Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ffe5e3c-ce2e-30fc-a925-6c5f195a699d.roa
File:                     0ffe5e3c-ce2e-30fc-a925-6c5f195a699d.roa (raw, json)
Hash identifier:          KfXcyrohLucltQjG3iYrjDpV3rorRbbKoMvKPaO9FfA=
Subject key identifier:   C4:EE:AD:68:2F:0A:AF:E2:9A:56:6D:DA:32:5B:20:5B:52:C7:5D:06
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285839B8D332C90776425CCDFEA200
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ffe5e3c-ce2e-30fc-a925-6c5f195a699d.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.94.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:d3:32:c9:07:76:42:5c:cd:fe:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=997d7731-57dc-4ae5-9be9-e44d2e4f241f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a6:49:d3:ca:ae:41:39:08:74:09:29:34:45:
                    f8:bd:04:10:8b:64:1d:5a:38:ac:e3:3a:5a:17:7e:
                    86:68:0e:8f:c3:62:2b:c5:7c:1d:88:93:7a:da:4b:
                    ef:6f:cb:25:4d:49:d5:6e:81:62:01:c4:5a:07:c4:
                    3f:4a:a5:a2:7d:3a:22:53:76:fd:80:9b:d0:50:6c:
                    39:7a:a2:0d:0a:e7:6b:c6:5c:3e:02:9b:fb:b1:42:
                    c8:2d:68:f4:6d:41:9a:f7:16:f3:85:75:ef:97:a0:
                    e3:ac:76:b7:ab:a7:45:dd:ee:37:4e:43:04:aa:40:
                    a2:fd:01:28:9f:8e:e3:5a:1c:fa:b8:94:5d:f9:fc:
                    52:d6:d7:2b:89:d1:18:07:42:e0:3a:ca:5e:8f:df:
                    ec:2b:2b:f7:68:69:7b:e2:b4:0c:e0:9c:86:d7:92:
                    6e:41:5f:92:61:16:10:6b:83:73:e2:1c:1e:00:d6:
                    e8:c8:18:03:23:9e:1a:c4:c8:b3:f3:c3:69:03:17:
                    7d:95:b9:a7:12:0b:4d:3a:19:24:32:fd:41:7e:d7:
                    a6:2d:73:9e:5a:dd:d7:ad:82:f8:55:e1:d5:3f:62:
                    23:f7:e3:78:b9:a0:0d:cb:e4:84:6b:c0:49:4c:cf:
                    e8:20:eb:9d:f0:aa:43:ce:b2:69:36:c9:54:3c:5d:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EE:AD:68:2F:0A:AF:E2:9A:56:6D:DA:32:5B:20:5B:52:C7:5D:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0ffe5e3c-ce2e-30fc-a925-6c5f195a699d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.94.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0f:f6:e6:eb:40:de:81:7d:26:1d:84:08:0d:22:bb:d4:be:
         b8:3f:93:ec:77:9d:54:25:44:9b:cf:b1:c4:81:3a:8b:d1:4d:
         35:df:d2:74:d5:85:23:59:24:1c:00:c1:03:4b:c3:58:ea:01:
         6d:9c:b8:f8:08:bd:12:7e:f8:c4:c9:08:89:9d:4e:51:02:67:
         fd:23:d2:ac:61:b7:19:74:15:8c:31:8c:17:df:77:6f:95:b2:
         7b:7a:52:59:31:80:e1:a2:1b:3d:0c:b7:42:a3:56:12:a3:7c:
         9b:0f:0b:c6:35:69:d4:75:8a:21:f6:d1:f4:fb:09:de:ab:8f:
         03:e8:d9:73:f3:9a:39:03:55:3a:66:38:52:ba:6a:16:74:b0:
         82:1e:5b:3b:2d:40:68:f9:e8:5a:6b:3a:69:ad:39:93:1e:55:
         74:c9:b8:43:1f:9f:f6:8a:6f:97:96:e1:c1:d6:dd:ac:bd:d6:
         42:fa:88:73:93:99:01:5a:1c:f6:d0:e9:bd:99:ad:89:7f:15:
         fe:cd:15:a1:52:a1:c9:bf:8b:47:be:ea:47:6c:f6:33:04:12:
         d4:81:14:d9:50:86:a4:3e:68:08:64:ed:c3:45:a3:55:f5:2d:
         5e:e6:82:44:1c:27:ab:13:91:3c:02:5b:f1:13:4c:76:8e:87:
         32:29:0d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----