Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f074324-9fb3-3de0-a4d2-7263fe976853.roa
File:                     7f074324-9fb3-3de0-a4d2-7263fe976853.roa (raw, json)
Hash identifier:          pemTc2oXPHeL6gZflAr+IpSZ81T3sxiDe14ZYaYJOvo=
Subject key identifier:   FA:87:D8:DA:B2:47:BB:6E:E9:3F:99:4A:99:AD:A3:DD:BD:D1:43:D3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583B96FEC649EA284C78DEC96980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f074324-9fb3-3de0-a4d2-7263fe976853.roa
Signing time:             Thu 14 Oct 2021 04:00:00 +0000
ROA not before:           Thu 14 Oct 2021 04:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     396982
IP address blocks:        34.166.192.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:96:fe:c6:49:ea:28:4c:78:de:c9:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 14 04:00:00 2021 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=4452810b-ddd3-4aef-8661-b61f7c16d5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:bc:9f:6a:91:b2:fd:3e:bc:84:59:16:1f:
                    37:19:c3:07:7f:3f:5a:d7:6a:ea:74:da:0e:77:1e:
                    c0:62:fd:5b:66:eb:e2:88:f3:d6:37:8f:a3:79:a9:
                    6c:79:fc:cc:e2:60:ea:0d:0e:f0:4b:01:51:ac:da:
                    6e:45:7a:05:35:59:c5:e5:5d:dd:ec:bc:1c:18:0d:
                    f9:e5:a5:7a:dd:ea:f6:06:53:d2:98:89:a6:31:0c:
                    49:4e:1d:80:22:6f:b4:33:8e:82:c0:7d:ac:0d:38:
                    f5:ac:a5:17:0f:7b:84:97:ff:78:b1:c0:2d:02:b3:
                    32:98:fe:80:1e:17:6a:a0:c7:74:ae:e3:18:21:81:
                    61:34:35:90:53:94:33:08:23:4f:be:55:c6:1c:6a:
                    7e:30:bd:cd:a6:b1:f9:85:3c:85:b3:40:42:f2:4d:
                    42:05:f7:37:b6:ed:8b:e6:24:cb:6d:50:76:16:0e:
                    d4:b7:bc:e8:06:08:c3:68:5f:aa:17:6d:cf:7b:28:
                    ee:c7:d1:a4:27:29:5c:55:6d:2f:c0:84:51:e7:67:
                    6a:f2:da:6c:ae:d8:63:02:b0:77:47:88:73:3f:d5:
                    39:a1:70:63:1e:39:ac:a8:c1:c6:76:a5:43:b5:d7:
                    7d:74:7b:23:81:b1:e4:80:e0:4c:95:d2:97:0e:fe:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:87:D8:DA:B2:47:BB:6E:E9:3F:99:4A:99:AD:A3:DD:BD:D1:43:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/7f074324-9fb3-3de0-a4d2-7263fe976853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.166.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:65:f8:17:f1:d3:47:8a:4b:96:0e:68:ac:b9:cc:24:dc:ac:
         d6:c5:bf:ab:d9:49:90:05:20:66:81:0b:db:74:93:18:80:b0:
         4a:a6:29:25:80:7d:07:cf:38:0b:29:c6:42:8f:e8:17:24:3f:
         e4:19:33:29:be:7b:01:82:2a:eb:96:26:3b:16:06:2a:3f:ca:
         80:08:d3:f1:af:6b:6e:bb:13:29:6c:ca:a9:bf:69:1f:d4:1b:
         95:0c:ea:ef:00:a3:eb:c0:a0:12:0d:d9:bd:05:ba:27:02:44:
         5c:0e:6c:d4:67:43:ac:c3:b5:c1:24:0a:e1:67:59:35:81:aa:
         f4:ca:ad:27:80:b4:fc:8d:0d:a0:1d:30:46:15:eb:05:33:9f:
         7f:f2:aa:58:84:e3:f0:f7:af:f2:ef:cb:39:1b:51:cb:65:8e:
         e3:9a:74:86:de:b5:1b:ce:2c:ab:11:3c:26:fe:f7:77:62:b2:
         fc:89:27:32:2f:89:10:06:cb:5c:eb:54:f7:20:79:29:61:89:
         b7:90:29:3c:37:df:2d:60:0a:ee:cd:f8:1a:b2:9d:46:1e:06:
         0c:11:0a:5b:d0:00:35:6d:c7:9f:9d:01:53:89:87:85:cc:c9:
         10:f0:ed:a1:d4:91:12:7b:88:4e:b4:61:fc:bc:7f:d3:22:aa:
         33:7f:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----