Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/324c4606-dd3c-3de7-a9f4-b9efd3ff852d.roa
File:                     324c4606-dd3c-3de7-a9f4-b9efd3ff852d.roa (raw, json)
Hash identifier:          WEtL2pC8ZV+w9Xeus4Blk030M1dikSU0tYk7YjNXo4Y=
Subject key identifier:   97:D0:2C:BE:5A:68:BC:60:C4:E8:51:2E:24:F3:6D:66:CB:44:12:08
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285839D785E345E0D3EA1BA9E4E5E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/324c4606-dd3c-3de7-a9f4-b9efd3ff852d.roa
Signing time:             Fri 07 May 2021 04:00:00 +0000
ROA not before:           Fri 07 May 2021 04:00:00 +0000
ROA not after:            Wed 09 Aug 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        2600:1900:4170::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:d7:85:e3:45:e0:d3:ea:1b:a9:e4:e5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  7 04:00:00 2021 GMT
            Not After : Aug  9 04:00:00 2023 GMT
        Subject: CN=3f605135-23b1-419a-b584-a24185ce4aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:f5:81:d5:1b:31:3a:92:36:87:86:aa:8c:
                    c5:c0:84:44:9b:55:09:e9:83:69:82:b4:77:23:90:
                    a8:44:81:8e:de:f1:7c:aa:e3:5c:dd:2b:73:79:97:
                    af:69:86:b0:75:27:f9:a3:ac:a2:50:02:46:cb:dc:
                    17:d2:ae:d7:69:76:1b:10:18:cb:41:48:c9:18:1c:
                    9b:d6:f4:97:62:fc:1a:46:fa:4c:1a:09:7c:e7:a3:
                    9a:93:31:15:48:95:32:18:bf:b6:cf:49:aa:18:d9:
                    f2:0e:cc:48:89:b8:e3:78:66:9e:66:be:12:da:aa:
                    07:37:ab:1c:26:47:d0:a1:83:c4:0a:95:2f:63:12:
                    eb:c9:f9:3a:29:0b:5a:b9:55:0d:8d:17:6f:94:f3:
                    22:bf:6e:95:c3:62:fb:47:84:2a:f7:31:86:fa:2d:
                    bd:2d:0e:c2:3e:05:1c:f9:a2:29:48:d0:c9:67:be:
                    c6:21:3a:32:fd:b9:99:b1:97:68:96:83:7c:c0:93:
                    ee:10:4f:9c:40:ec:4a:ca:59:ff:fd:4e:d1:5e:a8:
                    e7:d4:10:dc:25:37:33:b9:3e:c6:ac:91:78:58:32:
                    de:a4:20:f5:cf:17:ee:48:b0:77:d5:f3:60:bb:3d:
                    9d:e0:5d:81:ce:3a:58:92:ac:bc:22:44:b8:54:ac:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D0:2C:BE:5A:68:BC:60:C4:E8:51:2E:24:F3:6D:66:CB:44:12:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/324c4606-dd3c-3de7-a9f4-b9efd3ff852d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4170::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:62:f4:1b:be:3e:8d:94:90:37:f0:20:cf:cc:73:71:56:b9:
         7c:8f:f5:39:58:b2:9b:f2:8c:83:83:38:64:7f:3e:10:9e:0f:
         61:0d:19:37:57:db:4f:fa:d4:10:0b:41:4b:1e:41:4a:71:9f:
         4c:03:d3:e7:1c:24:07:28:57:ba:51:e0:e7:db:8b:e3:9d:f4:
         5a:8a:bd:7e:89:33:c5:1b:c1:7a:d9:55:c7:e9:16:b6:b4:8f:
         44:ba:fa:ac:32:50:3a:9b:3e:8c:9a:70:e8:38:fb:6c:e5:60:
         e9:e0:a1:a7:3f:69:55:f8:a9:8e:2e:ed:b7:f5:36:ad:99:da:
         ba:28:0b:dd:88:8a:58:9b:9c:33:ea:9e:00:9e:29:59:29:36:
         5b:10:f6:e6:b3:74:0a:b3:b8:12:c2:73:c9:1e:f7:94:50:60:
         e5:6a:4d:9e:12:f6:c9:61:f8:83:51:1e:28:e0:1c:4c:15:fc:
         c9:aa:d3:33:3c:2a:46:83:36:69:9f:b6:ec:b7:05:21:3d:26:
         fb:b2:12:b7:45:cf:e4:34:00:08:ca:66:5a:b4:f9:5d:0e:4c:
         66:a7:04:61:56:8b:86:bc:f3:40:d8:8d:a0:a4:ff:55:71:f1:
         65:1b:08:5c:52:1b:05:6d:08:e9:bf:1d:89:41:69:01:1d:21:
         b0:93:85:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----