Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/97b598a5-e235-3ae4-9274-e327b91f0b77.roa
File:                     97b598a5-e235-3ae4-9274-e327b91f0b77.roa (raw, json)
Hash identifier:          Nd0G+3bLYASNzzzyEG1kGEPUOtzMmzsFJdgy6VOjCT8=
Subject key identifier:   28:40:10:C9:70:B1:43:1D:FA:6E:1D:76:0E:A4:36:06:6F:4A:22:E2
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F4328583CE2F670DA1409B65C58B18440
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/97b598a5-e235-3ae4-9274-e327b91f0b77.roa
Signing time:             Mon 15 Mar 2021 04:00:00 +0000
ROA not before:           Mon 15 Mar 2021 04:00:00 +0000
ROA not after:            Wed 15 May 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        207.170.188.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e2:f6:70:da:14:09:b6:5c:58:b1:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Mar 15 04:00:00 2021 GMT
            Not After : May 15 04:00:00 2024 GMT
        Subject: CN=db3a4747-da81-41c5-b66c-f448f98b6f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:75:52:60:90:35:34:5c:70:3b:f9:09:e8:11:
                    34:ab:5c:06:09:17:65:3e:4c:ee:7d:fc:52:5f:df:
                    1a:76:5a:bb:79:d8:58:93:6d:bb:5c:91:8f:eb:81:
                    49:9a:80:47:2c:df:61:35:ec:aa:fc:89:8a:16:2d:
                    4f:ba:af:18:22:af:37:71:da:37:6d:c1:90:82:28:
                    a2:ec:7f:6a:7d:83:c3:b7:96:aa:1a:5d:79:6e:74:
                    31:1e:82:7c:c4:b1:87:47:3d:2a:d4:f9:8e:36:93:
                    0b:b2:f6:e6:7a:dd:e3:73:d8:2c:d9:5d:58:cd:54:
                    88:68:0e:ce:05:34:30:d1:7e:ee:90:59:0a:83:44:
                    4e:10:a5:d1:3d:b0:8d:ad:74:84:bb:de:48:43:ab:
                    47:69:47:ec:ff:72:56:e9:df:46:58:ff:9b:d7:ca:
                    fe:44:f0:02:74:97:1f:ea:9f:93:b9:16:e6:58:a3:
                    29:ee:2d:aa:fa:d2:97:39:8c:14:7f:89:bb:3c:07:
                    1d:d8:7c:14:0c:d0:c2:16:d4:1d:81:d8:f8:7a:96:
                    79:5d:03:10:25:65:d6:19:f1:f3:8f:24:23:78:7d:
                    10:34:03:6f:07:c3:cd:7e:f4:d6:88:e4:4c:08:ea:
                    bb:4f:69:e6:c0:fb:e7:7c:f5:98:7f:15:86:84:9d:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:40:10:C9:70:B1:43:1D:FA:6E:1D:76:0E:A4:36:06:6F:4A:22:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/97b598a5-e235-3ae4-9274-e327b91f0b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:2c:f3:8c:67:f7:15:2f:ed:97:69:ed:e8:b1:30:b0:bf:59:
         ed:8f:6c:95:12:bb:2e:91:1f:9b:9d:f7:52:67:d2:2f:80:ce:
         5d:69:31:30:61:8a:a2:79:89:ae:3a:2c:57:29:c5:36:05:0c:
         67:8a:cc:f3:2e:4d:ca:44:8d:a5:14:3e:88:a0:7a:58:6b:f2:
         31:26:22:67:82:c5:6c:78:13:53:97:5c:2b:c1:07:33:ab:91:
         42:b6:cd:a5:bb:18:5f:a2:72:bc:b8:a1:ad:72:ed:8a:74:1a:
         d9:ab:dc:9f:a6:7c:7c:ab:d7:8a:9f:26:33:03:05:cf:7f:ce:
         5d:4a:ad:0a:54:17:62:86:5f:ad:29:16:9f:b4:04:57:59:44:
         4c:e9:d1:9f:f2:48:e3:76:58:40:8d:55:34:06:23:d4:02:65:
         47:f3:86:5b:9a:25:d9:4c:4e:91:2b:8a:a0:33:f5:fd:fe:1c:
         68:be:ee:c8:34:e1:40:5f:8b:33:90:0b:07:b9:88:b6:94:78:
         8d:26:a0:df:72:6e:a6:5a:0d:4c:9e:b3:2b:57:c7:a7:17:56:
         89:d4:60:1c:cc:7f:0f:23:8d:41:c9:59:86:13:5f:b1:f7:c1:
         d4:a3:8d:84:af:b2:ed:89:2e:6d:38:a3:6a:8e:bb:e1:4b:07:
         f5:5c:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----