Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1209345d-9960-3fb3-a36e-85e0e0038e61.roa
File:                     1209345d-9960-3fb3-a36e-85e0e0038e61.roa (raw, json)
Hash identifier:          bEYZe/ct4HJMe3xshNt7Of1SN5cWioDEc9kz4fBc9g8=
Subject key identifier:   7B:CD:B0:51:A4:64:7D:0D:DF:BB:74:59:50:9D:5F:8A:21:FE:13:2B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A6B159942132C2694FB4C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1209345d-9960-3fb3-a36e-85e0e0038e61.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.77.128.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a6:b1:59:94:21:32:c2:69:4f:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=d1dea89a-1e9e-4d83-b208-8a655f3f296a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f4:39:f9:d3:f1:36:63:54:c8:4e:0b:25:38:
                    41:1b:68:61:33:86:c7:46:30:72:be:90:39:ba:25:
                    1c:0f:0a:50:76:9c:2b:38:9b:50:1b:e9:9e:02:57:
                    58:ff:90:ea:86:e6:81:4b:11:90:c0:d3:cf:c0:f0:
                    be:d0:95:49:1d:08:eb:a7:a1:61:d5:2a:32:9b:76:
                    ac:cb:2f:7b:bc:b6:0b:40:4f:39:80:cb:6e:84:87:
                    26:3e:21:27:2c:41:6b:f9:10:79:8f:84:54:d0:c1:
                    ff:f6:45:b2:72:e7:8c:b4:22:e2:1b:70:4b:61:f7:
                    54:0a:e8:89:ef:a9:f0:02:eb:ef:3e:16:3e:1b:cd:
                    a9:29:fe:a5:50:8b:a1:a1:2a:fb:34:42:4e:6c:1d:
                    ec:71:16:d0:b0:1f:47:9c:7e:9e:a9:8d:fd:0b:17:
                    98:d8:7e:5b:d0:c6:27:30:31:57:f4:d9:6f:db:50:
                    f0:9f:d0:a1:60:2c:9b:bd:c5:33:3b:fc:82:c7:28:
                    09:dd:7e:0d:48:cc:73:e6:9e:3f:b4:f8:3a:94:84:
                    ad:d0:99:c0:6c:db:aa:4f:ee:46:c6:9e:4c:38:3f:
                    77:1d:ba:a5:39:e5:ef:4f:86:d7:f4:80:ee:58:e0:
                    01:bd:fc:5e:35:0e:46:a7:53:db:28:91:4a:29:c2:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CD:B0:51:A4:64:7D:0D:DF:BB:74:59:50:9D:5F:8A:21:FE:13:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1209345d-9960-3fb3-a36e-85e0e0038e61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.77.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:21:cc:4d:f7:be:1d:e6:11:52:ba:fe:80:62:0e:ca:c5:eb:
         f2:18:c3:72:50:9a:1e:fe:15:ab:f7:5b:7d:a3:dc:69:10:b9:
         9a:31:1d:ba:90:dc:3a:d5:9e:06:53:e4:11:6b:81:0d:39:0c:
         31:94:66:c1:b4:50:96:8b:b4:2d:e6:c7:1b:bb:fd:84:7b:30:
         e1:83:ad:8d:6f:da:cf:d8:26:92:35:bf:5e:39:fb:37:6f:5f:
         36:e4:bf:4c:bf:f0:e4:04:5b:62:f6:4f:03:94:fc:da:a7:8b:
         44:88:87:57:d0:a8:1f:c8:f3:9b:58:39:7c:fc:66:9e:c4:68:
         d9:04:62:f4:c4:02:0c:e0:a6:eb:25:50:bb:37:0c:c1:58:99:
         ea:e3:10:69:eb:95:de:ef:73:25:9d:e1:ff:e1:fc:08:05:23:
         56:29:1f:7a:5d:4a:3b:cf:c4:cf:d0:2a:27:ec:7e:6c:16:8e:
         84:8c:a5:cc:78:92:89:e6:47:c5:56:ea:86:c0:c2:15:43:6b:
         e4:aa:3b:9c:59:88:a6:2d:de:50:7c:d7:b8:ac:19:62:9d:4b:
         b3:e9:e0:9e:d8:1f:2d:fd:fb:39:be:9e:0b:6c:53:9a:20:93:
         38:b3:0f:80:47:15:6b:e8:99:c1:36:9d:a9:f9:c4:7f:f8:5e:
         8f:0d:38:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----