Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686741db-7646-3b31-b51a-028ec527fa91.roa
File:                     686741db-7646-3b31-b51a-028ec527fa91.roa (raw, json)
Hash identifier:          89/hQdssD8abf6lo2C0SHMq4AyccUZehQmAaLBt53NE=
Subject key identifier:   A2:5C:22:1B:60:EF:2A:7F:68:39:9E:59:CA:77:8F:AD:53:57:29:E3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7C53342B8B1389E22546C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686741db-7646-3b31-b51a-028ec527fa91.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.132.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c5:33:42:b8:b1:38:9e:22:54:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=9e6122af-e697-4d25-8364-594ca029bd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:60:08:ee:15:66:9a:13:a4:97:ae:82:0b:13:
                    63:b2:e8:69:d8:39:c4:f8:a0:3f:dc:e5:cd:33:62:
                    30:0b:09:6a:e3:2e:92:da:80:ae:53:4c:ea:e8:fe:
                    13:9c:00:94:68:de:c2:8d:47:f7:4b:68:21:9f:85:
                    b1:4c:2b:76:18:0b:94:43:70:a6:88:77:d7:aa:b7:
                    a7:37:f4:d9:36:31:0d:d1:5f:2c:43:25:0b:55:e8:
                    a3:26:c2:14:16:1d:61:f2:fb:31:2e:46:f8:f9:64:
                    0b:6f:be:ce:66:99:7a:dd:bb:fc:e8:d4:f2:d1:e1:
                    6c:45:17:b5:81:10:3f:ca:09:ce:8f:52:b5:07:c0:
                    e2:09:3e:2e:2b:dc:5b:54:e7:4a:c3:f6:33:d3:ab:
                    58:6d:60:ee:f8:2f:f5:a2:da:7b:74:50:28:9a:56:
                    10:61:8b:6a:88:71:88:9c:8e:62:ce:b9:a2:e6:ea:
                    25:2a:ec:85:71:8c:d9:25:33:c2:86:ab:91:f5:c8:
                    61:b6:f2:10:cf:f7:a4:dd:a9:77:05:24:0d:b1:93:
                    bb:84:76:ca:e6:75:8d:5a:72:6d:14:ad:8c:fb:d4:
                    b2:e9:46:be:d9:80:a9:f2:61:cb:ee:9d:8e:fe:65:
                    eb:f7:9c:4c:6e:18:90:83:ca:c6:11:96:3b:aa:60:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5C:22:1B:60:EF:2A:7F:68:39:9E:59:CA:77:8F:AD:53:57:29:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/686741db-7646-3b31-b51a-028ec527fa91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.132.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c8:67:f5:9d:77:96:5f:1d:88:5c:a1:09:88:86:f3:62:59:
         9f:d1:5b:98:fa:b6:80:0b:59:73:a3:7d:3c:e7:e1:ea:2d:49:
         1c:ba:e1:a1:ed:3d:a8:b5:68:19:78:fb:da:7d:29:92:75:b6:
         3f:4e:b6:58:26:3e:c9:c3:46:0f:bf:50:0b:c0:5b:17:c1:07:
         ca:7b:10:9e:ae:dd:fb:2b:03:36:b8:c5:65:22:16:96:1f:bb:
         d7:bc:38:3b:12:8e:dc:7a:ea:f4:ac:43:bb:42:50:e2:1d:75:
         df:7e:3a:2e:80:cf:46:9d:c2:5a:da:42:68:bd:55:fe:51:69:
         80:74:6d:f5:fd:a3:9a:93:c7:55:f3:1b:ff:70:6b:85:0f:13:
         0e:28:43:45:10:2a:58:ca:5e:74:7d:3d:a1:24:77:d3:68:5b:
         af:61:93:2b:7d:9e:10:6f:db:8e:91:47:ef:1b:ae:30:a2:73:
         38:4a:c3:1b:37:ca:28:6b:76:c9:91:b7:b6:69:a2:50:83:e4:
         17:52:18:21:f9:a8:19:0b:c1:cb:d9:01:a9:75:23:52:4f:1b:
         53:04:20:c4:5c:55:84:78:58:f9:86:3b:e0:e9:4e:e6:6c:da:
         57:05:aa:aa:d0:ad:16:f9:48:30:30:99:34:ae:04:e1:58:15:
         cf:83:f5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----