Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7e1d7ad7-2d61-38f7-9c03-38bf4744c2ca.roa
File:                     7e1d7ad7-2d61-38f7-9c03-38bf4744c2ca.roa (raw, json)
Hash identifier:          Mr7Wetj1Afm16hp6C6zzZlthk1kLoe03AvGwNl9r2/E=
Subject key identifier:   44:59:E2:F6:D7:19:28:F5:49:BD:0A:CB:F5:21:1D:D5:06:06:49:DD
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C09917E37C9881959B5206480
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7e1d7ad7-2d61-38f7-9c03-38bf4744c2ca.roa
Signing time:             Wed 24 Nov 2021 05:00:00 +0000
ROA not before:           Wed 24 Nov 2021 05:00:00 +0000
ROA not after:            Mon 26 Feb 2024 05:00:00 +0000
asID:                     32381
IP address blocks:        207.126.144.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:09:91:7e:37:c9:88:19:59:b5:20:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 24 05:00:00 2021 GMT
            Not After : Feb 26 05:00:00 2024 GMT
        Subject: CN=16ed128f-9186-45f3-b445-9c159ad9b3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:49:44:2c:92:e6:e8:b9:50:6d:ba:55:33:70:
                    2c:e0:30:4b:68:c7:ab:04:1f:b1:dd:e1:95:28:86:
                    5c:cf:96:51:af:8b:96:ab:6b:84:44:27:a5:0f:89:
                    8a:11:ac:7a:83:a8:3a:c9:02:3c:1f:18:c8:15:06:
                    31:fc:2f:56:7a:ed:60:36:87:30:7b:b0:b3:24:70:
                    15:4e:f5:88:9c:b7:cd:72:fc:35:52:80:3e:3e:9d:
                    c2:af:1c:7d:ca:39:c6:90:ca:8e:71:90:11:d0:95:
                    42:5a:16:b0:a7:97:39:97:2f:c6:5f:f1:5e:83:85:
                    00:03:c0:96:e8:2d:6a:c2:9c:d6:2e:d0:01:f5:a4:
                    05:0c:40:2d:75:94:12:6a:53:ca:4f:a7:3b:cd:f4:
                    13:bf:d3:b2:dc:49:0b:f4:84:1b:50:e1:33:2f:2c:
                    ef:bf:7a:ec:26:ef:4a:0a:04:7f:e6:6f:9c:e2:6e:
                    d1:02:d7:e5:06:05:db:0a:88:c8:7a:cb:e9:2e:39:
                    52:d6:d7:6f:34:cf:78:7e:44:ca:39:2e:8d:e4:91:
                    67:f9:b2:f3:2f:5c:5f:92:c1:35:62:52:9d:74:88:
                    e6:aa:1b:e7:93:34:9d:b5:65:a6:33:98:6d:4d:17:
                    94:3b:3a:3e:c2:0a:18:90:cd:af:80:18:07:ac:1d:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:59:E2:F6:D7:19:28:F5:49:BD:0A:CB:F5:21:1D:D5:06:06:49:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/7e1d7ad7-2d61-38f7-9c03-38bf4744c2ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:58:af:c2:d1:d1:03:ac:79:ef:9e:19:5c:bd:73:0d:ee:0a:
         95:55:0d:21:aa:f5:73:ea:07:99:da:da:ac:53:0d:c7:bb:52:
         57:46:99:dc:3f:44:d8:55:0b:1d:b3:53:0d:8c:15:54:64:54:
         17:f5:52:dc:f2:9b:ba:1c:cf:85:1f:4c:2e:6e:39:3d:a1:60:
         41:58:4a:7c:da:ab:e4:0f:5a:63:23:82:b1:ab:1a:19:f6:12:
         81:55:c6:18:b8:2e:6a:cd:3a:a9:7d:47:4c:99:80:66:f6:70:
         9b:fa:1e:68:b5:1a:3b:e3:20:e9:2b:bf:e7:65:09:3d:08:6c:
         58:69:23:9c:4b:77:80:40:60:86:70:b3:30:4e:37:04:54:b9:
         69:62:e8:c3:57:96:28:10:f5:41:45:55:4f:af:67:4f:9c:fb:
         89:80:68:ab:ea:d5:9f:1c:54:f4:b6:11:d1:6b:b5:75:5b:0a:
         00:f1:cc:f0:d1:03:2f:ac:ab:3d:89:88:6f:2c:e4:e0:85:1d:
         ef:88:0a:8c:62:38:3a:36:75:56:12:6e:6c:a5:55:3f:c6:4f:
         fe:69:15:f8:e8:9e:36:9e:67:5a:e8:0b:a7:59:9e:8d:0a:f4:
         b8:58:d4:0d:13:b3:47:6a:46:2a:88:21:85:97:d4:c1:a0:85:
         79:80:54:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----