Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/43bcfd02-3144-3624-bafc-4b9646c5b621.roa
File:                     43bcfd02-3144-3624-bafc-4b9646c5b621.roa (raw, json)
Hash identifier:          9HqGkDFdM2wUBlgCoZswSob318vvP84srINvaj7T/ck=
Subject key identifier:   58:6E:78:AF:12:4F:69:CC:87:CA:AA:86:EF:BC:32:9D:56:A6:6A:4C
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A1D0D35939CA24A644B900
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/43bcfd02-3144-3624-bafc-4b9646c5b621.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a1:d0:d3:59:39:ca:24:a6:44:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=5118d799-84cc-4d82-a6e5-f2805628c390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:80:b4:1f:89:98:78:9d:60:7f:c2:b7:8b:db:
                    09:60:7a:c8:61:92:00:27:cc:29:14:ae:a5:e0:04:
                    fc:c3:48:92:a7:15:57:8a:a3:48:d9:72:c5:f0:52:
                    a1:1c:f6:5d:60:58:a2:cd:cc:c2:2d:9e:5e:cb:2b:
                    2e:c2:77:19:dc:5b:b9:2a:af:5a:f5:ec:56:b9:3c:
                    4e:e2:8e:87:1a:0b:b4:54:37:88:2f:74:47:93:89:
                    d6:e1:c9:0d:36:8d:28:97:c2:e0:a8:f3:f9:b3:85:
                    7f:83:84:4e:56:7d:b0:d8:f9:2b:22:c6:d6:94:4e:
                    ea:22:9d:7e:e8:13:21:56:c6:54:ac:69:b3:e6:f9:
                    fc:df:ab:d8:af:f7:90:81:f8:35:aa:99:45:e4:42:
                    54:63:ee:f6:09:94:5b:97:39:8d:4c:53:db:2f:cb:
                    8b:7a:4c:46:d9:db:ac:e1:3d:87:38:6d:73:46:02:
                    78:de:d7:50:d1:21:2f:ef:d3:10:6b:52:9f:d9:e2:
                    13:da:02:9b:22:fe:d8:a6:1e:01:2b:ff:52:88:04:
                    5c:5d:bb:d5:29:db:52:72:16:e2:f6:62:24:3c:54:
                    d9:04:c3:76:d5:46:56:1f:ce:81:69:be:2b:1a:34:
                    72:06:a7:89:15:15:d4:55:45:c8:61:fd:d3:05:c5:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6E:78:AF:12:4F:69:CC:87:CA:AA:86:EF:BC:32:9D:56:A6:6A:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/43bcfd02-3144-3624-bafc-4b9646c5b621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fc:14:c8:02:05:73:ee:76:b8:e0:5e:dd:56:5b:88:f1:c0:
         fe:b8:a8:52:1d:56:83:c1:40:e9:9a:6f:a1:be:0c:31:d1:91:
         5b:cc:c1:d6:20:aa:20:6a:a3:fb:56:e5:83:c5:a7:43:f7:91:
         74:2f:77:10:47:89:61:d1:4f:ab:68:04:7a:78:06:db:02:d4:
         10:6b:e4:fe:71:ee:b1:34:9d:a5:46:43:21:05:f8:7b:7d:a3:
         e0:ea:9f:cf:ac:f8:1b:eb:b7:18:9f:96:1b:0f:eb:69:fb:de:
         bd:b6:2c:2f:65:37:5a:58:9b:b5:1f:12:ed:6f:ca:a9:35:5b:
         35:3e:f9:7a:59:e0:09:03:cf:a3:d1:9d:28:0d:31:7e:69:59:
         57:c7:9d:00:a0:af:ed:0b:0e:19:63:25:6b:dd:5e:4e:93:9a:
         72:0f:ec:f9:a0:89:24:fa:43:1a:a6:f4:21:54:7b:3d:20:ac:
         b3:6d:ea:e5:ca:04:8a:05:10:86:89:8c:71:06:5b:b6:d4:c1:
         85:e7:46:55:ce:e6:3a:05:d2:46:48:64:75:bd:26:0b:cb:65:
         14:c9:8b:ab:ac:98:9e:c0:53:59:24:fc:77:5c:c4:fd:91:15:
         5d:c0:12:9a:77:24:47:f6:74:58:31:f5:0d:29:dd:66:3e:92:
         6d:d0:39:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----