Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/193102ed-a352-348f-ad5c-59bc5343e200.roa
File:                     193102ed-a352-348f-ad5c-59bc5343e200.roa (raw, json)
Hash identifier:          tnDksKrJXcXJvbs5Uhd+reSJKtffkpSrTxovZYR6zGg=
Subject key identifier:   8D:79:BB:EA:8C:9F:A4:EE:F4:AF:E6:84:9A:E5:8E:73:D0:C2:C2:A0
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7ADF8BBC398B8DDE8BA0CC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/193102ed-a352-348f-ad5c-59bc5343e200.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.92.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ad:f8:bb:c3:98:b8:dd:e8:ba:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=48a73708-db66-4ec7-b94e-59ba18021d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:aa:8a:d3:65:a9:91:26:c4:43:aa:32:d3:8f:
                    67:2a:16:e8:8d:4c:5d:e9:97:8f:8a:fc:cb:28:86:
                    c5:5b:2f:c2:ca:3d:6f:f4:bc:3b:1e:2a:09:4a:5a:
                    54:e8:f7:11:18:0b:5e:49:f3:45:d8:c2:f0:b0:9e:
                    36:c8:a7:c1:9c:5b:c8:eb:98:86:8a:60:47:86:4a:
                    92:8d:10:aa:8b:3b:68:0e:3c:e2:c5:2c:b8:da:bc:
                    9d:af:84:ae:72:1c:8c:03:51:41:fc:77:b1:50:a5:
                    95:28:31:d4:51:a3:59:65:14:71:21:b5:d0:27:9f:
                    84:be:6c:5b:ae:9a:01:1a:90:7c:7f:9d:fb:6f:f8:
                    31:82:98:e6:b0:f5:81:96:65:4b:38:f1:82:82:03:
                    05:a4:df:b0:a1:51:50:b4:f1:64:e3:2c:bc:c3:83:
                    0b:0a:7e:ed:b5:2e:6a:4a:d3:cb:6c:67:c7:3a:75:
                    0c:dc:c7:aa:fd:30:6f:ad:84:85:4b:94:7f:4b:a5:
                    7f:b2:ce:de:79:70:4f:2d:4b:d9:06:74:96:52:50:
                    21:d6:ce:7a:22:13:e5:de:3c:7a:3d:fb:b2:ec:b5:
                    30:40:32:63:7b:1b:ce:3c:f0:bb:5b:4d:53:76:b6:
                    6e:35:a6:5c:ae:58:ab:eb:dd:0b:5d:01:58:83:73:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:79:BB:EA:8C:9F:A4:EE:F4:AF:E6:84:9A:E5:8E:73:D0:C2:C2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/193102ed-a352-348f-ad5c-59bc5343e200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:12:34:f3:f3:ed:53:26:fe:e2:2f:0d:c2:fd:79:68:3a:
         95:99:1a:ac:a6:4b:a3:b1:4f:b4:01:c4:41:b1:90:2c:7e:f5:
         5f:ab:6a:00:46:7e:4b:69:ff:57:69:96:d2:83:08:51:70:a5:
         19:bf:50:5f:c6:ea:3c:02:1b:23:14:70:b8:6c:78:75:60:c8:
         79:18:47:79:e2:fd:49:a2:79:c5:3a:11:04:70:ca:79:2c:c0:
         c2:ca:1f:b8:7a:e0:c4:be:56:cb:81:ea:a6:3f:78:e9:ce:53:
         e9:17:2f:7b:42:af:fc:cf:8d:26:2c:1c:6f:2d:d3:b9:b8:a6:
         c9:c9:18:33:ae:5a:a6:08:7d:94:71:35:7a:52:37:aa:75:5e:
         38:85:04:d1:70:ff:e7:e0:00:42:93:a5:75:58:05:5e:6e:35:
         6d:cf:9e:e8:20:c9:47:5b:49:42:67:dd:ca:7d:d8:14:d4:5f:
         2f:1b:b9:85:4a:75:db:a0:c4:45:6a:fa:83:cd:8c:76:1b:d4:
         ec:a7:9c:24:09:37:f3:92:6c:00:59:0f:92:79:14:d4:1e:51:
         16:aa:c6:77:b9:ac:d4:24:e9:17:4d:3d:0f:52:4d:3f:ff:f3:
         da:2d:ec:0a:0d:77:85:ff:82:cf:21:bf:2d:b8:8a:a7:94:4b:
         73:5d:bd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----