Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fcdd060d-0dbc-3e36-914f-042b7c0bffbf.roa
File:                     fcdd060d-0dbc-3e36-914f-042b7c0bffbf.roa (raw, json)
Hash identifier:          y2QIjYreii9f7fIgq/mtuPPJXKgnAz/szuqAMC93Uhw=
Subject key identifier:   D9:2A:F5:8E:A2:E6:AC:B0:FC:DB:C2:EA:AD:42:00:C4:87:0F:EC:52
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7BF5F738B6F059CB9ED1280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fcdd060d-0dbc-3e36-914f-042b7c0bffbf.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        34.140.128.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bf:5f:73:8b:6f:05:9c:b9:ed:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=60e6aabd-440f-4513-a6ad-67b55ce4e540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:43:d1:42:28:9c:60:95:a9:b8:83:5c:56:
                    d2:a1:b3:fa:3b:3a:69:ad:be:7d:0e:f9:dd:8c:c5:
                    87:88:07:28:4c:74:81:b3:19:e1:a7:99:57:42:e1:
                    8b:ba:a5:91:c4:cd:4c:07:5e:9e:91:05:54:fd:3c:
                    ce:cb:58:e0:bb:af:ae:f9:04:77:16:24:78:3d:d9:
                    bf:9c:89:3a:49:e8:bc:69:09:25:4a:e8:eb:6c:c9:
                    4a:d4:04:62:52:fc:ee:9a:f8:76:68:76:e3:7e:25:
                    fb:8b:39:59:b8:8d:a4:42:33:28:2b:3e:7f:f0:19:
                    9b:59:66:3f:22:9c:96:91:21:27:32:d3:75:dd:39:
                    1c:44:36:cb:04:95:33:ff:94:cb:6a:46:9e:63:a5:
                    51:e6:b5:49:7d:5f:d0:4d:54:41:6a:29:7d:e3:23:
                    69:4d:1c:28:40:9b:e8:50:50:5b:e5:80:b7:27:ad:
                    3b:03:ae:71:18:66:cd:4b:ce:35:21:d2:c0:97:df:
                    9d:bb:3f:9c:b7:34:4a:e3:45:3a:4e:19:44:d2:19:
                    2f:98:13:5c:92:17:85:d0:71:95:76:62:5f:54:29:
                    ab:70:5b:2d:e8:71:59:71:0b:dd:82:02:1f:92:be:
                    19:70:a9:2f:0b:16:35:80:2f:90:1f:ca:e5:b0:56:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2A:F5:8E:A2:E6:AC:B0:FC:DB:C2:EA:AD:42:00:C4:87:0F:EC:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fcdd060d-0dbc-3e36-914f-042b7c0bffbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.140.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a2:35:27:02:56:b3:fd:7c:c1:74:85:8e:4e:06:74:f9:55:
         10:fc:32:2d:77:73:13:3b:ed:77:20:b0:5a:d5:d9:4a:58:d2:
         63:f3:d3:7b:ed:08:d3:cf:12:42:b7:65:09:1f:c4:82:5a:25:
         55:0a:e0:a0:9f:03:93:0b:84:c9:14:5f:16:12:42:4f:37:95:
         83:72:ef:9e:3b:4f:e8:5a:88:cd:7e:11:5b:8f:e8:50:e9:b6:
         c1:0e:2d:56:6f:ad:3f:39:c9:22:30:45:40:6b:92:30:b1:96:
         55:fa:f0:9c:6a:dd:11:b8:f3:e1:b6:2d:d3:86:c6:68:9b:35:
         8f:73:66:b5:79:3b:01:48:f5:01:81:34:fc:1b:f6:e8:22:18:
         dc:0b:0a:7d:97:f4:3c:33:30:34:91:c4:86:7e:89:03:51:c9:
         95:30:1e:ad:1d:eb:58:9c:f3:d3:3f:dc:a7:58:cc:f6:0d:be:
         67:26:6d:54:50:5d:45:83:40:ac:8b:7e:b8:5c:4e:67:87:4b:
         bc:a4:21:58:2f:fe:14:fe:72:b3:a9:49:db:d0:4e:29:21:cc:
         9b:bb:a1:22:10:ea:50:49:3e:4a:62:fb:0d:c5:68:12:70:df:
         74:ad:6f:72:19:c4:2c:b0:ba:01:27:32:2e:21:69:7f:ae:d2:
         87:fc:68:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----