Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6ac7e0f-21c4-3bdd-9e6c-f05060d72c0b.roa
File:                     f6ac7e0f-21c4-3bdd-9e6c-f05060d72c0b.roa (raw, json)
Hash identifier:          q86qPziyyhAgcFCxnmi3HUqTOc4NT0o7j6/37JMLals=
Subject key identifier:   90:35:82:67:C2:42:30:0B:7C:29:9A:A4:F6:B7:14:BB:46:50:E0:75
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A933531E882537F1AE9BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6ac7e0f-21c4-3bdd-9e6c-f05060d72c0b.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.139.16.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a9:33:53:1e:88:25:37:f1:ae:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=76c4387a-6e4b-46a7-9b42-40824e962e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:d3:74:60:46:77:09:55:71:72:0e:e7:da:
                    99:73:37:ef:5d:92:33:e7:25:6a:a4:57:16:c3:01:
                    2c:ca:ed:70:a0:ee:98:20:7a:cc:f2:6b:d6:b7:43:
                    fa:b7:e2:4b:20:94:0e:30:2b:b1:61:13:49:fd:13:
                    22:61:61:81:32:22:50:bc:8f:83:b5:5e:66:8a:42:
                    0e:85:e7:fb:1a:7a:29:ca:e0:c4:a1:73:e9:26:cc:
                    fb:d5:a0:d6:7d:25:39:b5:71:c3:18:ea:f3:3b:ac:
                    75:e6:d1:26:87:75:8e:59:81:09:9a:24:48:04:5f:
                    69:81:47:66:17:7e:cd:19:62:02:3c:f3:3b:06:19:
                    ab:3e:19:97:1e:85:f2:a9:e6:bb:7d:54:13:cc:47:
                    40:de:84:a2:23:1b:8f:f4:9e:aa:ad:61:e6:ed:a6:
                    de:5b:42:6d:43:b5:61:b5:ad:e8:29:3b:2f:b2:b8:
                    02:f5:af:90:3b:fb:c1:85:6c:37:b8:a2:c4:c6:38:
                    11:7c:e8:1e:fe:5b:3e:9e:3d:16:d0:3c:ca:be:e7:
                    81:c0:c1:2c:ff:df:c3:6a:1b:5d:8f:be:df:f3:cd:
                    ec:b2:8c:86:9e:92:3e:f2:61:81:ea:c8:b3:99:b0:
                    2b:d3:80:83:96:9f:b3:4c:54:dd:89:32:a6:95:39:
                    b3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:35:82:67:C2:42:30:0B:7C:29:9A:A4:F6:B7:14:BB:46:50:E0:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f6ac7e0f-21c4-3bdd-9e6c-f05060d72c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.139.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:cd:3c:10:22:2b:cf:88:35:cf:a3:63:fa:05:de:0a:8c:12:
         d8:c8:ac:60:c4:88:b7:40:8f:7d:49:cc:48:6f:ee:3e:3c:d6:
         d2:d2:73:6c:de:71:00:bd:f4:35:c0:e9:c1:0d:6f:7d:b6:28:
         1c:fb:06:eb:ca:c2:01:a2:aa:92:5d:5d:d3:31:c7:63:d4:92:
         f4:48:34:17:30:ad:82:c2:1a:22:d8:74:fa:3e:8f:69:98:cd:
         b7:3b:12:db:21:ef:cf:b7:f3:2f:39:f6:d0:a2:e8:47:30:6d:
         1b:a0:c9:5e:9d:7b:e5:8d:d9:29:6b:27:12:e6:e5:ac:53:94:
         40:0f:a8:c4:a0:78:fd:ba:41:1a:2a:11:9b:9b:95:9d:32:07:
         a0:ba:b3:e1:97:9a:0b:0f:b1:40:fe:ec:d2:33:ff:66:7b:9a:
         6e:68:7c:27:07:19:9d:66:20:32:a0:e4:91:c0:be:d4:d9:9e:
         fc:ed:47:72:3c:1f:c6:b6:7c:3e:d8:04:8d:ff:70:1a:86:34:
         b3:ea:d4:4e:55:2c:f3:11:9b:18:78:24:02:e7:46:23:17:00:
         21:4d:f8:8a:87:87:72:ec:9e:4e:2c:f7:f0:52:2e:1f:d3:67:
         36:35:3c:a1:a3:25:7f:42:2d:ea:f8:bd:9f:62:6d:7b:eb:65:
         de:9c:23:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----