Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07879125-74b8-3a42-b7b0-80fdd7b7a73f.roa
File:                     07879125-74b8-3a42-b7b0-80fdd7b7a73f.roa (raw, json)
Hash identifier:          2YXV3tY53M099PGcYJn1rHzLPnkPkQ+26BTxTHqkBd0=
Subject key identifier:   DE:0B:0B:C8:36:EB:11:35:EA:F1:D8:C7:D2:01:69:D5:BF:FE:8D:C2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7AC6842B2CAF4B8A125C300
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07879125-74b8-3a42-b7b0-80fdd7b7a73f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     19527
IP address blocks:        35.208.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ac:68:42:b2:ca:f4:b8:a1:25:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=4a945eeb-4c3b-4ed6-8202-a83fd17fb063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ef:40:d4:e9:0e:df:a3:e9:5a:b0:a5:f6:46:
                    9b:f7:8e:cd:05:e1:be:85:80:cc:65:0a:2f:7a:51:
                    1a:87:73:c2:33:bb:7b:97:28:19:78:50:38:a5:1f:
                    84:dd:45:53:82:30:93:6a:f4:47:d5:c3:ef:7e:f6:
                    a1:65:34:c7:96:c3:1f:53:49:c0:04:47:db:d6:f5:
                    7e:1d:fa:e4:88:7f:60:3a:f4:8e:f3:99:f8:5c:8c:
                    4a:04:68:1e:6e:12:31:4e:be:d9:bc:64:91:f9:c2:
                    28:fa:40:f3:59:18:cd:bf:b2:99:82:dd:e5:19:ca:
                    50:77:c3:b8:f1:97:f4:4e:e0:ff:1a:e7:e7:54:80:
                    e4:36:92:b4:d6:a4:17:16:0a:de:2f:f5:9d:68:4b:
                    c7:cd:0b:09:df:2f:c2:3f:e5:f8:8c:94:30:ab:a3:
                    36:64:d5:ec:68:c7:61:7a:4f:f5:d8:00:0d:91:4f:
                    87:61:ed:69:5d:2d:f7:1e:9f:26:7e:b5:90:ba:f1:
                    d2:ca:a7:56:91:ed:ab:c3:00:f0:4b:15:0c:e9:7e:
                    2a:1c:33:96:38:87:ee:ab:9f:3d:a6:7a:c9:16:c9:
                    a2:93:c5:a8:5d:1f:c8:f5:30:d8:cf:29:f8:1b:5d:
                    c5:3f:12:63:08:03:0a:62:b7:f4:72:fa:b0:3b:ad:
                    8d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0B:0B:C8:36:EB:11:35:EA:F1:D8:C7:D2:01:69:D5:BF:FE:8D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/07879125-74b8-3a42-b7b0-80fdd7b7a73f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.208.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:70:54:a1:bf:77:cb:10:9a:02:48:dc:32:f2:66:f9:18:33:
         98:de:91:c6:a6:75:c5:14:89:1d:75:d3:92:b4:bc:54:74:69:
         95:5a:07:b8:f5:08:a8:e7:87:61:d2:1b:1f:ce:01:de:73:77:
         fc:26:bb:a9:84:b1:21:fb:90:41:7f:ef:d0:62:e2:6f:e0:45:
         2a:88:40:21:e3:d6:c8:d8:7b:4a:f9:83:14:ac:14:3d:6c:aa:
         30:2a:22:8d:30:4f:05:a4:16:db:fa:e6:0f:7e:a4:3d:7f:16:
         dc:a2:c6:f6:49:ef:7c:ac:1b:f9:b1:69:da:cb:2c:32:57:0c:
         fc:4d:91:4f:7c:26:61:8b:56:d5:f6:1d:ce:4f:f6:d1:52:7c:
         f6:46:13:7e:2c:0c:c0:62:25:c8:fe:a2:b7:52:ba:d1:a4:1e:
         c2:74:8a:b7:61:9a:50:91:97:33:98:92:2f:57:8c:9a:38:84:
         de:30:cd:d9:bd:26:54:25:37:4c:39:a4:8c:66:3b:cb:a7:b7:
         35:2d:8d:21:9e:d3:7e:f0:4f:43:14:82:6c:97:08:7a:e5:5b:
         37:63:33:8f:79:14:20:30:c4:dc:19:bd:f9:71:d8:b9:91:e2:
         68:32:1b:6d:93:a7:7f:e0:90:fd:74:af:ef:31:2f:9e:fc:45:
         85:5b:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----