Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6e31aa9-8803-324c-a7c7-0e31695d07d0.roa
File:                     b6e31aa9-8803-324c-a7c7-0e31695d07d0.roa (raw, json)
Hash identifier:          IYlMen2aZEplKk69s1caIxA1hyqkavXDUgc6bbAY2fw=
Subject key identifier:   C6:DC:CE:C3:62:79:65:AC:AC:B6:32:4A:61:97:93:B7:A6:63:89:A0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583BB7CF9CD2736DCA83F5929B80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6e31aa9-8803-324c-a7c7-0e31695d07d0.roa
Signing time:             Tue 26 Oct 2021 04:00:00 +0000
ROA not before:           Tue 26 Oct 2021 04:00:00 +0000
ROA not after:            Sun 28 Jan 2024 05:00:00 +0000
asID:                     396982
IP address blocks:        34.159.128.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:b7:cf:9c:d2:73:6d:ca:83:f5:92:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 26 04:00:00 2021 GMT
            Not After : Jan 28 05:00:00 2024 GMT
        Subject: CN=e264ccc8-26cc-41ee-a8ed-c6b28e973aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:72:6e:90:63:e7:09:2c:de:6a:59:bd:36:
                    a4:b0:b3:9f:95:61:b6:14:6a:f2:93:32:61:e4:f1:
                    0e:fe:28:ed:a4:24:4e:f6:51:2b:35:53:b6:8a:ab:
                    07:26:28:9f:4f:ea:76:e3:f2:55:68:53:bb:78:c0:
                    91:cf:98:49:4d:c8:5e:40:14:0e:58:aa:cb:3d:de:
                    94:b0:fb:e8:d7:25:aa:d8:b4:75:a1:c4:41:42:3b:
                    88:de:99:fd:13:09:a8:f4:4d:4c:5b:29:a0:2c:fd:
                    6f:a3:f0:d0:3a:a9:e2:84:ea:e2:3b:b6:db:38:16:
                    8a:a8:37:23:4c:d9:26:64:ec:4f:35:43:fa:ea:1c:
                    bd:0e:e2:5c:5b:4c:f7:aa:7b:15:ae:40:07:d9:72:
                    af:a1:96:ba:7e:16:e8:b7:13:0c:bf:e3:00:d1:32:
                    32:0a:b9:12:d3:6d:a0:2b:8d:95:14:77:45:20:b5:
                    de:50:cc:52:6e:00:eb:14:b7:5c:58:b9:a3:3f:5e:
                    73:c7:90:a0:76:ba:9f:20:60:a5:7f:4e:79:94:96:
                    1e:45:cd:a6:3b:d2:64:b9:52:2e:35:e6:28:5e:47:
                    02:73:a7:f9:a0:3d:89:96:4d:1b:6d:cf:70:80:6b:
                    e0:51:57:01:8c:a8:84:df:72:5c:9a:22:a4:a6:ab:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DC:CE:C3:62:79:65:AC:AC:B6:32:4A:61:97:93:B7:A6:63:89:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b6e31aa9-8803-324c-a7c7-0e31695d07d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.159.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:94:bd:2f:24:ee:26:67:10:97:f5:50:ab:2f:4e:ae:bf:63:
         8d:9d:c4:d5:0f:af:61:79:17:42:99:43:80:ce:05:99:91:21:
         0f:66:50:21:a5:e0:d2:31:6b:37:f8:ca:d5:18:79:2e:4b:6c:
         2b:4c:1d:8a:c7:6d:e6:9f:fe:b3:75:12:ef:3e:bf:6a:c5:57:
         48:e4:c2:a0:80:26:cd:06:42:bb:00:77:aa:41:59:e3:0b:e6:
         ca:aa:0f:f5:c0:33:71:c0:28:39:8e:13:52:25:74:95:dc:3f:
         c7:f1:7b:ca:ed:77:8b:96:d1:a5:30:fa:26:6d:65:f9:49:67:
         57:5b:94:50:cb:df:c8:74:10:06:28:8a:c8:a6:2f:35:7f:e2:
         8a:7a:75:73:eb:6f:ab:2f:d3:3a:cf:d4:18:50:f3:b1:2f:35:
         e5:98:d4:dc:64:0d:71:34:b5:8a:1e:31:a1:34:61:f5:5d:29:
         d5:d9:c3:d2:dd:de:b5:26:41:e0:b3:3e:be:9b:56:b1:af:8a:
         11:01:38:6a:e3:f4:75:0f:08:f3:35:3d:6c:04:b8:a6:fb:57:
         26:9b:93:74:15:88:a1:2c:25:d9:9d:ce:99:41:a3:bf:21:11:
         77:86:22:6c:dc:d7:73:56:9f:07:d3:2a:4f:c7:74:eb:38:ac:
         ae:c9:0d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----