Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/107cde95-128c-3d5b-b6ae-1a8f0a191385.roa
File:                     107cde95-128c-3d5b-b6ae-1a8f0a191385.roa (raw, json)
Hash identifier:          P3qQ6jA+gsvMKNZ9L0caA1vs1JMpKmAkRn46RxGj9NE=
Subject key identifier:   CD:EC:74:77:8A:8B:21:09:33:EB:25:30:61:E2:B1:FD:92:62:97:72
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7C011A3B9E7693995428B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/107cde95-128c-3d5b-b6ae-1a8f0a191385.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        104.154.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c0:11:a3:b9:e7:69:39:95:42:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=f2104337-fa25-4e39-b5c0-c32de8a76300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9f:77:1e:87:30:b8:a6:08:65:bb:4e:39:3b:
                    74:28:24:d9:8b:b8:a3:15:f0:0d:5d:79:c7:4f:d8:
                    e7:57:28:84:95:8e:60:b0:32:41:9d:81:80:6a:86:
                    78:ba:02:d3:10:92:8f:0d:0f:14:94:d9:0c:51:48:
                    9a:34:bd:f1:52:f6:31:3d:c9:3e:fb:d7:79:0d:59:
                    40:3e:10:07:83:3e:b1:5f:57:f8:fb:75:56:e6:2a:
                    9a:32:db:7e:c0:6d:89:12:86:ac:e8:3d:eb:81:01:
                    2c:f4:8d:ed:48:af:0a:f1:c9:84:09:cc:e8:b3:a6:
                    10:28:16:ab:47:0d:6c:0b:30:59:32:d5:d8:53:30:
                    f1:e4:8a:a8:19:c7:ce:21:ca:3e:2b:7d:a8:52:92:
                    b1:9e:3c:5f:84:56:57:0e:77:69:87:9c:56:91:e4:
                    a5:8d:10:13:ba:2f:6d:3a:65:70:2b:5f:4a:4d:39:
                    91:f2:47:f5:66:91:35:4c:4c:00:5d:43:87:31:2f:
                    f4:c2:14:c3:a6:67:0b:33:13:47:d8:a1:72:31:e0:
                    34:7a:62:6c:b5:62:f5:d1:8c:92:84:33:6a:9a:e0:
                    f5:04:6b:c9:9c:d8:d5:a1:60:c8:6e:f5:80:89:77:
                    e9:67:62:1f:59:29:49:20:70:ff:f0:4f:23:29:36:
                    7d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EC:74:77:8A:8B:21:09:33:EB:25:30:61:E2:B1:FD:92:62:97:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/107cde95-128c-3d5b-b6ae-1a8f0a191385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0e:30:a6:45:d0:c0:3d:4d:98:09:07:38:f8:53:6e:d0:d3:
         b6:5a:72:1f:8d:b7:53:5d:45:a1:50:bf:6e:48:19:42:1b:1a:
         13:ae:8f:a9:ef:32:ac:2c:de:77:cd:95:5f:1d:7b:8b:77:6d:
         67:9b:0c:c9:37:48:fa:37:b1:33:83:44:9c:11:33:ef:1f:8e:
         37:4c:e6:35:65:e7:d6:7a:9c:dc:51:32:23:3b:79:2c:54:7b:
         62:16:b5:6b:cd:5b:31:d8:ca:a0:c8:b5:6d:b1:14:dd:07:d3:
         74:ac:ce:e7:31:f9:1a:f6:ba:e7:56:24:4a:80:73:0d:4e:4a:
         5a:24:cf:63:b4:10:5b:41:3a:24:fe:1c:fd:0a:a4:ca:08:7f:
         aa:6f:83:89:b1:67:75:b3:01:0d:82:ec:16:5d:bd:1f:63:4b:
         bc:50:10:45:28:07:20:58:33:e8:bb:22:54:d6:51:f7:d0:d6:
         62:65:a1:63:67:89:d4:9f:77:9d:95:96:dc:e4:64:d1:83:19:
         f0:99:0b:fd:2c:d6:16:0c:ee:18:89:06:76:ff:ab:6e:65:33:
         64:d5:54:9d:48:a2:71:e0:38:b4:53:64:48:dd:d1:5e:99:c1:
         e4:6e:48:80:7c:dc:9f:79:43:fa:5c:42:b6:87:69:6b:25:00:
         1c:64:e2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----