Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/8121992b-5ccf-3fcb-b4ec-44cd50353619.roa
File:                     8121992b-5ccf-3fcb-b4ec-44cd50353619.roa (raw, json)
Hash identifier:          leEjdFARFn3YYxkL0tp/WM1Mlc1jPUzGX4FlpNo+xpI=
Subject key identifier:   E9:4C:84:92:69:4E:9C:F7:28:1F:02:30:E6:48:A2:BC:44:12:BF:E1
Certificate issuer:       /CN=1b8f9be3-65c4-421d-a760-278a00443898
Certificate serial:       010D0C9F43285838C8A9F8C229F7A12C25EB1F80
Authority key identifier: 7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/8121992b-5ccf-3fcb-b4ec-44cd50353619.roa
Signing time:             Fri 29 Jan 2021 05:00:00 +0000
ROA not before:           Fri 29 Jan 2021 05:00:00 +0000
ROA not after:            Fri 05 May 2023 04:00:00 +0000
asID:                     63020
IP address blocks:        141.193.144.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:c8:a9:f8:c2:29:f7:a1:2c:25:eb:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b8f9be3-65c4-421d-a760-278a00443898
        Validity
            Not Before: Jan 29 05:00:00 2021 GMT
            Not After : May  5 04:00:00 2023 GMT
        Subject: CN=e0c4d228-6a5f-49ac-9860-91e17c8bf368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ab:28:8c:6b:6a:15:a3:55:0b:d3:01:6a:fd:
                    1d:85:da:df:22:8b:df:b2:28:e3:41:e1:5d:91:b1:
                    6e:7a:ce:b0:df:8f:a8:67:3d:a4:f6:1a:f4:a5:d2:
                    0b:7b:c3:07:62:e9:36:06:40:a6:1a:87:bb:c9:08:
                    5d:ac:14:60:8a:30:2c:78:d5:9f:85:cc:1f:49:76:
                    d3:9a:82:92:0e:aa:55:9d:1b:a8:d4:71:01:13:65:
                    72:9e:13:77:17:99:09:4f:28:a7:66:5f:d4:c2:7a:
                    5e:2a:9d:89:1c:25:35:80:ff:b4:15:aa:dc:8f:28:
                    76:83:d3:45:bf:ab:74:2f:d0:0e:24:52:3a:cf:e5:
                    38:51:1c:c4:9c:43:17:4a:1d:0a:bf:0f:4b:04:05:
                    85:8e:3b:ff:94:b7:00:03:be:75:53:74:f0:28:16:
                    31:f0:1e:11:24:2f:a9:8d:9a:ca:de:cf:db:7b:60:
                    0f:4a:b3:fd:66:e4:54:d3:0c:7a:29:9b:72:a9:a3:
                    62:93:f7:18:8d:b1:84:a0:60:bc:55:a1:f0:b3:8f:
                    70:3a:e8:0a:e7:f0:9d:0a:41:6d:92:32:0d:b3:96:
                    e3:4c:38:58:0a:da:22:02:c1:29:b8:e8:01:cd:32:
                    4c:b2:54:e0:86:24:89:08:c7:97:a9:56:79:cc:8c:
                    ec:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4C:84:92:69:4E:9C:F7:28:1F:02:30:E6:48:A2:BC:44:12:BF:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/8121992b-5ccf-3fcb-b4ec-44cd50353619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:2f:a0:f6:56:cf:b0:e7:14:b6:ab:53:95:78:f2:74:24:30:
         10:51:8d:1e:40:ee:bd:45:06:c3:78:16:b6:36:74:10:92:cd:
         b5:ed:8e:24:eb:65:a5:6d:e3:28:e7:e1:08:2b:b4:6f:41:04:
         1a:1a:f6:35:c8:81:87:d1:0a:3d:1d:30:bb:4b:54:ff:2c:9e:
         d1:af:f9:fb:28:d9:65:ee:5d:e5:e6:68:49:0d:84:fc:6d:85:
         ad:5e:82:96:ef:9b:44:8c:fb:89:6c:8b:b0:5f:66:c7:a8:d1:
         80:3a:ee:45:d9:49:2f:5e:39:40:a0:b1:c1:00:6a:ea:6f:ac:
         9c:1b:6d:ec:4d:7e:3f:d4:27:d5:fb:61:27:14:35:26:f2:bc:
         1b:bd:23:39:76:b7:f2:8a:04:6f:cf:8b:7e:9c:ed:81:00:9c:
         a0:22:ac:e9:be:5b:01:12:96:71:34:21:6b:cd:02:f1:63:9b:
         18:78:ad:23:06:18:7f:d3:47:c2:77:ea:37:78:22:98:62:82:
         f3:b5:5d:c5:d8:c4:b9:52:8d:aa:3b:4a:8e:83:a9:07:2a:3a:
         32:0b:41:81:b0:0a:1d:2e:1f:d5:de:6c:7f:7e:f4:4b:23:8a:
         bc:e2:ee:59:f0:62:56:fa:9b:52:2d:8f:da:2c:af:58:77:f4:
         dd:74:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----