Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2491a458-1d1d-343b-930b-79069cb99b14.roa
File:                     2491a458-1d1d-343b-930b-79069cb99b14.roa (raw, json)
Hash identifier:          vcv5ywjTUKz+D8oh+3ocAA1RI7opSuCKCLAQ4y86PLE=
Subject key identifier:   B5:79:73:84:3B:01:77:BD:D3:2E:F7:88:D1:6B:D2:39:74:86:0A:88
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A578461A1B0C4FC4F30DE0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2491a458-1d1d-343b-930b-79069cb99b14.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.240.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a5:78:46:1a:1b:0c:4f:c4:f3:0d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=18c14900-8774-4a00-a817-47e9c7965b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:b2:0d:4b:0d:98:e9:1c:d6:13:50:e5:f6:
                    b9:e6:5c:83:3c:66:8c:2b:fe:ae:c2:03:a5:50:34:
                    3c:ad:2b:64:9e:da:1c:42:27:23:27:c2:a2:73:38:
                    27:41:49:41:f4:59:30:2a:f9:41:6d:21:f1:b2:84:
                    c9:e5:b4:07:34:8c:59:50:74:ae:29:67:07:9c:0d:
                    df:55:d7:f5:f1:bf:37:11:73:42:4a:f9:6b:98:37:
                    63:00:ef:d7:93:d3:e7:fa:8e:b3:d4:40:38:b2:ed:
                    f4:3e:54:d4:91:ee:6f:59:ef:e6:24:34:9f:0b:a2:
                    67:19:63:ae:36:40:f0:63:f9:09:2b:51:48:34:cb:
                    18:50:85:fa:80:01:e8:2f:ff:c0:72:a4:8a:19:fd:
                    77:ae:93:8c:bd:81:5b:b8:a7:46:a7:a3:90:66:24:
                    26:89:d9:7a:c1:c8:8a:4a:8b:b3:40:81:56:8d:a0:
                    e2:83:fb:68:63:f6:e6:b3:a9:0a:20:99:3d:6c:86:
                    52:ca:93:52:8f:08:da:00:09:7a:85:ae:c7:41:37:
                    b9:59:d1:ab:c3:d7:a9:75:c9:0f:a0:a9:fd:a5:68:
                    ea:a6:54:a3:24:a5:2e:04:80:9a:54:51:1e:54:29:
                    a3:8a:16:a2:25:af:cb:9c:57:ee:5f:79:13:2c:9e:
                    a3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:79:73:84:3B:01:77:BD:D3:2E:F7:88:D1:6B:D2:39:74:86:0A:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2491a458-1d1d-343b-930b-79069cb99b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:71:7f:e4:a5:71:2e:58:c7:1c:56:65:a9:a0:15:dc:61:
         ee:8a:d0:2e:cb:4b:4f:8d:35:48:b1:92:03:79:ed:ec:35:60:
         93:2f:cf:cf:59:60:46:87:fd:5c:0c:02:45:da:cc:d0:b2:a5:
         9d:99:39:1a:dc:88:c6:d2:08:e2:d2:95:50:13:31:06:fc:70:
         bb:87:51:aa:ce:8f:6a:f0:77:9b:5e:a6:92:28:e1:3a:8d:dc:
         9a:b1:7c:b4:3e:79:a6:9f:9f:f6:b4:f4:69:8e:8f:93:f6:50:
         af:b7:d9:a9:f1:5d:86:a1:78:c4:33:94:22:06:9d:cc:06:9a:
         cc:e2:cd:76:c8:53:bc:5e:26:2a:3f:e8:87:87:77:f6:9b:9a:
         58:ad:4c:54:dd:b8:59:8f:67:fe:c2:50:50:b5:f4:dc:98:63:
         a5:a0:92:7e:41:e0:f4:10:cc:37:b4:bc:5a:be:43:28:c2:25:
         28:7b:a3:15:cc:d7:ad:4c:eb:43:17:a6:d2:27:35:46:bf:37:
         ef:2e:1b:e6:b2:ab:63:0f:96:ab:78:bb:3e:5a:fb:c5:49:69:
         52:97:33:b6:91:0f:80:41:6d:7a:1e:0e:bf:ea:68:7a:c3:16:
         27:91:21:37:fa:b7:ca:4a:03:41:5c:74:a2:a3:40:fe:97:31:
         79:70:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----