Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23610d0b-a02a-38e3-8f1d-4d4dac84623b.roa
File:                     23610d0b-a02a-38e3-8f1d-4d4dac84623b.roa (raw, json)
Hash identifier:          SmMg1XiX2Ey3oXKDND4hAVojQndIK8AJkTKX8+ZyPGU=
Subject key identifier:   F7:DE:9C:8B:CD:43:12:22:32:B7:7C:AE:61:CC:B1:09:10:C7:BE:3B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7ACBD959AA7EC0257932500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23610d0b-a02a-38e3-8f1d-4d4dac84623b.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.82.48.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ac:bd:95:9a:a7:ec:02:57:93:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=65fe5d41-685c-4ee0-85a2-996925a33c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:8a:33:ba:60:8a:ec:ac:e8:3b:fc:a2:18:
                    f0:d6:1f:f0:64:c0:46:79:ae:f9:cb:5a:b9:7d:9d:
                    66:6b:5a:dc:b9:e7:01:57:5a:de:f4:3c:e2:a2:7a:
                    b0:54:1c:11:fc:03:75:3e:23:86:04:ae:4f:72:bf:
                    28:7b:f0:32:77:1b:8d:cc:c5:ff:f0:c0:4a:72:f6:
                    7e:05:20:c1:6d:1a:8d:85:e7:9c:72:d1:e2:94:c0:
                    eb:0f:f0:50:fa:84:58:1e:f3:4a:5a:70:93:87:85:
                    60:fb:14:9c:dd:e0:61:a1:56:3e:21:50:d5:91:1d:
                    3a:66:fa:f9:fb:95:93:49:ff:57:a2:23:38:e9:28:
                    d8:02:0a:92:2b:3f:b6:82:06:ef:6a:f6:5b:05:56:
                    64:6c:fc:c3:8f:5a:f3:eb:27:ff:23:a1:8d:c0:2c:
                    25:e9:77:90:e8:e9:93:81:8f:e0:20:d9:fd:e2:dc:
                    f6:95:fd:db:60:40:c6:eb:f3:39:3b:fa:04:1e:98:
                    66:5e:ae:21:fc:79:0c:7a:d3:a1:c1:90:62:5e:69:
                    0c:0a:20:7b:b4:bf:07:15:ec:08:11:59:ba:1d:38:
                    d1:0e:29:94:21:73:38:66:78:a9:19:2a:28:d6:a4:
                    dc:0a:5c:6a:ba:d7:7e:08:5d:61:41:34:e9:76:cf:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DE:9C:8B:CD:43:12:22:32:B7:7C:AE:61:CC:B1:09:10:C7:BE:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/23610d0b-a02a-38e3-8f1d-4d4dac84623b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.82.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:3a:24:43:91:47:d4:dd:2a:08:9c:52:ce:72:5e:bc:bf:04:
         04:01:7c:92:dd:75:db:94:01:dd:13:04:b7:1c:e6:67:10:ae:
         4b:f3:2a:f1:1e:75:ab:84:ba:fd:14:11:36:77:55:d7:32:c2:
         b3:52:da:3a:6f:50:e2:55:4b:c3:76:53:a0:d3:ed:97:d2:5d:
         22:79:9d:5c:56:cd:58:98:12:c2:f4:4c:24:2d:9e:d9:f9:46:
         ba:1f:3d:28:97:a6:4f:b3:cb:09:96:21:03:5a:ed:ad:fa:dc:
         00:61:cc:dd:25:bc:ba:53:70:fc:59:1d:15:47:0a:ee:c8:43:
         76:ae:20:87:9c:6d:20:a9:37:2a:a5:f0:f0:79:4a:bf:77:0b:
         e6:78:d3:dd:2b:54:98:ef:82:a0:7b:fc:f9:1d:46:02:32:8c:
         ca:85:81:0f:09:bb:25:40:44:eb:fc:a3:dc:a9:34:3a:0f:c0:
         17:93:85:49:57:a9:8e:c0:89:f6:38:91:3a:df:44:72:a7:24:
         d2:8b:b2:7f:9d:20:87:67:93:58:be:cf:7a:48:95:cf:22:16:
         af:4d:44:52:54:ae:4d:e6:09:86:d6:6b:ea:45:d0:e8:77:be:
         2e:54:e2:e2:34:ce:f0:a0:c1:b5:bf:ff:d0:93:2d:ec:54:92:
         22:a4:f8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----