Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/733275ac-405a-35ba-b564-642077acf2fc.roa
File:                     733275ac-405a-35ba-b564-642077acf2fc.roa (raw, json)
Hash identifier:          vTafLY7O/3njKM/RirWuOzThaA3D1AuGvIvaGj6521A=
Subject key identifier:   C7:35:7B:8B:9E:93:C4:F4:C7:82:45:97:82:1A:73:41:C6:5A:2B:D8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7C38679C3BFD78B0D689400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/733275ac-405a-35ba-b564-642077acf2fc.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.133.80.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c3:86:79:c3:bf:d7:8b:0d:68:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=eb215194-bcd2-4b8f-b1bb-708c8a1e41c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:51:09:a0:09:d6:dd:a7:0e:89:f0:61:f2:fe:
                    f7:fb:8b:d4:99:69:0d:50:dd:7d:be:bb:fb:27:6c:
                    66:83:9d:64:63:98:2c:48:35:3a:32:71:63:a1:ce:
                    9e:d6:6c:13:15:14:7a:e0:5b:e1:a0:80:76:e2:dc:
                    39:eb:e2:51:28:81:76:05:69:b0:62:59:45:fa:af:
                    ff:ef:52:74:ec:ee:84:e4:0e:2c:0e:85:8e:4e:ba:
                    9d:25:15:a9:b5:5d:89:c3:5c:5d:c1:5b:58:e5:e7:
                    19:6d:49:99:b7:ff:41:cd:1a:60:ae:01:6b:6a:15:
                    c4:f8:56:60:c4:0b:45:4d:d9:32:60:42:22:ca:25:
                    c7:4b:f0:58:50:68:c1:f0:04:02:30:86:fb:51:8c:
                    b1:80:73:ed:88:da:72:b2:71:00:2d:c5:42:30:d3:
                    5c:c0:cf:ce:ef:79:09:23:ed:e6:8b:73:c0:47:47:
                    2a:35:f0:5d:3e:44:07:8e:67:6f:68:b0:bb:46:8f:
                    49:76:24:14:59:a8:e1:b4:90:ce:37:d7:e6:ab:ae:
                    23:ae:fc:3c:79:5c:44:aa:47:6d:bf:58:c7:55:50:
                    e9:0c:40:7c:1d:e3:9e:bf:3d:f1:d2:38:79:57:a0:
                    30:3d:0c:4c:cb:6f:9f:99:2f:bf:b0:c8:ab:7a:18:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:35:7B:8B:9E:93:C4:F4:C7:82:45:97:82:1A:73:41:C6:5A:2B:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/733275ac-405a-35ba-b564-642077acf2fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.133.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e4:4a:18:2e:a8:c8:78:7b:44:3c:77:c2:f1:df:6b:0a:da:
         04:04:a4:a4:dc:6c:6e:26:6e:48:b1:d2:2d:b6:0b:5e:15:8a:
         b5:4c:39:7f:7c:bb:12:04:83:09:6b:9e:d1:db:0f:ba:78:9c:
         2b:65:0c:51:a7:79:f2:d6:e6:d2:3b:65:94:49:b3:4d:12:ae:
         4c:e5:ac:8e:df:af:2c:81:74:81:05:3c:c4:21:c6:a4:1a:ec:
         e5:28:5d:d4:59:18:eb:b6:c8:60:e9:92:a5:e5:a9:40:0b:a8:
         a5:ab:b3:f0:25:fd:f5:fe:ec:32:fe:3d:65:82:42:05:90:28:
         b1:65:e5:37:8c:97:7f:63:3e:22:d7:68:27:9d:0d:24:01:17:
         41:38:fc:f6:43:77:be:85:02:82:49:f0:38:89:f7:5b:03:04:
         b5:db:af:ef:95:1c:86:4e:86:9e:ff:20:3c:b3:99:a6:06:e5:
         62:e8:47:c5:fb:33:6d:ba:d9:13:eb:48:02:10:83:6c:f3:6d:
         b7:8c:36:c2:4d:00:f3:77:c3:01:e2:85:07:29:64:92:e7:2b:
         c1:39:7d:27:1e:4d:12:94:a3:2e:23:30:33:21:46:0a:0c:51:
         14:c2:5b:64:fa:8a:b5:37:46:fb:7a:55:5b:85:e2:30:38:19:
         3d:ff:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----