Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/6421d326-30c0-3284-8afc-4a4913f013be.roa
File:                     6421d326-30c0-3284-8afc-4a4913f013be.roa (raw, json)
Hash identifier:          m/iH2nSZzVQmU8rQByzFmDaYNIOjBa39DxztzK1rSDs=
Subject key identifier:   80:2E:94:4B:C8:9F:97:C6:C6:9C:EB:30:81:3B:D1:11:54:BE:A3:FA
Certificate issuer:       /CN=822f9974-af88-4d0b-a65f-065fdd26c645
Certificate serial:       010D0C9F4328583B9B9918D206FB053B60E05200
Authority key identifier: 3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/6421d326-30c0-3284-8afc-4a4913f013be.roa
Signing time:             Fri 08 Oct 2021 04:00:00 +0000
ROA not before:           Fri 08 Oct 2021 04:00:00 +0000
ROA not after:            Sat 08 Oct 2022 04:00:00 +0000
asID:                     1239
IP address blocks:        23.247.244.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:9b:99:18:d2:06:fb:05:3b:60:e0:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822f9974-af88-4d0b-a65f-065fdd26c645
        Validity
            Not Before: Oct  8 04:00:00 2021 GMT
            Not After : Oct  8 04:00:00 2022 GMT
        Subject: CN=7d2df510-b0af-46da-8817-e783c47e78a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:bb:83:af:7b:55:ad:ba:b2:95:28:29:48:
                    0f:38:52:84:f2:56:47:4f:33:a0:a2:39:fd:a1:7a:
                    36:07:38:10:aa:08:92:1d:2f:84:c3:0d:65:b6:5a:
                    dd:89:41:b1:6f:50:ae:0c:54:25:9e:97:1d:84:5c:
                    e3:08:eb:62:98:e5:f0:a2:a9:e0:f1:51:b9:07:19:
                    57:b2:c8:7d:28:e7:59:c6:9e:3b:cd:26:49:c4:2d:
                    b4:65:a8:f8:47:8f:d2:86:a1:84:59:25:59:45:e8:
                    c2:ce:12:1f:54:0f:13:ec:70:5e:63:c0:80:a2:44:
                    ee:e8:85:46:52:9c:ce:f6:fa:d3:aa:77:3a:46:9d:
                    69:af:ee:74:59:0e:b4:90:54:ef:8c:ef:80:3e:cb:
                    5b:b3:55:f7:0f:a7:ad:00:c0:f5:20:f7:19:9c:45:
                    d6:6f:9e:7c:da:7f:56:f3:8b:50:94:79:53:f6:3b:
                    dd:38:77:01:ce:67:e6:25:08:f1:af:ba:3b:73:9b:
                    9b:44:7b:5f:d8:46:ae:06:39:24:43:a0:74:ca:cc:
                    30:e6:89:55:84:80:26:63:45:12:c5:5c:8a:b7:04:
                    14:a8:c4:a1:b9:83:0d:e3:59:aa:2a:6e:46:18:58:
                    e3:b5:48:ec:3a:2d:2c:31:48:3b:4b:00:14:63:2a:
                    2f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2E:94:4B:C8:9F:97:C6:C6:9C:EB:30:81:3B:D1:11:54:BE:A3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/6421d326-30c0-3284-8afc-4a4913f013be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl

            X509v3 Authority Key Identifier:
                keyid:3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:6b:67:7f:15:61:23:78:45:b3:12:6d:02:7f:2e:93:80:
         4b:38:30:52:b3:38:fa:bb:45:fd:a4:46:9c:04:85:9e:80:c2:
         66:78:8c:7c:e2:3b:22:b7:9f:ed:c8:90:56:34:f9:74:f7:d0:
         37:dd:94:0d:9f:cf:c1:ed:79:e2:0c:67:e5:c1:00:d4:9d:5c:
         f0:59:88:70:77:ba:3c:3c:5d:5b:99:25:d3:03:44:de:c6:ee:
         17:cf:94:cc:c9:e9:1c:b5:4f:d5:aa:a7:9d:e1:58:c0:d1:3b:
         a8:d0:dc:f4:1a:a9:ce:44:2e:e5:19:90:ce:74:ab:3d:80:42:
         3b:09:62:4a:99:98:a7:cc:29:94:82:81:28:06:73:89:69:62:
         c5:6e:34:7c:85:58:07:39:f6:1c:01:50:a3:b6:53:b6:fe:46:
         5a:5c:4a:e1:c0:58:d9:b5:07:68:bf:6b:47:49:ac:3f:e9:53:
         a6:9b:9b:ba:d2:26:b6:c3:62:8e:32:58:62:a7:54:a9:6f:b5:
         83:e9:62:f7:1e:ac:04:39:34:f3:16:81:0a:41:1a:ab:f9:40:
         b6:86:fe:d3:2d:9d:1f:f6:3e:d9:fc:62:e3:c0:fc:f1:86:fb:
         3b:1a:2e:46:c3:9b:40:c2:a7:60:95:d1:f3:4d:e4:e2:a3:60:
         35:70:bd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----