Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/91c00035-c230-31fd-98ba-25b79d5aeb57.roa
File:                     91c00035-c230-31fd-98ba-25b79d5aeb57.roa (raw, json)
Hash identifier:          i/KudSTJhBG8o20QJVjjvN7pODS6Hzx7xrkZ7Cy9f58=
Subject key identifier:   83:87:E6:0F:17:EF:5D:4F:47:BB:A8:F7:E8:AA:D1:B6:09:0E:84:3C
Certificate issuer:       /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial:       010D0C9F4328583B9B8E21BBEE597D9A40C12500
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/91c00035-c230-31fd-98ba-25b79d5aeb57.roa
Signing time:             Fri 08 Oct 2021 04:00:00 +0000
ROA not before:           Fri 08 Oct 2021 04:00:00 +0000
ROA not after:            Wed 19 Oct 2022 04:00:00 +0000
asID:                     1239
IP address blocks:        208.99.8.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:9b:8e:21:bb:ee:59:7d:9a:40:c1:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
        Validity
            Not Before: Oct  8 04:00:00 2021 GMT
            Not After : Oct 19 04:00:00 2022 GMT
        Subject: CN=19dba649-4979-4fb7-ac9b-0e1d09dfb98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:22:ed:5a:71:60:fa:85:42:c6:e2:2b:aa:db:
                    60:2c:d8:d4:cd:76:0b:6d:db:40:96:46:b0:c6:13:
                    14:87:b8:3a:e0:2f:49:54:e8:e6:66:5e:d1:96:bb:
                    a8:f6:05:6b:7f:64:10:20:7f:5c:9a:04:90:0e:c7:
                    52:3a:e7:ba:38:22:13:98:da:01:82:59:26:62:cc:
                    de:18:14:d7:3b:40:a6:bf:72:68:fb:1e:bf:18:2e:
                    4c:63:d8:a7:14:29:e7:2f:65:0f:c2:26:fc:db:e1:
                    17:bb:c6:23:69:8d:c0:c1:ce:39:78:c0:93:f1:69:
                    e8:f1:e0:27:72:5a:d5:83:07:09:6f:44:e1:02:00:
                    aa:ba:9c:04:66:e2:54:14:d0:7d:1b:26:cd:81:07:
                    84:e8:77:0f:6a:4d:6b:d7:ce:74:ac:fc:63:25:78:
                    43:5b:ad:ba:53:3d:01:66:b9:44:8f:d3:e7:a6:aa:
                    e3:69:1b:20:e7:1f:a4:1a:12:d4:bf:26:67:aa:cc:
                    dd:39:30:eb:36:6d:45:dc:5e:69:ea:b1:2d:cf:ee:
                    cc:37:2a:8c:f2:52:0e:90:1a:75:98:6a:f3:42:b2:
                    e2:97:21:98:0d:cd:f2:d0:66:ba:3b:41:f1:c5:4d:
                    6e:e5:37:04:71:ee:ba:3c:40:0b:f2:f6:1e:20:74:
                    21:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:87:E6:0F:17:EF:5D:4F:47:BB:A8:F7:E8:AA:D1:B6:09:0E:84:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/91c00035-c230-31fd-98ba-25b79d5aeb57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:34:a5:14:6a:10:7b:b0:a1:56:e4:eb:87:df:29:de:98:9c:
         d0:00:ca:bf:2a:e2:09:92:c9:b1:c9:4c:04:ee:9c:34:56:61:
         46:11:81:d0:e3:fa:a7:1e:f7:f4:7c:94:47:07:29:12:ca:dd:
         90:31:4f:23:36:0a:12:d4:54:17:e4:07:29:43:8c:63:e0:33:
         ce:8e:91:24:64:e3:f2:9e:d5:1c:61:1f:49:79:91:b2:6e:92:
         89:e3:2a:c3:5f:df:c1:59:8d:0f:b7:c6:6a:85:04:f4:39:ea:
         16:1c:26:01:58:43:a3:31:28:fb:67:3e:6f:3e:53:88:f7:0f:
         9c:d0:1a:ab:09:eb:d2:49:79:98:a3:c0:e8:8b:7b:69:c0:f0:
         ee:08:12:bb:96:47:05:38:c8:30:72:6d:49:3c:85:bc:b8:06:
         75:ee:b9:0f:de:53:75:d9:ac:b4:0c:b6:76:0c:c4:37:68:20:
         a1:e0:04:a9:48:5c:4c:7f:2c:b3:73:8b:f3:b8:0b:d0:39:f0:
         71:77:72:66:61:01:49:ca:3f:fa:af:c9:68:67:39:b1:cf:24:
         1e:ad:7a:66:31:36:db:3b:96:d7:87:b0:d1:84:db:26:7a:0a:
         12:39:4a:1a:ab:e1:b3:d5:37:b1:d0:95:c0:93:7e:61:17:eb:
         7c:ba:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----