Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c81ac9c5-792f-3219-be91-7323e02c3876.roa
File:                     c81ac9c5-792f-3219-be91-7323e02c3876.roa (raw, json)
Hash identifier:          xTQzBBTQi5GQIcyM8QmB1efOj3EhKzEYKVdIk6ggNMk=
Subject key identifier:   8E:86:02:39:CB:73:BD:0D:72:0F:8C:F7:4F:19:A4:09:51:FB:26:38
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285839B8DD8CBF38D3670132D25C40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c81ac9c5-792f-3219-be91-7323e02c3876.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.105.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:dd:8c:bf:38:d3:67:01:32:d2:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=4622c2e7-c1ca-4b8d-b3c3-fb46417d8715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:62:f3:47:17:c2:43:92:35:a6:37:22:80:
                    c9:db:66:30:2a:45:5d:56:a5:c2:97:1c:85:e8:ba:
                    d5:da:e5:e4:8a:62:0b:ef:a7:b0:7e:bd:86:ea:22:
                    f9:0f:47:dd:a0:d0:5f:56:4f:03:1a:dd:28:c7:6c:
                    d9:c7:94:19:da:3f:f5:98:84:6d:6f:11:4f:fe:0d:
                    cc:40:60:40:b1:3f:5a:a6:7d:d0:8c:a0:ec:8b:01:
                    79:af:93:fc:8e:c1:50:f8:c5:06:5c:69:83:42:65:
                    89:50:c3:a6:a2:7b:51:bd:1a:e9:be:e1:d7:f8:26:
                    db:38:ac:e1:fb:e9:9a:0a:7c:9d:5e:93:26:cd:28:
                    74:ed:65:f1:ed:ba:23:2c:e8:6e:f5:a1:9c:f2:2d:
                    49:ee:55:16:dc:18:94:9c:8a:62:23:b5:6c:f5:97:
                    b3:a3:9e:4d:3a:6e:c9:23:ec:8c:6e:03:75:e0:b1:
                    38:5e:04:c4:86:c2:c8:e5:38:20:d3:51:65:87:26:
                    2b:3c:7a:58:c0:66:70:e0:70:d1:86:68:6c:6e:68:
                    d0:c3:90:76:06:ca:dc:07:58:6a:4b:48:bc:6b:e3:
                    d4:24:d5:d5:c9:d3:7e:b7:3d:a7:b2:fd:8d:51:93:
                    f7:65:1c:f5:01:33:26:d7:c4:d5:d8:0b:5c:bc:27:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:86:02:39:CB:73:BD:0D:72:0F:8C:F7:4F:19:A4:09:51:FB:26:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c81ac9c5-792f-3219-be91-7323e02c3876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.105.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d1:43:c7:75:65:2b:d6:ce:64:c0:4a:50:81:92:d3:5b:e7:
         72:d0:cb:9f:7c:6c:96:8a:a4:cc:44:e8:75:e6:e4:cd:bd:a7:
         d4:4a:12:d4:66:67:22:f3:32:de:a7:47:c7:36:b5:ab:42:a6:
         f8:71:3f:11:d0:a4:84:9b:7a:2d:59:0a:22:10:25:ed:7a:bd:
         7b:3e:e0:fa:66:3f:39:44:6e:f6:9a:09:8f:a3:70:f1:75:9d:
         b1:06:59:da:61:8e:98:e5:c2:fe:e4:a0:c5:6e:62:48:97:3e:
         ec:82:36:a5:83:c2:46:06:3d:cf:d1:c1:e4:6b:93:53:12:ff:
         a0:4e:ba:1a:54:3b:5a:fd:d5:77:b0:85:7b:d7:fa:60:09:87:
         3c:16:03:f0:93:45:cc:fd:f3:2f:d0:9b:b3:bd:fb:5c:7c:58:
         c2:5f:9c:ee:0b:81:91:fe:22:bb:7a:3b:15:54:74:c1:68:ed:
         c6:64:57:92:5e:a0:a4:2b:2e:67:1c:b1:47:ed:30:19:d3:7d:
         96:b0:23:6e:4b:51:52:0f:2c:f6:73:85:98:44:7f:b5:53:12:
         7a:da:6d:b9:93:ce:c5:b0:16:dc:ab:27:e9:3f:fd:4e:c4:8d:
         8a:f3:08:df:26:ff:d2:63:27:1d:76:ed:b8:42:5e:73:a0:6f:
         68:2c:50:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----