Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fd2efe0-f189-38d7-810f-a0c06c282c9f.roa
File:                     9fd2efe0-f189-38d7-810f-a0c06c282c9f.roa (raw, json)
Hash identifier:          W5IdaH9E3u9penUD5Jie8RXw25QNXNsPa0RbcZMUeJo=
Subject key identifier:   0E:77:87:C6:8F:2B:B5:BF:9F:BE:34:ED:74:DF:F9:4A:EB:5C:BE:28
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A5329D25BB7D72A6CAA080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fd2efe0-f189-38d7-810f-a0c06c282c9f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.121.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a5:32:9d:25:bb:7d:72:a6:ca:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=86f9b959-6a14-4a4c-a644-08b5ed23650a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:4a:98:fd:12:2d:93:7d:e3:c8:31:41:70:
                    6d:ad:7c:31:ee:68:fa:81:f2:28:97:7f:00:04:9f:
                    ce:b2:86:17:32:2c:a1:f5:f6:09:3f:9f:22:fc:e9:
                    06:d3:d9:f1:38:76:4e:7d:b7:bc:4d:01:97:a9:e5:
                    bc:aa:c6:e6:0a:d7:48:20:6b:55:b9:4d:0a:57:85:
                    73:cc:99:0e:86:5d:81:b3:b9:97:be:ff:83:54:87:
                    d0:22:50:1d:4a:61:58:36:c1:54:44:27:2c:0f:b7:
                    b7:3c:1d:16:20:2d:60:20:1e:9b:e9:f7:09:d9:5b:
                    0b:42:73:25:eb:61:2b:08:49:d6:eb:1b:03:ea:5c:
                    99:2a:5c:c4:72:3c:d3:35:d1:69:57:60:f1:5f:25:
                    1b:6a:97:ec:7d:4b:5c:3f:f0:03:4a:8e:fe:8a:27:
                    1d:a9:c6:64:9b:78:e3:cf:09:3a:2e:87:c5:79:c8:
                    99:22:2c:d2:7c:d3:d8:67:10:29:9f:3d:97:ef:dd:
                    92:98:66:6c:ae:a0:9c:31:33:e6:22:f5:03:e8:df:
                    2c:c3:f2:4c:38:3d:12:aa:fe:f6:19:6c:56:50:f8:
                    66:39:06:ae:36:b4:c8:00:7c:8a:6a:7d:54:ac:31:
                    8b:bd:34:d1:60:08:d2:7b:49:3a:fc:cc:5f:5b:3e:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:77:87:C6:8F:2B:B5:BF:9F:BE:34:ED:74:DF:F9:4A:EB:5C:BE:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9fd2efe0-f189-38d7-810f-a0c06c282c9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.121.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:71:eb:2b:e1:be:13:74:90:7a:2c:7d:1b:b2:2e:23:30:f2:
         d3:ff:52:eb:51:5f:cf:7c:c1:7f:72:ed:54:17:9e:69:e1:2c:
         07:f1:f4:eb:51:77:05:0e:c6:4e:89:f8:90:d1:c0:e6:e5:e8:
         16:2a:55:a9:26:21:1a:5d:89:93:9b:e2:51:d9:21:b8:29:7b:
         17:c1:9b:c8:b6:c9:d3:bc:21:71:31:41:ad:f1:b4:51:9f:80:
         b1:86:7d:62:0f:55:56:6b:30:33:41:f8:66:b3:b6:a4:c2:44:
         1f:8d:e2:c3:24:be:5e:cb:37:d4:53:85:6c:31:f6:d7:04:de:
         23:f0:bc:9c:2c:a3:12:31:95:4b:aa:ce:a1:80:65:ab:73:3f:
         fa:22:d9:9f:4a:4a:3d:d4:d6:d6:66:c5:65:0e:a0:f9:36:2c:
         08:91:1d:cc:07:26:4e:04:68:40:82:6c:6e:32:34:e0:5f:bf:
         8a:ab:cd:3a:5e:4f:5c:94:da:a4:25:6a:e0:56:e6:d0:69:70:
         f8:5a:84:ca:cc:50:c9:45:ca:29:0d:51:5c:21:e4:45:86:fc:
         f0:51:e7:d1:72:30:7c:d3:75:7d:da:2e:5a:67:d5:aa:05:c3:
         dc:8a:20:49:ae:90:2c:c7:63:98:a7:2e:bd:56:b7:aa:22:39:
         df:1b:7c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----