Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/94cda53d-cd37-328b-aa88-b3ad42aaac1e.roa
File:                     94cda53d-cd37-328b-aa88-b3ad42aaac1e.roa (raw, json)
Hash identifier:          OyGAdFqzoOwn073ItuzSI/1hw6mY4Z7SyI04VOhOJQU=
Subject key identifier:   85:DA:33:E2:00:6B:B0:FD:C0:81:8E:9E:15:09:5E:44:E7:73:F5:6D
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328583AA7A30EE2E5F8CACD66094240
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/94cda53d-cd37-328b-aa88-b3ad42aaac1e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        209.107.179.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a3:0e:e2:e5:f8:ca:cd:66:09:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7fc593eb-9e44-47a7-9404-98cfadd9645f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:12:30:77:1d:67:73:8d:8a:15:78:29:96:
                    9b:b5:d6:c6:6f:c2:5c:38:74:63:c2:f3:60:78:5e:
                    b2:8c:85:28:d4:c6:52:97:90:28:f2:97:6e:73:78:
                    87:72:d4:04:4d:5f:ac:9e:56:8e:61:ae:26:f5:cc:
                    82:86:54:47:57:3f:af:84:ae:b1:e1:0b:95:60:6c:
                    88:cb:c4:fd:7b:53:82:8e:d7:c0:f5:72:b9:f7:be:
                    8b:ee:1d:c3:5c:5a:b7:4e:f3:80:d2:1f:9d:2b:41:
                    ee:cd:0f:8d:08:f5:c5:c9:36:c3:7c:a7:dc:2a:be:
                    bb:2d:46:f1:f4:15:7c:35:7a:3c:3c:52:f8:f3:5d:
                    2b:e3:be:a1:28:ed:70:34:54:22:10:86:2f:f0:0e:
                    d2:e9:c3:5d:16:39:32:0d:75:2a:e2:cc:20:3b:b8:
                    51:2c:ba:d6:60:bf:b3:0b:01:5b:ac:97:ed:ca:f4:
                    54:e3:0a:49:c3:a7:9c:90:4f:75:c7:5e:e5:aa:1b:
                    8d:12:46:62:02:7f:f5:cc:26:07:02:b4:b3:88:6c:
                    2d:af:e8:55:e4:1b:06:c1:7d:5e:4d:74:7b:b6:97:
                    6e:8b:07:97:48:69:a8:e1:12:40:a9:a8:de:d4:0b:
                    9d:e8:a9:22:b6:4d:0b:aa:6d:0d:9a:1e:72:03:d8:
                    00:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DA:33:E2:00:6B:B0:FD:C0:81:8E:9E:15:09:5E:44:E7:73:F5:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/94cda53d-cd37-328b-aa88-b3ad42aaac1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:03:28:83:00:01:37:90:15:9c:67:a9:aa:56:58:80:e5:69:
         de:c0:c6:fe:9e:fa:1d:90:2b:b4:70:ae:56:a1:19:8b:6f:43:
         2d:ff:94:3e:86:d4:01:9a:fb:28:34:15:66:98:fc:57:dc:85:
         0c:16:07:b1:02:94:7e:93:83:2d:eb:b8:b2:c0:2d:10:fc:c5:
         47:17:9b:f4:ea:6b:82:44:1f:dd:c0:0f:eb:dd:c8:4f:ca:79:
         8c:b9:e0:38:d7:2b:2a:5a:38:77:c1:98:2c:39:60:92:1c:21:
         35:f0:a1:8e:ff:2b:27:64:71:d1:1e:91:80:a5:35:4b:b7:d9:
         89:f4:9d:71:bd:18:85:13:48:c4:57:c2:97:04:7d:92:21:9d:
         c6:38:7c:7c:32:71:65:bf:7d:9f:3a:2b:b8:d2:3a:46:b6:13:
         eb:5b:b3:75:05:34:e2:74:e4:d8:72:6b:e8:cb:e8:c8:d6:f3:
         6c:ad:ab:75:64:3b:98:8c:6e:90:ea:ef:27:2f:4a:9d:45:f5:
         26:5d:68:67:b1:9a:a8:88:5a:0c:15:e2:dd:56:00:68:c9:a1:
         64:3c:6c:d6:9c:78:d2:57:32:11:ce:31:12:c7:42:3e:8a:f7:
         15:ca:9e:c4:ad:e6:b4:df:7a:7f:90:f3:cc:0d:ec:68:a3:1d:
         20:cb:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----