Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/94eae238-b2dc-38fe-baf0-a0b84bb0e811.roa
File:                     94eae238-b2dc-38fe-baf0-a0b84bb0e811.roa (raw, json)
Hash identifier:          wpKx3IGd2S6UsMM+UNVSDREHx4gMd6Txrh+dd26ipcg=
Subject key identifier:   D2:8E:52:1F:42:00:DA:ED:3A:F1:9F:A2:E8:77:77:9B:D3:37:F4:66
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A79661119C824937CC5040
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/94eae238-b2dc-38fe-baf0-a0b84bb0e811.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a7:96:61:11:9c:82:49:37:cc:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=cbb677bc-cd3b-4079-9890-c610784a0b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bc:c4:1a:5e:fb:bb:2e:a7:4c:b0:13:cf:ea:
                    e9:41:26:d0:20:80:64:05:e8:21:18:f7:e7:50:9c:
                    d8:08:85:d0:7b:b2:27:7a:f4:9c:a0:f6:cd:d0:25:
                    ca:9d:c3:15:63:87:9b:f5:e9:19:a8:b3:2b:76:24:
                    1a:c0:3b:df:8b:6d:00:c3:6c:94:40:6d:7e:77:b2:
                    3a:a4:97:fb:f4:94:1e:27:2d:8a:a0:72:98:8d:c1:
                    1e:2f:23:c3:4d:57:b8:66:bc:2c:a4:eb:d3:d6:db:
                    c1:82:cc:49:65:79:15:98:1d:4f:4e:99:ff:75:0c:
                    56:69:a0:ad:3d:60:69:9f:9b:03:97:1f:46:76:9e:
                    89:40:a7:3c:c9:09:1a:c8:a1:2c:51:9b:bb:13:84:
                    63:7e:a7:ad:5d:b1:43:fd:55:5e:8e:3c:1f:bb:cb:
                    cc:5c:6c:cf:ca:6b:b1:db:b4:a7:67:21:31:c0:20:
                    67:89:2f:0d:37:6f:a5:6b:e6:b9:08:27:b5:73:c8:
                    58:39:58:bf:47:b6:18:95:08:84:69:e8:b7:0e:14:
                    4e:04:89:91:5c:f7:5e:55:68:3d:4f:4d:45:5b:07:
                    31:47:d5:ff:00:22:bc:3d:5c:85:54:c2:48:08:5e:
                    b8:2a:d1:c6:c4:24:73:ea:d8:b5:78:f3:4d:1a:b3:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8E:52:1F:42:00:DA:ED:3A:F1:9F:A2:E8:77:77:9B:D3:37:F4:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/94eae238-b2dc-38fe-baf0-a0b84bb0e811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5a:f9:e7:37:44:49:eb:58:30:a8:c0:16:7e:9b:bf:4d:44:
         ce:6a:ca:67:5c:d4:53:7e:24:1c:b9:8e:93:81:45:85:a4:89:
         b3:c0:0b:36:ad:a8:8b:9e:68:dd:52:cb:55:cb:11:32:61:aa:
         5a:58:e9:6c:f2:3c:a5:94:93:62:0b:6b:ad:1e:e8:f5:c0:77:
         bf:68:e1:c1:b9:2f:5a:0f:7a:2d:57:08:5d:50:94:95:c3:d5:
         5c:ee:9f:f4:91:f7:53:47:f2:e6:c2:fb:4a:a7:63:e3:4e:6e:
         5c:7b:c9:ef:c5:b9:9a:43:89:d0:be:0c:94:5b:eb:7e:59:da:
         a6:d5:d9:e3:cd:b2:6a:e3:e7:20:f7:c7:e7:02:1f:29:96:a8:
         9e:57:fd:c3:45:b9:97:82:fc:5b:ca:52:c1:8a:65:2f:1d:02:
         68:30:b7:93:89:32:94:87:08:29:64:c7:dc:84:2d:c7:7e:86:
         b7:f3:14:9b:ab:64:0d:a7:37:12:1c:a1:b4:ad:9f:15:c1:3e:
         50:b7:5c:04:1a:90:15:99:5a:57:41:c1:b5:e3:be:44:82:e3:
         c6:f6:95:64:a4:9c:23:1b:50:97:dc:84:65:29:d5:98:4d:6e:
         01:13:e2:84:3b:a0:da:52:34:f8:90:39:e2:7a:53:e6:63:07:
         95:74:3a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----