Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/baba6b5d-e94d-3907-8645-d1054a5e0328.roa
File:                     baba6b5d-e94d-3907-8645-d1054a5e0328.roa (raw, json)
Hash identifier:          R/N0UCUD5N1O5tKCue8udjHNvetIlKyd4tk9r3eKrxw=
Subject key identifier:   13:DF:4F:47:2D:FC:48:5B:96:7A:C0:88:DF:22:07:0F:90:D0:BE:DF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285839B8E3E5342B126A2576ED0180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/baba6b5d-e94d-3907-8645-d1054a5e0328.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.195.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:e3:e5:34:2b:12:6a:25:76:ed:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=2cb0b94c-1c65-45f5-8555-eb660139ba46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:0d:d9:17:52:d6:f4:ab:f8:98:2b:ad:22:
                    1c:d1:6c:cc:0d:6d:f3:51:c4:c8:fe:a0:71:5d:09:
                    c2:47:40:85:f9:3a:d7:a0:42:74:8d:66:e5:b0:a1:
                    23:88:da:6c:2a:a5:0b:b7:8f:74:a6:82:30:19:ad:
                    01:e6:7f:63:da:a1:dd:9a:54:2c:93:a4:66:90:53:
                    31:2c:89:e2:7c:ae:9f:c4:03:28:f6:42:6f:f8:67:
                    c9:16:78:41:4f:30:01:be:d3:98:38:11:53:6a:d4:
                    b0:aa:67:dc:12:78:c2:b4:63:80:58:f0:27:40:f9:
                    ac:d5:c3:50:c3:84:95:6f:84:b5:aa:39:fc:5d:03:
                    df:ab:f4:25:da:17:63:14:eb:cd:9a:b6:a8:7e:b2:
                    10:83:db:7d:98:93:f2:f2:c4:97:c3:7f:b5:a4:18:
                    af:8f:3d:85:8a:bc:68:d2:52:76:a6:9e:70:dc:85:
                    df:95:59:00:9c:3f:be:15:ec:11:ba:14:55:a0:0f:
                    9c:8f:32:20:a0:15:e9:9c:bb:b3:37:58:c3:62:69:
                    42:25:84:72:eb:80:98:a7:2f:5f:69:75:e0:fb:01:
                    78:84:b5:53:48:01:9e:a4:f7:1b:fc:7c:37:27:2a:
                    f1:7c:34:7e:a6:38:36:19:94:14:dc:27:40:3a:fc:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DF:4F:47:2D:FC:48:5B:96:7A:C0:88:DF:22:07:0F:90:D0:BE:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/baba6b5d-e94d-3907-8645-d1054a5e0328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.195.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:83:e9:88:ec:68:6f:1c:eb:5a:16:f6:27:d7:f1:cc:1f:43:
         85:55:a8:6a:e1:a7:c6:fb:af:58:df:f8:d7:cd:31:46:79:aa:
         27:7c:35:d8:00:02:72:b5:40:a1:82:8c:0f:38:d9:90:04:a9:
         7e:66:5c:b1:78:d4:63:29:94:b2:18:a5:f1:c9:e8:bf:36:4c:
         e7:51:dd:3a:27:bd:b0:15:32:12:a1:a7:7a:6e:54:ca:26:7c:
         cd:0f:ab:b1:dc:c6:d6:f7:db:c7:ec:e0:51:33:30:b8:da:d4:
         05:e0:57:07:c4:05:dc:c9:85:eb:5d:64:e7:88:24:d5:aa:9c:
         da:34:94:4e:de:4c:0e:e6:92:c2:7d:45:58:e6:45:c8:e3:00:
         20:5c:55:75:e1:2b:a6:44:44:b1:b8:36:ac:0f:1f:07:b5:88:
         09:65:11:e6:d7:dc:55:5e:f9:e7:e9:ab:25:b0:d4:c6:2d:82:
         cc:85:5d:1e:06:60:68:c8:06:27:c8:d7:c2:3e:df:87:8e:00:
         1c:8d:ee:7c:d5:b1:81:a0:97:02:a6:84:e8:0f:ea:57:db:0a:
         44:f5:d1:ae:12:98:65:20:4c:49:39:99:66:7a:4c:70:2c:f8:
         46:1f:9a:94:cd:23:82:6c:6e:0e:c8:81:e0:cb:3f:1b:5d:40:
         02:38:7b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----