Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05db6cba-4b43-31e8-a3d4-2520d85fcfb2.roa
File:                     05db6cba-4b43-31e8-a3d4-2520d85fcfb2.roa (raw, json)
Hash identifier:          p82kIDlfW36+ckENxboAm7GXN932pZYoQga/P3JIcJo=
Subject key identifier:   15:B4:5F:F6:DC:E4:B2:20:DE:BB:4F:6A:CE:5D:F0:C6:CE:3D:EE:81
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7AB306F0D308294C63DE060
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05db6cba-4b43-31e8-a3d4-2520d85fcfb2.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.93.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ab:30:6f:0d:30:82:94:c6:3d:e0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=21e5114b-b265-420a-910a-f6658b2ca551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:94:31:86:19:e5:62:52:37:3b:c6:1a:9d:
                    4c:9b:31:b5:a0:c2:13:c1:10:76:18:9b:74:05:51:
                    ad:47:15:76:ca:c2:57:71:c7:25:96:02:8d:66:65:
                    1d:6c:d6:08:25:2d:9c:6a:86:c2:7d:8b:6e:37:b0:
                    e5:21:45:77:5b:b1:dc:9c:82:31:10:be:ab:25:79:
                    71:70:e7:7b:ae:f7:03:bf:82:9f:fa:4a:23:3a:9a:
                    60:4c:94:9f:4e:a3:06:68:27:fd:42:7d:8a:6e:68:
                    a8:83:f6:2e:54:b9:0c:fb:0b:c1:12:41:07:39:d0:
                    3d:2d:be:29:dc:2f:8d:b7:de:e4:30:2e:ae:e2:9a:
                    f8:d1:5e:ab:77:85:d4:04:ad:84:7d:ba:ba:4e:b3:
                    4e:b7:27:84:72:47:eb:cf:00:ab:40:6a:19:8f:7c:
                    5b:fe:3b:6c:6b:0a:f6:9b:75:78:21:32:c9:85:22:
                    81:72:4f:24:4c:80:05:94:bb:92:56:5a:29:31:95:
                    df:19:8c:14:82:07:29:6a:fe:a4:c5:1b:57:48:5c:
                    90:1e:7a:71:ed:22:ca:d7:c4:c2:10:6b:fc:f7:72:
                    4c:ea:55:33:09:2e:95:18:30:16:8d:a3:b7:09:90:
                    50:22:5a:e3:19:78:d1:ca:c7:41:78:42:87:16:5a:
                    53:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B4:5F:F6:DC:E4:B2:20:DE:BB:4F:6A:CE:5D:F0:C6:CE:3D:EE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/05db6cba-4b43-31e8-a3d4-2520d85fcfb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.93.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:12:73:53:73:d6:35:a9:ea:70:3c:ad:ea:92:33:39:a2:97:
         d4:b5:f3:3e:0c:fd:3f:19:b8:09:82:64:e5:01:3a:1d:19:ec:
         1d:79:03:3e:47:e4:f3:46:be:8b:38:1e:d4:08:13:eb:9c:6f:
         2c:23:a3:7f:17:03:f6:78:ab:5f:97:69:99:80:c2:1a:34:ab:
         50:15:44:82:94:72:de:7f:ff:57:ac:7e:e2:8c:31:0f:a1:95:
         d0:42:b3:07:b8:17:17:05:48:37:b6:68:fa:ce:1d:95:20:c2:
         1c:49:96:39:f2:79:41:3e:14:65:3f:61:45:ca:c4:f2:39:a4:
         03:e9:08:10:6f:5f:bf:d0:9f:3f:ff:ec:84:87:9f:ef:2e:40:
         b0:31:33:4a:5f:8c:58:50:78:4c:e3:06:25:69:97:f1:95:dc:
         9d:51:c6:e8:39:cb:99:d0:14:c0:75:73:a0:78:41:f7:0e:6d:
         22:13:08:3d:33:32:b0:c7:94:4f:df:dd:e4:0d:58:54:db:8c:
         6c:12:65:bb:08:48:61:51:c5:8d:5d:f9:af:2f:2e:86:ca:be:
         e0:e0:a7:eb:d1:c1:69:27:1e:99:ff:d6:d0:79:2a:b5:9b:6b:
         33:c6:0b:31:82:a7:d8:40:3d:e8:46:4a:2c:f1:b6:54:d5:06:
         72:93:26:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnqzBvDTCClMY94GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MjFlNTExNGItYjI2NS00MjBhLTkxMGEtZjY2NThiMmNhNTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd2UMYYZ5WJSNzvGGp1MmzG1oMITwRB2GJt0
BVGtRxV2ysJXcccllgKNZmUdbNYIJS2caobCfYtuN7DlIUV3W7HcnIIxEL6rJXlx
cOd7rvcDv4Kf+kojOppgTJSfTqMGaCf9Qn2Kbmiog/YuVLkM+wvBEkEHOdA9Lb4p
3C+Nt97kMC6u4pr40V6rd4XUBK2Efbq6TrNOtyeEckfrzwCrQGoZj3xb/jtsawr2
m3V4ITLJhSKBck8kTIAFlLuSVlopMZXfGYwUggcpav6kxRtXSFyQHnpx7SLK18TC
EGv893JM6lUzCS6VGDAWjaO3CZBQIlrjGXjRysdBeEKHFlpTkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBW0X/bc5LIg3rtPas5d8MbOPe6BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDVkYjZjYmEtNGI0My0z
MWU4LWEzZDQtMjUyMGQ4NWZjZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIl0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHASc1Nz1jWp6nA8reqSMzmil9S18z4M/T8ZuAmCZOUBOh0Z7B15Az5H
5PNGvos4HtQIE+ucbywjo38XA/Z4q1+XaZmAwho0q1AVRIKUct5//1esfuKMMQ+h
ldBCswe4FxcFSDe2aPrOHZUgwhxJljnyeUE+FGU/YUXKxPI5pAPpCBBvX7/Qnz//
7ISHn+8uQLAxM0pfjFhQeEzjBiVpl/GV3J1Rxug5y5nQFMB1c6B4QfcObSITCD0z
MrDHlE/f3eQNWFTbjGwSZbsISGFRxY1d+a8vLobKvuDgp+vRwWknHpn/1tB5KrWb
azPGCzGCp9hAPehGSizxtlTVBnKTJhg=
-----END CERTIFICATE-----