Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30893788-fc40-3eda-a8f5-5be36668850a.roa
File:                     30893788-fc40-3eda-a8f5-5be36668850a.roa (raw, json)
Hash identifier:          C8bHHfnO4ixzLQ12y4BA5nnDqfs1FOcfCGiW+nLCw5E=
Subject key identifier:   88:4D:66:DA:7F:B2:AF:CD:94:E2:7B:84:F0:1C:84:CD:5E:F5:48:FC
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7BF7ECA9DD82A852A021E80
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30893788-fc40-3eda-a8f5-5be36668850a.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bf:7e:ca:9d:d8:2a:85:2a:02:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=da1780f9-759f-4a8d-9ee3-eca5cdfcdba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:c1:ef:a7:2b:cc:8c:91:25:db:3e:d2:ab:
                    87:b6:9b:9a:f7:d1:ae:e1:45:c0:1e:72:b3:42:6a:
                    2b:79:0f:bc:dc:49:ad:3f:0f:b3:8c:7b:33:4d:82:
                    2d:48:4a:80:cb:89:96:4a:bc:d0:72:e1:10:d2:d1:
                    3c:91:ec:68:94:69:9c:e7:33:74:27:69:7e:54:44:
                    06:a2:f5:2b:d2:c6:b5:a1:55:2d:43:6d:f4:0c:6a:
                    19:40:17:51:ce:cb:fe:7c:a2:fc:78:ff:63:0a:ea:
                    45:2f:53:ac:25:91:d0:e7:bc:50:ea:67:2d:ad:b8:
                    b9:ab:cc:ad:c3:78:ec:27:97:8c:82:69:23:d2:b7:
                    35:c6:b0:60:cd:62:61:5b:64:44:03:20:19:1d:03:
                    c3:72:c8:56:71:95:5a:10:38:01:2b:8d:c6:6a:b9:
                    d4:23:61:c7:9e:f3:70:93:88:d5:a6:56:1e:7f:be:
                    e0:20:13:06:4e:bc:c7:4c:ee:ab:ac:f7:27:ce:b3:
                    be:92:7b:ea:4d:80:b9:63:cc:79:18:7a:eb:51:2a:
                    2c:09:f4:e6:98:ee:5d:8a:f4:e9:71:fc:52:af:7b:
                    da:23:e5:f9:29:ae:e5:70:2a:22:1e:c1:63:e5:ad:
                    28:a1:21:5b:0c:1c:5b:84:e1:53:86:92:f8:82:c0:
                    77:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4D:66:DA:7F:B2:AF:CD:94:E2:7B:84:F0:1C:84:CD:5E:F5:48:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30893788-fc40-3eda-a8f5-5be36668850a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:90:a9:9c:48:e3:7f:ea:34:0c:72:c1:5e:9f:08:66:55:36:
         46:5b:cd:35:dc:6b:0b:d4:f4:63:0c:39:fc:98:17:26:a3:9e:
         43:24:51:3c:e8:1d:90:27:9a:a9:46:62:33:46:01:21:8b:58:
         e1:d3:ef:de:bd:ae:62:ef:4d:07:e7:80:53:e4:41:69:77:88:
         1f:c1:51:61:0a:1a:49:54:1b:44:03:46:96:59:a0:e3:22:d0:
         1d:0f:ba:84:6c:d3:0d:ef:7c:d6:2e:a9:7e:a2:58:0d:c6:a4:
         5b:8e:00:7d:95:9a:e4:c4:a3:fd:14:fd:b7:ed:e5:7b:0f:33:
         9e:25:fe:f1:00:b2:cd:ea:16:fe:3e:6a:3e:a0:bc:7b:d7:fd:
         ef:f0:6d:56:9a:b7:d2:8f:40:ba:c8:58:70:2d:4f:fd:04:3c:
         d2:d0:04:e0:69:7c:55:06:fb:70:07:b6:a4:23:21:b8:37:3d:
         f1:c5:9a:06:7c:29:75:b6:02:cb:17:e6:32:12:e7:e4:10:35:
         52:9c:26:48:69:dd:5a:21:57:27:cb:b5:b0:6c:4c:ed:4d:7d:
         44:4e:2a:7c:f9:84:9d:51:ec:d4:45:ae:c2:e4:76:65:5c:01:
         35:27:46:e4:86:d9:6a:28:5d:28:dd:25:11:a5:9b:4b:ed:97:
         cc:8b:25:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----