Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4eff89a4-f626-375e-8d47-815276bbe536.roa
File:                     4eff89a4-f626-375e-8d47-815276bbe536.roa (raw, json)
Hash identifier:          Z3ORyiUynXWH2ICGFAJCkSKXUKBdpAfx5pP64cMaLMc=
Subject key identifier:   43:22:AE:1C:5F:D7:B8:09:E6:F8:A8:27:79:84:C4:80:88:D4:96:24
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A8ECD2F57951C8C209EA00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4eff89a4-f626-375e-8d47-815276bbe536.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a8:ec:d2:f5:79:51:c8:c2:09:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=c76070b9-1b2c-40f9-990f-8a87e85d53a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:37:37:82:73:93:bf:23:a2:e3:90:c9:9f:
                    71:a1:d0:b8:d8:14:cb:44:0a:e8:18:5b:18:cc:92:
                    ad:78:87:67:c7:4c:3e:bc:97:7e:f2:2e:bd:45:93:
                    dd:f1:49:a7:26:1e:41:41:4d:9c:34:e6:f1:2e:15:
                    aa:cc:72:8b:05:36:b5:f6:73:70:0c:4b:bc:03:55:
                    7d:96:89:8a:10:f6:98:4a:f4:12:9c:a8:c2:02:9a:
                    04:d7:87:cb:45:46:19:f3:cb:97:8e:b5:14:81:6f:
                    30:d5:9c:b0:fe:1f:85:7f:a1:b5:7d:1d:b6:16:47:
                    de:b7:35:98:bc:2f:23:d2:cd:b5:0a:4f:1f:13:20:
                    89:71:89:56:a7:82:ce:d4:c0:4c:d2:66:dd:4d:6c:
                    f9:fd:6b:82:73:5d:b9:91:1c:69:63:b0:9d:b1:2f:
                    df:db:91:8a:61:ae:8c:cb:d7:ba:52:27:96:fc:13:
                    aa:23:c6:32:b5:ed:94:c4:60:23:a8:14:af:02:02:
                    c5:3c:83:50:9d:e7:29:76:ac:19:b9:97:fd:66:23:
                    2b:38:cb:fc:1b:e0:08:d3:31:fd:7c:8c:ff:de:26:
                    c1:99:02:c5:0c:5f:1a:b0:c1:d0:8a:98:ab:a3:4a:
                    9d:26:0c:36:71:a1:aa:25:3b:da:69:9e:c9:c6:65:
                    58:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:22:AE:1C:5F:D7:B8:09:E6:F8:A8:27:79:84:C4:80:88:D4:96:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4eff89a4-f626-375e-8d47-815276bbe536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:22:ea:04:9c:25:f5:29:6f:48:68:82:39:72:af:6f:46:53:
         06:87:af:6d:7c:4a:d0:04:1a:56:aa:e1:a2:25:2e:73:09:c9:
         ea:8d:51:0d:87:10:8e:99:99:3e:80:62:d4:e7:b2:19:18:1b:
         fb:bd:fe:7a:85:6c:e2:7f:97:75:6d:8e:93:6f:3e:9a:01:14:
         14:3e:81:5d:47:70:85:a8:d4:95:46:57:33:c3:46:c8:c6:81:
         81:91:03:ad:ea:a1:61:18:f8:b3:af:b1:98:f4:04:96:bc:a8:
         64:c2:23:89:08:66:ca:eb:83:12:98:7a:55:ca:ea:df:fd:97:
         63:9a:69:7e:36:70:4e:c3:e0:63:ef:33:dc:3b:67:5a:36:c0:
         2d:b5:bb:66:2f:9a:09:28:b8:61:39:1c:7b:ff:83:e1:4e:a0:
         2a:f3:3c:85:76:45:a4:2c:b9:67:a1:24:51:35:2e:ef:86:e1:
         45:89:38:c0:f7:a0:25:80:af:50:80:bd:3d:26:c1:78:bd:95:
         88:f3:b3:c4:a3:e9:20:22:83:29:4b:f0:82:12:f3:a7:b3:27:
         4f:3f:24:67:15:2a:b5:b9:77:63:66:bd:c5:f4:46:32:43:9b:
         9c:24:2f:70:9e:54:15:53:91:05:e3:a7:52:5b:a7:85:fb:97:
         b9:ef:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----