Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5cd28c67-e469-347b-83e6-3e162cb159e9.roa
File:                     5cd28c67-e469-347b-83e6-3e162cb159e9.roa (raw, json)
Hash identifier:          YZCkfBfLgKr8odhVMtBFDXalEEJXPKnq8P+lgzng/Pw=
Subject key identifier:   6B:07:D1:D9:06:A2:A0:C0:22:59:56:04:09:A0:65:64:4B:88:B4:84
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7AF00B589B4A3AF776DA350
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5cd28c67-e469-347b-83e6-3e162cb159e9.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:af:00:b5:89:b4:a3:af:77:6d:a3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d3e57780-5fdc-49e4-b91a-5742a1a423f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a6:b8:7f:01:a6:29:5d:27:d8:e3:58:10:a4:
                    60:d1:36:7f:16:df:44:02:ea:4b:56:f5:53:19:f1:
                    d6:a1:8a:44:f5:ec:51:68:69:dd:80:cf:d9:0b:2f:
                    9e:db:12:4c:22:b2:08:34:16:fe:be:91:79:a9:e5:
                    db:65:14:71:5d:56:92:8c:e0:3c:44:eb:76:e2:7f:
                    8a:d5:9e:ac:5a:ac:52:95:47:b1:08:1b:ee:e2:5f:
                    64:74:ca:e7:2a:bb:8f:1f:72:ad:7f:b8:72:27:a0:
                    5c:9e:a9:74:de:72:bf:b4:43:70:38:4f:94:86:85:
                    42:fa:42:fc:9d:bc:c5:51:ff:26:8a:19:b8:17:0e:
                    de:f9:8c:d4:3f:b8:f2:01:3b:54:6e:f7:8e:60:4a:
                    3b:38:f1:b5:34:db:09:f7:d1:f3:53:2c:2c:ac:ef:
                    f3:8f:d1:e4:77:82:ed:2b:7b:3e:72:95:84:83:0c:
                    bf:cd:e3:74:e8:cd:7d:11:eb:58:0f:85:37:c9:d4:
                    34:a4:cc:bc:62:5a:d2:f5:63:e0:13:9f:4e:8f:bd:
                    b5:5f:55:a5:4d:eb:6b:cb:79:6b:22:2a:52:f1:6d:
                    d5:fe:90:bb:3b:5b:7d:1d:a4:39:c3:27:55:61:a2:
                    d8:63:cc:31:c9:c8:86:c1:77:ff:11:bc:eb:b3:51:
                    66:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:07:D1:D9:06:A2:A0:C0:22:59:56:04:09:A0:65:64:4B:88:B4:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5cd28c67-e469-347b-83e6-3e162cb159e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e4:d1:0e:8b:17:e4:73:5f:13:a1:0e:83:e2:a2:af:91:2a:
         c4:cd:2b:76:f8:97:37:17:34:1e:a6:f9:ae:28:ef:93:2d:ff:
         57:f2:c7:73:e8:e5:8c:86:34:8a:1f:8c:45:da:53:77:ce:ea:
         c7:e8:e5:c4:61:18:b7:28:63:fe:6f:ea:56:2d:1d:98:fa:1e:
         c4:bf:23:a4:e5:da:58:db:d4:dd:65:1a:bf:7b:9b:9e:94:f2:
         b1:35:78:bb:ab:06:0d:19:73:aa:db:8f:32:4b:88:f5:e1:c5:
         fd:f7:0d:22:d9:5c:f3:c3:84:3f:43:10:46:8e:43:45:b0:06:
         2b:38:ef:76:80:cb:b3:c3:00:68:b4:e6:bf:e1:2b:2f:27:93:
         1e:70:8b:aa:e9:59:bd:60:cc:ec:a7:ff:31:d6:06:bd:ba:11:
         bf:bc:bc:0f:be:1f:3f:bd:6c:54:76:fc:0e:46:66:f3:22:c8:
         50:a1:80:b1:98:b0:41:cb:cc:30:62:c3:aa:24:d1:08:da:5b:
         44:1e:5f:ee:ec:e1:fd:45:e6:30:a7:68:ca:ea:a1:86:52:1e:
         ac:db:5f:ca:39:9c:6d:33:8a:0c:44:f1:b8:e4:8e:dc:86:71:
         8a:03:d3:f5:f9:1c:ec:cc:18:86:ba:8e:34:f6:18:57:c3:b4:
         4d:96:7e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----