Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2afc9fc1-41b9-3622-bea9-3a4e5997e5f1.roa
File:                     2afc9fc1-41b9-3622-bea9-3a4e5997e5f1.roa (raw, json)
Hash identifier:          fhEZ5jSfJpvmnAOxIBf3M7azhwjCLcfWoXKozogWhF4=
Subject key identifier:   4C:D2:C2:D8:37:A7:89:68:37:01:5C:59:A9:A6:2C:9B:E9:DC:0B:F8
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7C2ED1DAF6FF9F9DE499580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2afc9fc1-41b9-3622-bea9-3a4e5997e5f1.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c2:ed:1d:af:6f:f9:f9:de:49:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=b6653be5-00b2-4a62-8257-4bb68bd7c2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:51:4b:37:0d:08:15:57:33:9e:44:f4:1c:
                    cb:69:c1:57:5c:52:18:d2:b5:78:db:1f:ab:fe:06:
                    ab:af:33:86:9f:51:5b:2b:fc:68:fd:cc:8a:3f:ee:
                    4c:ef:c6:8f:46:d4:fb:2a:aa:59:d2:31:8c:c3:9e:
                    a4:36:a7:55:c1:10:d5:74:59:50:bc:79:f5:98:65:
                    1b:5a:3f:9b:f7:70:bd:8a:75:fe:bb:1e:d7:b7:35:
                    4d:d4:7b:32:cd:e4:5b:ae:13:cd:8a:11:54:03:dc:
                    de:7d:bd:4f:8f:ff:d9:8c:4f:89:3e:5e:b2:86:07:
                    d4:9c:4d:da:09:fb:a6:0f:5c:77:68:12:61:8a:6d:
                    08:04:32:88:0f:59:8e:2f:e5:cd:6f:f0:20:69:91:
                    37:10:fe:2b:2a:d1:0c:2c:a5:07:9e:d5:a8:82:2f:
                    e6:e2:fb:f5:a8:7f:7e:55:24:07:0f:b7:08:43:17:
                    17:ed:79:e8:0e:c3:f1:a7:83:17:a5:a5:f9:cb:5c:
                    57:44:f6:ef:ed:80:b6:2d:d0:82:52:1e:bf:3a:c3:
                    ed:71:e3:eb:81:af:d3:de:0c:73:50:90:e5:3b:13:
                    3a:72:47:a1:52:b8:fa:47:7b:ec:1e:27:72:0c:97:
                    75:e2:e6:f5:19:b5:cb:5b:3d:fc:2b:a3:6f:d3:44:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D2:C2:D8:37:A7:89:68:37:01:5C:59:A9:A6:2C:9B:E9:DC:0B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2afc9fc1-41b9-3622-bea9-3a4e5997e5f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:02:ad:93:53:69:06:f5:87:d1:04:45:af:c7:ee:e7:d0:af:
         08:45:28:98:ca:9e:f2:97:ff:3d:dd:9d:7e:23:53:0f:52:7a:
         1b:d9:2f:73:27:f2:a4:01:7c:6c:68:65:66:be:88:49:38:5c:
         50:e2:9a:d8:52:73:12:35:12:37:22:79:95:69:90:54:21:c5:
         f5:e5:f3:03:1a:fc:d6:ce:b2:5b:eb:bb:9e:eb:50:37:5d:8c:
         a4:a3:68:1c:18:9a:46:44:12:04:74:86:76:17:41:df:53:f7:
         c8:63:ef:af:cf:66:71:d4:4d:dc:f8:8c:2c:71:80:26:b2:dc:
         fe:66:75:87:b3:ab:d3:a6:b0:47:53:44:11:04:28:5f:34:63:
         14:25:e8:db:5d:c1:8b:c1:8e:da:0d:5c:41:5a:c7:cd:72:6a:
         b6:6d:b4:69:d9:b0:1a:0b:a9:cd:dc:fd:6b:49:e7:6d:44:a5:
         7d:3f:d7:d9:38:aa:e1:05:3b:29:05:d6:ef:37:ff:e0:c7:c4:
         fe:89:84:97:d6:7b:64:f7:e1:19:2a:85:e4:01:49:ef:66:03:
         70:63:7d:c0:97:de:cf:96:7e:5a:01:ae:43:5d:ba:1c:75:82:
         39:01:7e:8b:8a:70:ff:89:6a:87:a5:03:44:96:4e:fe:82:83:
         ef:c5:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----