Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/021f084c-3ade-385c-a81b-747dd648d50a.roa
File:                     021f084c-3ade-385c-a81b-747dd648d50a.roa (raw, json)
Hash identifier:          L0ODbdeUlB0uHvSwqTdMRyc2iX6Qe/1CKp2pwfFoIjE=
Subject key identifier:   03:D9:54:12:CD:BD:13:C4:FF:1E:86:59:9D:10:8B:BB:88:6A:83:F1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7B39B6FA4BED6AD9697EA00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/021f084c-3ade-385c-a81b-747dd648d50a.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b3:9b:6f:a4:be:d6:ad:96:97:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=ba8f7624-a70b-49b2-b2cd-bca48ef62631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:90:81:e8:b8:ed:62:0f:8f:74:db:83:67:79:
                    b6:56:62:a1:18:d2:35:63:cc:e8:37:7d:3b:6e:fe:
                    f2:ec:aa:34:4a:ee:84:3a:64:1f:ce:ef:84:07:77:
                    50:d3:5a:57:1d:20:d3:57:5f:97:1c:2d:c6:f3:a6:
                    57:62:7e:2a:b8:5e:c4:fa:41:bb:b1:0e:42:ca:e8:
                    94:69:29:b6:3d:14:16:95:2d:87:9e:b6:c9:77:27:
                    af:38:8c:e6:07:0b:87:b5:68:ee:cc:24:5f:9b:e5:
                    39:42:32:56:97:31:b8:f0:a0:7b:09:ba:55:37:12:
                    a5:27:9d:a8:54:50:e8:8c:31:86:84:19:55:13:b4:
                    70:bb:3a:d6:15:ed:dd:fe:70:ee:e2:36:dd:59:f9:
                    e5:8d:9d:70:ab:d7:57:1d:5b:8e:35:d6:b2:5e:fa:
                    e7:52:f9:01:fd:8c:6e:3c:9e:cf:1a:22:3a:a3:c8:
                    6f:19:c2:36:62:f9:28:44:4d:5e:05:e9:72:49:95:
                    33:f0:a6:97:80:bc:c8:66:2d:54:ad:4f:a0:68:2b:
                    2e:9a:bd:0f:aa:8e:9a:66:00:c4:83:64:b6:40:ce:
                    53:b2:b4:1d:cb:bd:d4:93:c9:9d:19:ca:f1:6b:3b:
                    37:58:38:22:84:26:99:01:67:d3:90:6f:5c:76:79:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D9:54:12:CD:BD:13:C4:FF:1E:86:59:9D:10:8B:BB:88:6A:83:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/021f084c-3ade-385c-a81b-747dd648d50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d0:06:77:a5:d5:f2:b1:5a:7c:4e:8c:08:bd:b8:c5:90:92:
         f9:01:0a:f9:82:dc:51:92:f0:fa:ac:2e:2c:8f:1b:6a:12:91:
         1b:75:d9:9e:d6:70:cf:a6:14:80:25:88:b1:78:44:3f:dd:4b:
         81:7e:0a:1e:84:e5:4b:0a:30:93:84:ae:dc:df:88:52:7d:67:
         27:a3:ef:b1:52:4f:02:b5:f3:59:e0:c9:e3:e3:4c:fc:89:bc:
         f1:24:c2:2a:76:23:3a:0f:b7:72:54:cf:19:f7:2e:34:9c:17:
         be:02:64:bd:76:8d:3f:56:ab:b4:e1:12:f9:ce:60:a9:30:49:
         36:55:7f:cc:7c:a4:ad:f7:97:62:90:5b:86:95:59:58:b7:ef:
         fb:e0:40:1b:ce:46:50:a1:ab:19:bd:a1:c6:8a:fc:05:0a:a7:
         01:e3:4d:6d:8f:79:c7:de:62:c7:40:87:22:c3:b1:4b:ed:6c:
         48:c0:40:5a:c1:77:6c:1d:97:5b:63:61:c3:44:cc:d0:1b:1d:
         ab:84:7e:56:2b:39:e4:4a:2a:4c:6a:81:5c:38:95:b2:6c:7b:
         55:b3:00:ba:fe:e1:7f:6a:6b:4a:cb:52:c8:fd:66:d9:73:92:
         ed:14:85:22:54:89:a1:b5:44:1a:08:40:c9:74:2b:b6:b7:96:
         a7:db:d2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----