Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/f70e8e0a-c799-33f8-a7d3-1b170da35561.roa
File:                     f70e8e0a-c799-33f8-a7d3-1b170da35561.roa (raw, json)
Hash identifier:          qg707F81vO5fe8zvsYIlG0SyZ2KVbBqKhAa+dcd4Ly0=
Subject key identifier:   F7:A9:C3:C5:9B:94:BC:4B:13:28:97:F4:F9:44:66:71:FE:59:DC:5A
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328583E3C954B6DD977A0AABD980788
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/f70e8e0a-c799-33f8-a7d3-1b170da35561.roa
Signing time:             Mon 13 Jun 2022 12:00:00 +0000
ROA not before:           Mon 13 Jun 2022 12:00:00 +0000
ROA not after:            Thu 14 Jul 2022 04:00:00 +0000
asID:                     205220
IP address blocks:        103.207.44.0/22 maxlen: 22
                          103.49.152.0/22 maxlen: 22
                          103.65.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3c:95:4b:6d:d9:77:a0:aa:bd:98:07:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Jun 13 12:00:00 2022 GMT
            Not After : Jul 14 04:00:00 2022 GMT
        Subject: CN=5f8a846c-6fd6-498d-8034-8fb56402c082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:aa:a2:02:e4:44:69:91:b8:b6:c8:e9:3d:c8:
                    9b:75:12:02:df:0f:a6:f8:0a:02:d8:fb:9a:66:ab:
                    2d:36:de:6d:50:3f:f6:71:79:95:c1:9d:d5:6a:51:
                    6c:2d:55:fd:ef:8d:bc:4d:b3:6c:35:97:8f:8e:40:
                    69:9a:ac:34:b4:d1:bb:0f:f6:0b:a9:5b:31:84:bf:
                    7d:e6:d3:ee:03:36:22:15:c7:4e:de:ed:ed:58:a8:
                    92:30:ee:60:89:c0:93:17:22:fb:b7:75:d3:d4:b9:
                    93:d4:01:0a:5a:c2:ed:56:6c:f1:ef:ad:87:54:2f:
                    a5:71:d9:4f:a2:7c:76:c3:e4:4a:f1:d9:61:94:0e:
                    2c:95:2e:c4:d1:bc:67:33:a5:45:c0:be:6d:b3:91:
                    fb:d8:a7:c6:0a:59:57:32:8f:98:1d:11:ec:89:c2:
                    9b:13:e2:ae:75:8a:62:be:66:8f:13:90:01:25:7b:
                    75:04:45:78:ef:1e:f8:83:4f:66:b0:01:b5:e5:26:
                    df:37:c9:42:e3:09:0b:9c:7f:0d:47:8d:13:1b:a0:
                    a5:61:16:89:8f:b3:2c:ef:f5:f3:a8:25:98:04:72:
                    bf:8b:20:cc:e2:a8:7e:80:e2:d3:6c:10:21:34:33:
                    ee:9d:41:6c:46:6f:62:39:b2:56:05:8c:54:53:a4:
                    d2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:C3:C5:9B:94:BC:4B:13:28:97:F4:F9:44:66:71:FE:59:DC:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/f70e8e0a-c799-33f8-a7d3-1b170da35561.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.152.0/22
                  103.65.228.0/22
                  103.207.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:48:41:f3:dd:cb:9b:74:73:2f:21:0f:c0:e9:49:09:96:fb:
         47:46:c0:f8:07:e7:d0:8c:a1:e3:34:48:ae:e1:b2:9a:5c:82:
         ae:c7:8b:fe:25:e1:5e:05:9d:dc:19:3a:1c:10:bd:b5:9c:eb:
         d6:20:dc:5a:a9:c6:cb:1e:e2:b3:7a:1d:fc:27:6c:16:02:55:
         55:f3:60:92:c0:3f:3a:1e:49:c6:17:ae:be:53:01:c6:b9:c6:
         12:a5:d1:af:fe:2b:5a:e7:f8:bb:40:ae:67:48:c6:63:2c:a2:
         d2:32:73:7b:b0:3b:6a:f5:bb:23:0b:bd:49:59:8a:a6:0d:d8:
         d8:e6:35:38:39:b3:d2:9d:76:9c:29:b9:15:12:10:16:f7:e0:
         5d:83:fc:ab:fb:75:49:f6:40:df:85:54:34:f7:22:05:66:d0:
         14:24:71:7f:6c:6b:a9:fe:96:cc:b4:31:cd:88:36:2e:b0:d6:
         c8:b2:d9:5c:fc:eb:dc:8f:25:49:a7:ff:fc:33:ce:3d:3b:31:
         99:3b:d0:bf:39:5f:7e:ba:6c:58:cd:c1:e2:fd:93:c5:58:0a:
         48:16:02:76:51:a3:2c:e4:7f:12:77:94:f4:37:04:cb:da:e1:
         83:4a:3e:67:82:98:03:94:91:1c:c5:33:c4:37:59:ac:94:23:
         9a:3c:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----