Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7918fb1-0f7e-32f2-9130-3c6d5a0da033.roa
File:                     f7918fb1-0f7e-32f2-9130-3c6d5a0da033.roa (raw, json)
Hash identifier:          fVoBRxxNUZFOBFL0HzEbSv/Ax6KGLrUNGp1KN4EURtA=
Subject key identifier:   93:99:DA:85:87:86:35:4E:67:86:1D:A2:8B:53:70:23:86:4F:1B:A0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7A29CEC2158FB0E1F6DE600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7918fb1-0f7e-32f2-9130-3c6d5a0da033.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        23.251.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a2:9c:ec:21:58:fb:0e:1f:6d:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=749608f8-4a34-4a41-9ec5-a9c172977bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:98:bd:52:e0:36:84:8b:67:a9:ab:3c:55:8a:
                    46:f3:8d:5f:bf:63:7e:43:b9:a0:34:ad:ea:a6:8c:
                    f4:56:95:ed:06:07:24:2f:8a:fc:bc:c5:4b:03:e5:
                    b9:3a:16:ab:bd:1b:17:f1:f1:56:3b:64:c9:b5:d6:
                    d4:29:30:15:91:68:8d:b2:a3:84:bd:94:34:8e:e2:
                    dc:c3:4c:ab:fe:49:b4:b8:37:63:78:92:63:f2:6d:
                    76:40:f3:45:ef:ff:72:39:09:62:6e:a7:90:0a:d8:
                    e4:29:f4:34:6f:c2:4e:51:7c:d0:65:32:5b:89:75:
                    0b:2f:53:f6:3d:fd:ea:98:74:02:9b:af:08:33:98:
                    5f:95:d1:ab:62:72:37:79:af:b9:9b:18:73:fa:d2:
                    f3:d8:6d:f2:0b:4b:34:02:d3:77:36:17:80:73:dc:
                    46:46:db:59:6e:1f:9e:5f:dc:f9:80:7b:f7:0a:47:
                    ae:6b:c4:3b:37:84:79:ff:51:df:b1:0e:c0:df:d2:
                    31:8a:ad:87:d2:00:cc:30:ed:7c:3a:25:39:2b:e3:
                    17:cc:c8:c0:7a:00:5e:f7:d3:76:69:dd:bb:ca:6b:
                    57:71:b5:d9:ec:03:e6:e4:f3:79:be:0f:70:ad:b7:
                    01:ea:fe:32:a0:07:c4:77:26:59:80:b6:54:38:db:
                    19:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:99:DA:85:87:86:35:4E:67:86:1D:A2:8B:53:70:23:86:4F:1B:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f7918fb1-0f7e-32f2-9130-3c6d5a0da033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b8:50:4c:76:b5:8e:12:5f:c1:e6:b1:36:be:ce:56:c6:ce:
         f5:0a:c8:05:aa:b5:42:39:40:1a:40:1d:43:b0:fa:56:ff:24:
         ed:4c:dc:08:07:bd:7a:36:7e:6c:2a:65:af:fa:ca:50:5f:6f:
         11:05:b6:34:f7:fa:6c:97:a5:7e:06:7e:fb:e2:9b:92:7e:1d:
         c8:0c:c2:c0:47:e3:4f:dc:f3:d3:97:78:c5:7f:b2:da:29:90:
         89:3a:77:fe:ce:7a:fb:76:2d:fd:6a:9e:27:91:48:f1:a4:5d:
         df:68:ba:52:94:82:bf:fd:46:8b:5a:c5:bd:6c:cb:1f:f1:10:
         8e:ce:1d:68:63:86:74:51:e4:51:39:f9:51:62:13:19:60:cb:
         23:45:79:36:4e:a6:a2:66:0c:a3:07:9e:1e:f0:97:f8:8b:60:
         2d:17:43:24:80:83:36:1a:ee:f4:0b:9f:67:ab:02:04:ee:43:
         cb:4e:6c:a8:dd:a7:1f:c2:90:a6:1d:ec:7a:83:b3:a8:d2:c2:
         3f:b2:86:e7:01:b9:b5:2f:c2:ef:d5:63:fc:16:d2:86:54:26:
         29:af:0e:be:f9:da:c7:7a:40:39:ac:21:2f:a7:80:ff:61:78:
         23:08:4e:70:a6:85:bd:19:c7:c8:45:ae:b7:6e:b2:9d:14:48:
         33:04:88:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----