Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/d7d1d35c-9a36-3f42-95c6-06e45b47f41e.roa
File:                     d7d1d35c-9a36-3f42-95c6-06e45b47f41e.roa (raw, json)
Hash identifier:          xYdr8K8pkPOkHgSpCBP8j1o8tz+H+UfNyAhd68lVF1g=
Subject key identifier:   E3:D6:7C:B9:E6:9F:A9:30:4A:35:11:BD:50:E5:6B:F4:FC:8E:96:1F
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F4328583BB7EC2A1E04A179AD954C0280
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/d7d1d35c-9a36-3f42-95c6-06e45b47f41e.roa
Signing time:             Mon 15 Mar 2021 04:00:00 +0000
ROA not before:           Mon 15 Mar 2021 04:00:00 +0000
ROA not after:            Mon 29 Jan 2024 05:00:00 +0000
asID:                     1239
IP address blocks:        207.170.164.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:b7:ec:2a:1e:04:a1:79:ad:95:4c:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Mar 15 04:00:00 2021 GMT
            Not After : Jan 29 05:00:00 2024 GMT
        Subject: CN=eea20694-f22e-4aed-83d6-ed6ae05769e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:18:fe:a9:9e:9f:b5:ab:8f:1c:80:ae:7d:
                    cf:f4:17:2b:00:f3:09:00:12:40:cd:c6:fa:eb:4f:
                    b4:da:aa:39:27:3a:f4:55:06:4a:fa:6d:53:b7:7b:
                    b0:09:6a:b0:8c:eb:19:67:3b:8c:87:72:a0:86:60:
                    59:58:89:6d:43:4a:49:03:f0:9e:f2:e1:94:1c:5b:
                    7a:ec:78:df:c9:c0:11:d0:73:b5:9d:c3:44:8b:bf:
                    d2:ed:8b:96:f5:50:b8:88:34:51:1e:73:ee:85:ad:
                    49:0b:05:ec:df:ab:43:07:32:05:56:63:e3:61:99:
                    0b:87:76:b7:e7:25:bd:68:34:8c:45:14:10:81:f4:
                    ee:a4:63:c0:87:c0:70:f3:6f:e3:ae:b2:7e:a3:96:
                    71:83:26:0a:04:01:e8:69:b1:43:7b:2c:a6:5e:91:
                    2e:e8:3f:f0:3f:fe:06:1a:98:c6:b6:e5:ae:65:7a:
                    7c:7d:62:8f:44:cd:ea:a3:13:c8:55:7b:c8:84:3e:
                    c1:07:63:76:30:db:7a:f8:76:90:46:29:47:b6:e2:
                    a0:2e:f0:10:1f:2f:f7:63:08:16:d4:6e:45:a9:cb:
                    e0:71:43:c3:d4:2e:c0:99:98:27:0d:0c:11:cc:84:
                    3b:ee:36:fc:9b:5d:83:3b:5d:e7:6a:a5:4c:9b:72:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D6:7C:B9:E6:9F:A9:30:4A:35:11:BD:50:E5:6B:F4:FC:8E:96:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/d7d1d35c-9a36-3f42-95c6-06e45b47f41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c6:63:cb:8d:42:73:4f:8f:a5:5e:7c:4e:f2:8f:15:5b:31:
         79:c4:a3:67:55:ee:c3:e7:ca:f0:2c:85:a5:72:4d:a7:90:8d:
         0a:84:bc:67:bf:5c:fb:a0:a7:95:f1:6b:ca:e2:70:fc:a6:e6:
         7a:13:6d:bb:9a:52:05:75:b1:a3:84:20:53:05:3b:58:ca:13:
         31:40:07:5d:29:f1:1a:fe:a0:7e:24:b2:c6:f8:4e:72:6d:d4:
         59:ca:26:5f:68:77:73:2d:e0:ad:bc:17:fd:77:27:58:82:97:
         b0:3f:a9:c2:dc:ba:55:ab:95:c1:96:14:a5:5e:02:0b:ee:47:
         57:84:da:40:39:54:c7:ad:48:ee:c3:2b:85:70:04:7b:24:c3:
         08:27:51:96:fe:df:c2:9e:8b:cd:7f:1d:5f:43:8b:fa:63:53:
         0d:01:13:de:cf:1e:61:e4:cc:01:da:44:2b:9f:f5:36:9d:8e:
         94:ba:cf:7c:49:7f:a7:2b:f8:be:69:08:ad:bb:bf:37:06:ac:
         cf:b7:42:db:4b:21:3b:5e:3c:d1:57:b6:32:ea:cb:07:58:3b:
         cd:74:04:1d:49:78:84:66:d8:6a:03:ee:41:fc:65:02:38:6a:
         1f:ed:68:56:a6:4f:95:2d:6a:25:17:53:bf:cd:a6:97:e2:93:
         f9:d3:77:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----