Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e0831b7-7fd5-3e73-89a6-11c85d1df326.roa
File:                     4e0831b7-7fd5-3e73-89a6-11c85d1df326.roa (raw, json)
Hash identifier:          zio84j0z/2HJWgptc85Yhs4Eq7+evqzj/feBRuGjg5k=
Subject key identifier:   44:8A:8F:BE:62:FF:24:CB:28:9A:78:74:6D:A3:9E:7F:4C:12:DB:0B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7AC0ACAEDDC0CE6BD999D00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e0831b7-7fd5-3e73-89a6-11c85d1df326.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.150.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ac:0a:ca:ed:dc:0c:e6:bd:99:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=aef3077a-852f-424e-963a-106e0ec6fc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b4:8e:fb:8d:13:63:98:9e:09:12:d7:1f:5a:
                    35:78:e5:52:83:c8:a7:7e:85:2e:5b:8e:bf:68:42:
                    3b:d1:d5:2c:48:f3:29:80:d0:85:ec:49:26:f2:36:
                    de:14:41:6c:a1:67:40:6c:c2:ae:cf:f5:b1:24:f3:
                    c4:fa:07:9e:76:66:0b:d4:8c:f3:21:3a:70:c6:4c:
                    14:f1:cf:e8:b0:e8:27:aa:9b:ee:22:46:93:3a:79:
                    42:b9:8d:18:20:c7:38:4d:65:7a:42:99:9c:cd:a7:
                    62:46:66:52:d8:6a:2e:6e:ac:bc:c0:09:c6:69:26:
                    25:5c:6f:61:63:d7:14:85:7b:2a:be:4a:c1:09:81:
                    fc:f6:e6:0c:ff:6a:97:91:ec:a6:3d:97:af:21:70:
                    56:8d:dd:1a:59:5c:4c:db:81:8e:e3:b1:18:46:36:
                    0f:5a:e1:69:4a:18:b3:46:4a:68:ce:2e:52:95:d4:
                    98:5e:09:d8:b0:6f:df:21:de:d5:81:05:00:66:cd:
                    42:d5:db:18:db:fd:02:dd:07:22:7a:5e:43:e1:cc:
                    65:39:4d:3a:94:a8:b5:22:0d:45:17:52:95:b3:33:
                    f1:dc:91:1d:6f:44:e7:b5:65:3c:38:25:86:44:98:
                    98:45:39:61:f2:43:bd:f0:8b:90:db:24:96:c0:36:
                    db:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8A:8F:BE:62:FF:24:CB:28:9A:78:74:6D:A3:9E:7F:4C:12:DB:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4e0831b7-7fd5-3e73-89a6-11c85d1df326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.150.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d9:28:9f:3a:cd:c6:5a:83:73:cc:f4:40:37:78:f6:b9:d4:
         a9:07:4d:ad:ef:38:80:fb:3e:da:18:d1:9b:88:bf:86:1a:4e:
         e0:11:fd:b8:d7:9c:89:12:49:2e:48:f9:49:80:91:78:9c:09:
         7a:71:b1:7e:87:6f:1b:b3:9c:3e:4e:36:e1:af:08:d3:ca:1f:
         dc:0e:26:da:94:25:69:52:dd:46:32:bb:d5:01:c7:23:2e:e7:
         3f:48:35:dd:a3:6e:d1:49:9f:45:22:5c:00:82:b0:1b:92:0e:
         de:9e:c2:7f:d9:34:06:21:fa:79:fa:fb:0a:7a:67:09:9d:b3:
         9b:bb:38:17:00:09:80:1e:d0:c5:a1:ae:ff:cb:18:8b:92:f2:
         7a:f1:4b:37:aa:7d:2f:40:d8:1c:e7:b5:5e:34:16:e5:ca:88:
         67:96:28:c4:fc:63:ae:5d:01:e2:92:54:e9:da:60:5f:14:75:
         75:bd:bd:c7:fd:d9:41:5d:25:60:d4:88:05:f8:9e:a5:aa:40:
         c1:ae:55:d2:40:88:c4:9e:00:09:e6:cd:3b:0f:73:32:33:5f:
         96:a7:2b:1e:45:f1:96:47:1e:97:ca:86:06:31:a5:9c:5a:d8:
         21:8e:a6:16:7e:dc:d8:21:84:7d:f4:d9:eb:bd:71:c6:f1:62:
         24:92:77:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----