Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbb0ecec-7492-3e0e-926f-adf5ad348dda.roa
File:                     bbb0ecec-7492-3e0e-926f-adf5ad348dda.roa (raw, json)
Hash identifier:          LF9IpUM9Mg+HfvlTZE4ERvAdctfFZpEafHqorfU0dWk=
Subject key identifier:   73:EC:AB:6E:2A:BD:81:99:FB:75:73:E4:A4:AF:B4:20:F6:1F:15:F8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7B9287AD55A7B080167BFD0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbb0ecec-7492-3e0e-926f-adf5ad348dda.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        23.236.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b9:28:7a:d5:5a:7b:08:01:67:bf:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=1b9dcdd5-7133-47c7-9095-2b07cdb17cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f3:b3:8f:08:12:ad:b7:e9:61:0b:9a:2b:9c:
                    55:4f:98:c3:cc:e2:fa:4d:b2:ee:37:98:b8:b0:c5:
                    58:4e:f0:9f:4c:c8:79:e5:9d:5f:b0:26:1e:c3:8a:
                    db:5a:a8:a2:ec:77:d0:7a:7c:e3:c2:16:74:3f:85:
                    d1:93:b7:c6:18:ef:5e:51:bf:12:b8:30:27:de:07:
                    aa:71:2e:4b:77:66:31:fd:82:98:1f:39:c6:cd:30:
                    9a:6c:ac:d0:90:cf:a5:e2:6d:ce:fb:9e:5d:b3:62:
                    72:99:5d:85:7e:a9:fe:8a:46:d2:5a:18:b7:89:e8:
                    fc:3f:91:8b:28:61:6b:14:8a:38:e3:36:b0:cf:9a:
                    59:20:b5:04:c2:66:ec:68:34:16:2e:99:15:96:cc:
                    55:6b:54:49:18:dc:40:bc:91:be:e4:82:9a:d9:fd:
                    e3:7d:17:ed:5b:19:d6:4a:c1:62:d3:7b:2e:bf:82:
                    78:28:74:92:cf:c1:ab:a5:3a:3d:d2:45:8a:3e:2d:
                    2f:b2:00:4c:d8:10:5e:04:44:1c:0a:f5:45:fc:24:
                    13:0c:27:32:47:0f:87:ef:63:18:cb:d3:1d:36:92:
                    08:8c:6a:01:17:0b:63:10:e9:dc:d0:7d:d3:b6:4c:
                    f3:f4:83:3e:ea:22:9e:c4:af:ae:17:b4:ce:16:40:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EC:AB:6E:2A:BD:81:99:FB:75:73:E4:A4:AF:B4:20:F6:1F:15:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bbb0ecec-7492-3e0e-926f-adf5ad348dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.236.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:55:4d:ac:35:77:73:fa:2d:5b:a4:0c:6e:39:c1:30:43:72:
         1a:4d:e5:40:a7:c4:a9:35:db:0a:4f:ae:ae:90:9c:06:f7:cb:
         e7:f2:01:aa:c5:41:38:02:80:b9:a4:ea:e7:cb:3e:70:8c:7a:
         da:a2:2a:11:c7:3e:30:c1:03:89:15:a7:38:5e:3f:3f:38:f3:
         a5:46:b7:bf:f1:e3:b3:da:6c:20:9e:52:46:6f:33:c6:c1:ff:
         2c:a7:33:77:01:58:c4:77:06:c9:f6:56:db:46:21:6f:61:e8:
         a2:7b:f7:88:5b:b4:4f:ad:b3:5f:df:6b:57:5f:24:0f:2b:81:
         10:d8:ad:2f:90:c7:a2:2e:ec:6f:71:fc:a3:fc:23:1d:fd:f1:
         08:12:31:17:d2:c4:c6:4a:2b:c7:27:4b:2f:92:dd:f0:7c:26:
         01:1b:30:b2:c7:08:48:6b:d1:56:08:1b:ca:1a:ba:4f:dc:be:
         d1:19:4a:3d:8a:67:e1:64:6e:d2:de:ff:fb:41:5f:33:4f:9d:
         00:9a:4a:d2:bd:cf:d9:83:76:2a:9e:3e:84:07:3e:78:b2:aa:
         89:5a:70:fd:22:e6:3f:87:0c:bc:a9:f3:f1:f4:91:d7:fd:09:
         51:85:ad:01:1a:1b:d7:8f:71:fa:55:2f:77:4b:87:29:30:e1:
         21:da:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----