:8e:e9:13:
         b9:0d:37:5c:94:b1:c5:13:c4:51:a9:4d:ed:25:54:83:12:63:
         f8:8b:11:ff:14:f3:61:1a:bc:41:c8:ea:77:51:49:50:8f:d7:
         d2:55:10:5e:b6:88:68:67:9d:e6:26:3c:84:70:4c:c9:68:27:
         12:6c:e0:79:14:81:69:ed:ef:46:34:20:85:c0:b8:d4:34:b1:
         9c:a7:48:5a:14:f3:66:d5:a4:49:b0:b4:93:c8:12:0c:dc:18:
         df:b0:b4:4d:a5:0a:3d:cd:75:72:52:56:11:46:68:e9:62:f1:
         f1:24:18:f0:8d:bd:e4:ea:8e:ee:75:13:28:aa:69:58:ea:20:
         96:8e:41:96:db:29:b7:18:dd:44:be:e8:57:c8:a9:7d:3a:d7:
         b0:5c:25:6d:b4:f9:74:eb:3d:46:fb:18:02:00:1a:ac:d8:3e:
         c0:d4:6f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----