Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b42eec6a-bb81-38cb-9009-d33bc1cd6ae8.roa
File:                     b42eec6a-bb81-38cb-9009-d33bc1cd6ae8.roa (raw, json)
Hash identifier:          DP1l4+CblUqWKhWoWOXcFbNMNe1qKAX5bnRI08yE5HI=
Subject key identifier:   81:0C:3E:E3:17:6E:D2:A7:D5:B6:90:EC:D2:54:20:65:B5:A4:0C:EC
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7B225B5D73CF70D04D28200
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b42eec6a-bb81-38cb-9009-d33bc1cd6ae8.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.121.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b2:25:b5:d7:3c:f7:0d:04:d2:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=447ee21d-8515-4291-bbd2-ee30dfd14eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:66:b4:c2:27:9c:e9:f6:b4:61:13:31:8f:
                    aa:47:70:93:37:bd:91:fa:ec:bb:5f:68:f8:32:28:
                    65:2d:01:ac:da:b4:4e:fd:46:82:8a:3b:60:2a:0f:
                    55:04:66:c3:d3:b5:61:e8:61:e9:8e:ad:f5:e2:0c:
                    c9:f0:78:8b:48:1b:66:5d:ea:85:c7:03:4a:4b:14:
                    f3:fe:08:a9:5e:e0:15:f1:8f:ac:0e:8d:44:34:95:
                    c8:f1:97:9e:d5:a0:8c:e6:95:75:df:5c:48:ee:a4:
                    96:fe:2b:52:b6:7c:fb:29:88:29:a5:58:01:6c:00:
                    38:6f:56:e0:5f:bc:54:8f:e0:67:47:36:d5:1c:f5:
                    e8:a2:f7:07:23:3b:29:fc:67:97:85:be:51:64:d0:
                    5a:65:95:d3:02:3a:4d:e1:d6:54:95:4b:24:08:8c:
                    bb:c8:25:e3:6a:c3:db:9e:7b:a9:ca:dd:3e:d2:c9:
                    9d:fa:38:56:b5:65:b9:fc:5f:df:07:54:ab:07:87:
                    e3:be:08:1f:bc:a6:04:9b:dc:f9:87:9c:ee:ab:8c:
                    f1:2f:ae:76:82:9c:82:89:07:aa:ee:8f:af:63:41:
                    3c:3f:03:f1:7a:a3:81:d0:77:53:ee:bd:66:31:f3:
                    05:db:74:e4:0e:2d:79:cd:4e:37:cb:42:ec:ae:33:
                    c9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0C:3E:E3:17:6E:D2:A7:D5:B6:90:EC:D2:54:20:65:B5:A4:0C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b42eec6a-bb81-38cb-9009-d33bc1cd6ae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:fd:0f:65:0e:2b:93:6b:4f:61:bc:ea:48:7f:78:b9:45:ed:
         07:67:76:a9:96:e9:de:07:6b:0c:94:6d:be:95:84:fc:b5:2a:
         a0:aa:70:57:5b:58:67:d7:bc:f1:b9:4c:b6:5c:8d:b8:d0:03:
         26:ae:99:c9:68:a5:1d:b7:92:dc:1d:97:71:e4:4e:45:bb:32:
         93:69:9b:cb:6d:25:66:a9:d1:2c:98:03:f4:e6:e6:29:8f:68:
         7d:6d:db:a8:df:ec:45:01:0d:c0:63:f3:ba:05:e4:81:7b:83:
         4b:7e:be:25:19:4d:b3:a3:83:68:a2:fd:e6:d4:d6:e1:48:61:
         04:fa:f8:67:cd:40:bf:63:0d:6c:f7:18:35:d5:28:ab:4c:3c:
         25:80:f8:77:c2:21:47:e6:d9:93:36:c0:14:5d:88:29:a9:ff:
         a7:ad:b0:f1:ae:9f:94:df:b7:25:02:e9:89:04:9c:f9:c8:6a:
         0f:3b:7e:3f:c9:17:37:89:ad:97:e0:cb:c9:24:79:b7:3b:27:
         8f:63:8a:f9:fb:59:18:b0:46:e8:e7:f5:89:19:bc:03:2b:da:
         09:da:bc:35:91:2e:54:81:f5:87:26:bb:b9:2a:4c:87:24:2c:
         d7:c7:47:eb:f3:b3:a6:b3:3d:2b:e2:b5:9e:75:7b:59:ae:dc:
         2b:4e:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----