Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7384d989-330c-387a-9ff3-88076a84be9e.roa
File:                     7384d989-330c-387a-9ff3-88076a84be9e.roa (raw, json)
Hash identifier:          ddGyNJxd8/rIrruUlfZo6iUFg2NKLHKDvmZ688PZxRs=
Subject key identifier:   14:99:18:6D:54:CF:FD:D6:F2:CD:04:5F:26:53:24:44:25:4C:D7:72
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7AD33B8D9AE7BFA2E12B6A0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7384d989-330c-387a-9ff3-88076a84be9e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.105.176.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:ad:33:b8:d9:ae:7b:fa:2e:12:b6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=a4b099ab-8038-4995-b50c-18d25060536a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:77:fa:b3:de:29:ee:27:99:74:38:2e:07:
                    b7:d0:6e:03:80:48:c6:ed:34:05:a9:44:d8:32:e7:
                    61:0c:e7:d3:87:1c:58:73:88:bd:02:60:57:12:6f:
                    c8:ba:69:db:47:09:1c:29:70:dc:50:c0:2a:16:12:
                    2a:9c:9a:76:8e:1f:b9:1f:bc:7a:2b:f1:1a:36:8b:
                    fe:8f:81:3b:21:dd:05:71:5b:47:30:92:4e:ff:f3:
                    fe:75:e7:ff:3f:c2:8c:73:27:29:e1:f7:d2:e0:c7:
                    bd:99:23:4c:48:ed:67:cd:3d:da:1a:d2:bf:3b:06:
                    4a:95:0f:54:b1:d5:9e:60:c0:46:b9:bc:fb:5f:34:
                    95:46:f7:36:58:0b:9f:9b:79:35:39:7c:d8:0d:ce:
                    73:72:ec:22:7c:ae:06:a5:28:e3:41:ab:87:6b:4f:
                    bd:7b:66:11:4b:9e:3f:e3:ba:92:9f:92:fb:c9:77:
                    da:81:f8:b5:a6:28:d4:94:16:49:14:dd:22:9b:b9:
                    78:0f:4d:be:fc:d8:3f:f3:87:c9:c0:83:d6:97:d5:
                    c6:98:40:d8:12:b5:f6:f2:6f:47:b6:04:4a:53:3f:
                    5b:0c:10:58:f7:e5:a4:66:2f:3a:53:85:13:d1:ab:
                    18:74:e0:71:43:82:d9:21:64:32:af:fd:2d:2e:fa:
                    44:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:99:18:6D:54:CF:FD:D6:F2:CD:04:5F:26:53:24:44:25:4C:D7:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7384d989-330c-387a-9ff3-88076a84be9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.105.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:67:59:c3:04:39:d5:92:99:5d:e1:88:86:c4:12:34:94:f7:
         86:63:89:e0:ed:90:05:7f:c0:3b:ce:18:73:85:65:46:5e:f2:
         b5:22:35:20:84:f4:40:8f:b3:f1:a5:c1:a9:ce:89:db:64:f4:
         5d:24:e8:6f:3b:5d:65:54:c7:4c:ea:88:5b:cf:9b:df:c3:75:
         84:bc:c7:33:b2:dc:54:32:eb:37:35:d0:d8:e7:52:9e:86:85:
         bb:ce:65:e1:07:ba:4c:b1:bb:47:c4:86:9c:a9:67:9b:93:9e:
         90:fb:85:7f:9b:41:55:7d:e0:61:c6:1b:f6:df:69:72:b2:cd:
         ed:33:e3:99:05:1f:5f:23:3c:c8:52:02:2a:54:21:6d:86:97:
         dc:6c:5b:00:56:eb:2c:24:46:4e:94:ab:a9:23:5c:88:6f:b2:
         7f:57:cc:9c:a6:32:6d:77:9f:74:d1:f9:fd:81:39:4f:a1:20:
         93:5e:d6:ad:15:39:5c:7a:e4:80:50:fd:20:d0:66:11:a3:b6:
         7a:59:98:46:c8:f2:21:1b:8d:f3:d2:87:c7:28:62:1c:51:21:
         b1:d1:f9:ce:74:8f:89:37:86:69:01:6e:3d:7c:79:d1:c2:1c:
         8e:7e:fd:eb:ff:6c:76:84:33:5d:18:bd:c6:93:86:c7:fb:04:
         54:73:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----