Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce3a6e5c-5284-31fc-8d9b-ab77192d3c9a.roa
File:                     ce3a6e5c-5284-31fc-8d9b-ab77192d3c9a.roa (raw, json)
Hash identifier:          kluMxfuVOI06JSKIXiHNmvyH8e4Z5ug4bO5KOdWnlrw=
Subject key identifier:   C6:EB:F3:C4:90:47:7E:4E:3D:32:B4:BB:E7:37:75:45:DF:89:74:8D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A22A2F6F2B0D15503D4D08
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce3a6e5c-5284-31fc-8d9b-ab77192d3c9a.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.189.208.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a2:2a:2f:6f:2b:0d:15:50:3d:4d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=da9367ba-a27e-4900-b9fa-074fddf1b2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6d:a4:62:11:b2:4c:f2:9e:61:48:14:56:09:
                    07:1c:18:b6:6c:98:04:3d:83:5b:47:66:4a:93:06:
                    54:d1:13:04:fa:de:41:71:ea:7a:7b:fc:6b:96:54:
                    78:37:2d:b6:f0:0e:73:74:96:d9:bc:98:e2:6f:0e:
                    f5:f6:04:3c:fe:5e:c4:db:84:a5:7e:27:c4:47:fc:
                    4c:35:b5:5a:11:10:5d:90:92:b8:ef:1c:f5:c3:9a:
                    cd:32:27:85:17:0a:82:f0:44:d1:fb:ad:58:46:d3:
                    8d:d8:43:32:41:12:31:25:20:2d:7a:dc:74:2e:8c:
                    d1:4c:f8:39:69:5a:7c:97:da:50:12:43:6e:03:4b:
                    53:91:8a:0e:77:0f:2e:ed:39:9c:97:fb:c0:3c:e8:
                    8b:e8:c0:dd:4b:57:20:ee:ba:17:95:ad:db:03:2a:
                    d2:d9:a7:57:48:61:52:17:d2:2f:e7:80:ec:3c:0d:
                    11:70:52:5c:d1:bf:21:b7:96:a2:01:a1:af:e9:c1:
                    77:d4:90:32:84:c4:da:67:86:68:72:f3:f3:67:8d:
                    65:b2:2f:91:b4:1e:eb:8b:38:41:4a:b5:b6:1c:ff:
                    21:6b:35:bd:ca:ec:4f:b4:e7:ac:e9:af:20:88:4b:
                    67:6c:13:a0:90:a2:49:26:5b:09:d3:ea:01:a7:56:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EB:F3:C4:90:47:7E:4E:3D:32:B4:BB:E7:37:75:45:DF:89:74:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce3a6e5c-5284-31fc-8d9b-ab77192d3c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.189.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:59:e5:7d:63:d7:7e:5a:8c:86:3d:18:c9:99:da:41:5b:
         86:e5:eb:41:4f:cd:21:be:7c:9b:88:1d:aa:66:1c:d8:74:f3:
         a5:59:45:b4:2c:ac:a3:7e:56:fa:ca:a3:ad:36:91:ba:ef:64:
         a6:90:0a:80:a6:db:fa:3e:65:30:38:40:1b:1e:a2:a6:c1:9d:
         7d:66:f2:62:82:e4:61:36:73:1c:4b:1c:5a:15:1b:b2:b4:13:
         7b:b2:4a:bb:51:09:fc:be:fb:31:5b:22:8d:17:2c:a7:0a:50:
         7d:ac:3d:5e:b0:bc:ec:c3:56:93:97:bc:e3:f3:ea:18:52:82:
         f9:43:9d:08:d7:2f:4c:87:fc:33:ab:b2:e9:59:27:d1:b1:a9:
         99:29:69:fd:ca:de:f5:0c:1c:15:53:81:87:3d:7b:74:bc:f0:
         09:ef:ca:1b:d5:5c:cb:ed:b6:97:78:1e:30:0c:80:33:9e:29:
         c0:fb:45:96:0e:74:6a:3c:15:a5:0a:d0:24:8c:52:7b:2e:4e:
         8e:1c:70:8b:d7:70:0d:3a:bf:79:91:09:5e:eb:25:13:78:76:
         18:ea:fe:30:89:ac:1b:da:cf:08:f6:07:96:16:0c:51:ae:ea:
         5e:a6:af:b2:1b:49:db:dd:d5:29:fd:fb:0c:be:86:1d:9f:c6:
         92:01:99:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----