Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cb070039-94c0-3c8a-8e38-85c2f2dc6a89.roa
File:                     cb070039-94c0-3c8a-8e38-85c2f2dc6a89.roa (raw, json)
Hash identifier:          1ybu81ZTG4NQHx23tOJyiHvxlLCzEubSdUyMTCJN0rg=
Subject key identifier:   7F:A8:10:F5:BF:C8:AA:AB:BE:79:09:81:36:77:99:87:C4:4E:EB:6E
Certificate issuer:       /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
Certificate serial:       010D0C9F4328583AA7C3A5941ECD5992FF052400
Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cb070039-94c0-3c8a-8e38-85c2f2dc6a89.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        136.22.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c3:a5:94:1e:cd:59:92:ff:05:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=8eb638b3-ba6c-4f52-8039-472b32ea1a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:46:0d:01:8a:8d:26:f8:c2:f2:79:a7:3d:2a:
                    ca:35:4a:5d:25:06:35:4e:36:a5:5a:16:b8:5f:6f:
                    d6:bb:a2:5f:79:5b:23:b5:58:90:74:62:c0:b5:bd:
                    ad:5b:c0:32:87:41:9a:c1:78:6d:f7:ca:0d:ef:df:
                    36:52:cf:02:f7:29:cf:a5:1a:e4:8b:5d:67:c6:d6:
                    f9:f0:94:a9:b8:0f:50:af:bb:d9:f3:99:89:e7:82:
                    6d:32:0b:c4:b1:9f:dd:43:ed:b0:c7:fd:3b:d4:6a:
                    7e:bf:c7:00:d6:15:f6:48:6c:b4:7a:f3:84:41:08:
                    b4:25:c5:46:88:f5:3a:8e:dd:50:2e:e1:73:bc:8a:
                    d1:0b:ae:4f:81:a5:79:8e:68:49:d0:4e:8e:e9:c0:
                    24:a0:8b:76:b3:f1:3a:05:c3:37:99:49:31:93:f1:
                    f6:46:a9:7c:99:61:f9:14:18:06:15:84:4d:63:fd:
                    cf:08:39:c0:c4:76:c3:c2:83:dc:81:05:ac:71:69:
                    84:46:9d:7b:c5:da:e9:9a:9b:37:57:5c:a5:6e:54:
                    77:9f:3e:c6:0f:b3:fb:f4:b9:02:56:91:36:4d:7b:
                    ee:a6:b4:de:bb:72:ba:dd:3b:92:87:5f:8b:14:25:
                    a2:bb:6c:00:7b:2c:53:60:91:c0:b6:7e:b7:4a:57:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A8:10:F5:BF:C8:AA:AB:BE:79:09:81:36:77:99:87:C4:4E:EB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cb070039-94c0-3c8a-8e38-85c2f2dc6a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl

            X509v3 Authority Key Identifier:
                keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c7:ab:76:10:1b:38:a8:5f:cc:9b:56:d1:62:58:30:d2:eb:
         2c:25:6b:ba:bf:e9:b5:d8:6d:a3:6e:7a:93:ee:a5:bd:68:c0:
         28:5d:d3:86:fc:65:13:6f:7f:41:62:31:65:88:1d:c3:0d:b7:
         a3:a2:38:1c:e4:c6:cd:e3:e7:3a:6a:96:cf:e8:1e:20:0f:a7:
         e9:76:f9:2a:b6:4b:35:e3:38:09:a5:e9:de:fe:2a:0d:81:8e:
         d8:3b:5b:0d:79:ba:68:f9:1a:27:1a:32:05:37:ed:3e:48:3e:
         79:9c:42:34:c8:8b:3c:69:64:e7:30:fc:0b:0e:aa:ea:5d:fe:
         77:9f:02:a4:a3:2a:18:05:9d:a1:97:51:cd:c6:ea:94:70:3a:
         6b:54:8e:b8:65:ce:e5:9b:50:f9:fe:a3:5e:18:bf:03:28:7b:
         d1:20:27:75:06:3f:86:d9:37:1b:3d:e1:b1:56:72:7e:20:e4:
         5b:67:0f:8d:20:0c:da:0d:7a:87:44:50:71:d6:4d:e0:85:99:
         d2:e5:58:24:6d:14:d4:b5:e4:17:97:b4:fb:10:03:0c:7d:c0:
         4e:ff:32:98:88:21:19:d4:58:50:df:ae:bc:3f:da:98:a5:19:
         26:d8:50:af:5d:ff:df:20:e5:17:a1:d3:a3:c2:df:3d:3b:04:
         ad:9f:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----