Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3724d810-1db7-3cbc-82a3-12becc7a9724.roa
File:                     3724d810-1db7-3cbc-82a3-12becc7a9724.roa (raw, json)
Hash identifier:          7jbKpdfC8SRmUKqHV+tUq/wl5kV2S6mW1tbR+M9VD8c=
Subject key identifier:   37:93:E5:E0:62:B9:F2:55:7C:07:BD:35:6F:63:AC:3F:75:70:55:1E
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C0991499F0BEB7473F9319910
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3724d810-1db7-3cbc-82a3-12becc7a9724.roa
Signing time:             Wed 24 Nov 2021 05:00:00 +0000
ROA not before:           Wed 24 Nov 2021 05:00:00 +0000
ROA not after:            Mon 26 Feb 2024 05:00:00 +0000
asID:                     32381
IP address blocks:        207.126.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:09:91:49:9f:0b:eb:74:73:f9:31:99:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 24 05:00:00 2021 GMT
            Not After : Feb 26 05:00:00 2024 GMT
        Subject: CN=2c6b0b9f-f3e2-4fde-a111-51b1d59b2d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:9b:e4:ac:a7:c6:ef:29:f9:73:40:06:d1:
                    57:55:89:ca:56:af:80:24:a5:1c:d0:f2:91:8d:ea:
                    b9:82:c1:fc:34:2c:b0:f8:97:aa:c4:99:71:d4:c4:
                    e7:7d:28:64:49:61:16:00:a7:bd:cf:6a:db:86:b1:
                    47:9d:5b:b6:df:94:93:c6:05:2c:9a:fd:21:a6:1e:
                    67:27:1f:44:69:33:21:22:87:a4:5d:5b:55:d1:49:
                    31:14:0e:5c:48:1b:24:5d:8d:9a:76:6f:92:8f:42:
                    f9:66:14:4f:33:92:f8:12:07:36:d0:3b:35:4c:4b:
                    af:2d:d2:fb:54:3a:f6:f3:dd:77:75:a4:86:2a:85:
                    a6:8c:1d:8b:cc:77:3f:ee:56:a8:78:8c:c5:24:68:
                    c8:aa:d3:1a:a7:e9:a9:31:a9:50:15:49:89:c1:f5:
                    89:3a:e3:cf:12:86:12:c0:a5:39:8c:25:c3:97:0a:
                    4d:55:de:1b:c2:66:7a:20:92:23:e7:4a:e7:8f:1f:
                    d5:e1:0a:ad:e6:35:52:d8:ad:71:52:2f:3a:e1:a3:
                    9b:7a:04:54:37:0a:1b:a7:04:e4:40:18:71:04:f2:
                    d9:05:b0:ae:ab:d5:d9:5d:c3:80:dc:6b:c3:36:1f:
                    05:a1:58:fb:c5:2e:cd:47:70:b5:33:fa:bb:49:10:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:93:E5:E0:62:B9:F2:55:7C:07:BD:35:6F:63:AC:3F:75:70:55:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/3724d810-1db7-3cbc-82a3-12becc7a9724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:2b:4e:09:52:aa:1f:32:92:1c:0e:f5:dc:ae:04:eb:d6:4e:
         f2:50:2b:58:9a:5a:f0:14:d5:d1:ae:3a:87:04:14:4e:0b:96:
         9b:1a:3b:f5:e6:53:ce:3e:cf:1d:ef:6a:d5:8d:4b:4f:cd:85:
         5f:34:f3:93:eb:95:6e:33:2d:49:a7:de:58:7b:b1:3b:46:46:
         4a:2b:44:e8:97:73:7f:c9:2c:da:80:23:d6:63:55:76:5f:6e:
         e4:01:b9:7a:e2:35:20:72:cb:fd:d7:b0:81:43:af:8f:e0:19:
         59:c8:8e:84:7a:20:28:72:39:9b:22:fa:76:b5:4c:5e:ca:37:
         47:a7:5c:d5:8d:c1:e0:ca:5f:c0:02:b9:00:5f:28:f8:cf:7e:
         4c:93:84:f0:54:c3:69:ef:b9:82:38:91:83:20:96:e6:39:ef:
         e7:41:06:ff:67:9c:08:6a:f2:17:c3:da:5b:72:92:c8:80:71:
         0e:ac:e1:0f:81:54:23:61:57:12:c1:bb:44:d0:45:28:5b:24:
         9f:7d:88:61:fc:1a:be:8f:4f:af:8a:bc:c6:cc:3e:74:6f:75:
         a9:e7:7a:9b:88:1b:86:7b:13:c6:fe:c1:04:91:d7:09:51:19:
         d7:da:56:3b:3b:f8:5d:44:ce:3d:c4:8d:13:18:a7:4d:42:b0:
         09:43:1e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----