Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfd69710-55fb-3dc6-8103-77bbd30fa7d0.roa
File:                     dfd69710-55fb-3dc6-8103-77bbd30fa7d0.roa (raw, json)
Hash identifier:          vrVKf4JdfObratcEuezFDD56sYK9uaLr2voSBX+idtA=
Subject key identifier:   5E:3E:A5:88:45:C5:FF:4A:AF:18:96:7B:DF:83:6A:4B:AA:F1:1A:C8
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7BE99BC9D630291D27A1B14
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfd69710-55fb-3dc6-8103-77bbd30fa7d0.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.216.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:99:bc:9d:63:02:91:d2:7a:1b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=de5b61da-ea3a-4c76-af04-63e58ca80791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8a:3f:3a:6b:7c:4b:a9:d7:91:ed:43:38:08:
                    42:07:b5:66:40:f9:a0:1c:89:9b:9e:88:62:3c:bd:
                    72:9d:6c:69:55:d9:0b:82:e2:27:ec:8e:c4:1b:fc:
                    e5:00:e3:2b:bd:b6:5d:3b:3f:1d:27:9f:df:a3:19:
                    01:fb:a4:65:7a:81:99:cb:92:32:0a:6e:69:2b:2a:
                    7f:81:0e:26:2b:0f:5f:8f:cf:7b:54:e2:7d:91:a8:
                    6a:c0:84:7b:0a:b0:68:0d:ef:bb:34:2a:27:b8:96:
                    3a:52:4d:37:39:78:18:31:89:bc:44:0b:bc:e1:c7:
                    9f:67:69:64:88:aa:5b:4f:90:6a:cd:96:b4:7f:39:
                    29:3e:72:2a:2c:95:7b:19:81:c6:c2:a8:04:40:05:
                    d1:2d:60:88:1c:67:c4:36:88:60:37:72:76:92:a5:
                    61:fc:53:38:b6:47:32:f5:d0:59:57:d3:5d:9e:31:
                    3b:d9:3e:1a:dc:20:9b:dc:d9:ea:c2:db:d9:1c:43:
                    fd:aa:e4:c7:6c:38:ab:cc:c6:26:7f:08:e7:a9:3a:
                    59:57:80:fd:89:79:0b:b1:76:aa:9e:d8:3f:08:b1:
                    89:be:69:33:3f:65:6c:49:06:24:56:cd:06:ab:59:
                    26:8b:6b:1c:9e:0e:6d:c6:6a:f2:83:d7:8a:3d:0e:
                    35:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3E:A5:88:45:C5:FF:4A:AF:18:96:7B:DF:83:6A:4B:AA:F1:1A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfd69710-55fb-3dc6-8103-77bbd30fa7d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:54:bc:92:b2:8a:e5:f6:93:27:31:68:db:cc:18:19:36:a0:
         2c:91:10:9e:18:fe:53:82:19:ee:0a:e0:0a:67:6f:fd:a2:55:
         ce:e8:6a:be:b1:17:9d:be:5a:63:02:8a:da:12:99:8f:a5:fc:
         ae:39:d8:4a:8d:9f:6a:41:50:49:3b:76:2b:b4:2b:0f:8b:fb:
         3f:d3:00:77:61:80:bc:84:3c:f1:7e:ce:2c:83:08:d8:5f:77:
         54:8b:c6:ee:dc:93:9f:01:9c:66:72:45:9b:3e:9b:83:90:00:
         37:84:a3:10:0d:c7:c3:b2:0f:71:5e:e4:c2:da:e5:6d:4c:30:
         ad:c1:06:41:48:91:07:55:bd:a4:63:5a:0f:36:bc:2e:11:2f:
         e2:33:36:89:68:ae:52:42:4a:d5:75:3e:36:45:e6:89:fa:6d:
         ab:35:f9:1e:c4:35:39:cd:c1:ba:be:be:92:4f:dd:bc:31:41:
         28:6e:8c:c0:e5:f4:dd:a6:3d:7c:2c:f8:f4:1b:2e:a9:60:a3:
         09:1d:7b:63:95:f3:41:1a:17:44:b8:ca:e7:41:c9:4a:e3:90:
         66:2d:ea:1c:fe:12:bf:db:48:3a:a9:61:d1:56:7e:01:29:de:
         19:fe:d5:11:9c:d9:28:88:5e:85:31:c6:99:b3:fe:3c:b3:06:
         2a:88:b3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----