Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9737783b-8e11-35e5-b3ab-4a4fec8051da.roa
File:                     9737783b-8e11-35e5-b3ab-4a4fec8051da.roa (raw, json)
Hash identifier:          7kv3lLMvDH8xgqyIfre/uekjs7xsFxjcPb3PYKzWDR4=
Subject key identifier:   97:74:49:18:5D:2E:EF:7D:2D:DD:AF:00:43:F3:AA:E8:4B:65:A5:04
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A0D8DB4C94E855EBD928C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9737783b-8e11-35e5-b3ab-4a4fec8051da.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.79.128.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a0:d8:db:4c:94:e8:55:eb:d9:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=dd56151a-97e6-429e-b568-15ee8883c7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:24:a8:a4:6c:d1:af:c5:ef:8e:6f:d1:9f:
                    9d:d2:cd:f4:a2:ba:77:93:1e:de:c7:13:db:d9:f4:
                    12:0e:15:aa:d6:53:6b:95:56:12:21:7f:53:11:30:
                    d2:d3:a6:19:01:13:43:d3:41:93:81:bd:ae:da:b5:
                    98:c1:46:48:aa:5e:d0:8a:42:03:4f:4b:f0:80:cd:
                    ab:9e:64:bb:b6:01:10:8e:17:2d:51:69:d4:1c:56:
                    cb:8e:c7:31:8d:75:c4:3e:79:82:7e:b0:13:13:9b:
                    20:79:69:8e:7a:29:06:2f:ca:47:98:75:c8:c9:8b:
                    ef:4c:57:4b:9a:01:4c:86:95:f4:cf:93:36:39:d7:
                    76:96:95:4e:fd:b7:de:9f:72:67:e1:48:6e:f1:35:
                    a3:ad:69:4a:47:e5:70:19:22:9e:7f:ee:43:fa:b6:
                    35:cd:d0:42:e0:af:8d:a6:36:13:d2:53:58:93:cc:
                    d8:0d:db:d6:bf:01:20:3e:a5:46:5c:76:f4:f6:49:
                    b8:b6:7a:e6:e5:23:f6:1d:1a:85:f1:97:3d:e7:bf:
                    c8:7b:e0:ea:11:b8:51:b5:42:e1:94:e5:b6:77:a0:
                    95:d3:d5:81:9c:ad:a3:d2:81:e4:86:31:d8:79:a5:
                    47:4d:22:c9:60:98:c3:d0:ac:36:a7:da:46:63:a5:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:74:49:18:5D:2E:EF:7D:2D:DD:AF:00:43:F3:AA:E8:4B:65:A5:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9737783b-8e11-35e5-b3ab-4a4fec8051da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.79.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:6c:df:64:ce:52:60:b4:18:82:79:b4:4a:02:39:bd:7e:
         f9:ae:bc:40:a8:22:99:77:43:44:12:ed:df:83:21:64:31:60:
         74:43:85:82:ef:68:0e:05:ad:72:74:fa:e4:12:6b:ba:85:ef:
         df:3e:3c:e8:ca:1a:8c:df:97:1a:18:bf:56:41:b9:0d:d8:3b:
         69:a2:41:2a:ba:7f:50:20:d3:89:db:fb:94:0f:86:1f:33:1c:
         63:a3:93:84:7a:c1:59:57:89:dd:68:83:55:16:08:17:d9:f9:
         3f:74:62:0f:f2:2f:9b:66:ad:46:27:4f:66:50:f8:a5:19:eb:
         c7:25:ca:ff:32:31:35:b2:0d:22:d9:8c:90:20:6a:e9:55:88:
         f9:d2:71:5a:e3:bd:bb:c3:55:11:4b:c0:05:bb:87:ef:63:d7:
         ee:69:bf:81:8c:79:c8:ee:a5:ab:9d:84:a0:81:d8:06:42:27:
         48:aa:e3:a2:e7:bd:61:b3:fe:eb:09:f9:a0:03:24:d7:ca:6f:
         80:e6:24:b2:85:4c:ef:8e:f7:db:f0:da:9d:a0:5d:6b:9c:bc:
         7b:f2:51:bd:b2:4b:17:36:03:16:d4:3d:cc:61:4a:e2:82:e6:
         8e:92:d2:09:63:d5:47:8c:1c:06:5e:9b:be:cc:a2:01:34:1d:
         58:5b:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----