Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/7ff23a2d-843e-3f26-9242-94125a6376fe.roa
File:                     7ff23a2d-843e-3f26-9242-94125a6376fe.roa (raw, json)
Hash identifier:          pYVoExtZjU5d6RTknHsufLpWKlWurY8fjkjYpXjP+7w=
Subject key identifier:   42:EB:89:54:F5:93:B7:36:15:AA:5D:0D:D8:9C:39:53:84:EA:B7:C6
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F4328583AA99B5B3DD6BA86D8B9ADC700
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/7ff23a2d-843e-3f26-9242-94125a6376fe.roa
Signing time:             Thu 20 May 2021 04:00:00 +0000
ROA not before:           Thu 20 May 2021 04:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     20454
IP address blocks:        64.38.200.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a9:9b:5b:3d:d6:ba:86:d8:b9:ad:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: May 20 04:00:00 2021 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=717d559f-2384-4876-8010-7e2473c9366a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:01:08:1a:91:06:76:19:4e:d9:0d:6b:7e:
                    7d:73:3f:d3:11:31:c4:03:3a:2c:8f:3a:02:8d:ae:
                    0d:f3:c3:0d:87:b3:dd:e8:44:db:69:c1:19:b7:f1:
                    97:39:e6:07:23:59:ba:03:fa:bf:e1:02:d7:f7:25:
                    f3:0a:c3:19:0b:c7:52:d5:cf:8a:68:e8:da:a9:f9:
                    b4:62:50:fe:4a:9f:96:cf:fc:15:03:97:37:27:14:
                    8d:f3:36:da:29:4a:65:f2:7d:b5:9f:d5:dc:f7:86:
                    93:43:0c:99:d9:91:3f:b7:13:c1:b3:28:19:2d:36:
                    e5:a6:36:7e:11:7e:c7:bb:3c:91:84:ea:38:14:08:
                    9b:44:83:14:1e:e6:ca:40:86:a4:10:60:cf:72:3a:
                    50:09:a1:d0:a2:38:90:94:a1:da:73:c4:0e:3e:e8:
                    1b:bf:17:99:5d:d6:27:96:71:20:d3:9e:3f:13:21:
                    bf:bf:46:90:b0:f4:2b:c8:55:10:42:23:9b:51:12:
                    0f:0d:f0:b5:34:dd:0f:a3:eb:d1:b7:3b:2e:2d:e4:
                    6b:c7:ec:4a:a9:a2:6a:97:f2:b6:39:85:c9:43:cb:
                    d8:cd:fc:4e:e9:0b:1f:fe:5b:3b:03:ab:e5:03:cd:
                    d8:f9:22:2a:23:b1:85:b2:06:a0:83:21:5c:c1:99:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EB:89:54:F5:93:B7:36:15:AA:5D:0D:D8:9C:39:53:84:EA:B7:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/7ff23a2d-843e-3f26-9242-94125a6376fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b1:03:3d:75:29:f7:78:1c:c2:69:d2:ff:e3:bc:92:cd:c1:
         47:f0:65:73:db:56:b9:38:4d:16:36:c6:58:a0:7f:86:5e:33:
         75:49:ad:86:06:a2:7f:6b:fa:30:7e:99:c8:7c:2c:60:48:ca:
         90:4b:e4:4c:1e:49:b6:2d:b7:ef:96:6f:e4:86:76:b5:1c:01:
         3e:a6:00:ef:b3:b0:02:74:3a:8c:80:6d:1f:21:53:3e:59:80:
         2b:4b:67:00:24:fe:8b:34:5b:b5:a4:af:e1:2c:ff:61:25:3d:
         ad:11:09:5f:d2:df:b1:7d:b7:fc:91:d2:c3:42:fe:73:3b:04:
         41:36:ca:b7:8c:79:35:5e:d4:cb:cd:d3:df:ca:f6:92:b8:b5:
         1a:76:c9:26:f6:ef:dd:aa:8c:f4:97:ae:1d:cf:3f:4b:2e:40:
         2a:bb:d3:11:63:0a:63:12:d8:45:c8:4e:25:cb:85:0c:aa:05:
         8c:07:ff:6e:6f:b1:b8:61:f4:41:49:01:7e:e5:b7:2f:bf:f5:
         e6:a5:e6:eb:29:53:5f:bc:e4:dd:77:d2:23:fb:e8:12:22:0b:
         33:72:20:05:49:68:fc:8f:60:75:7c:70:81:b7:a4:4b:c8:6d:
         ee:6b:c0:a2:a7:e5:2b:3d:26:4d:a2:2c:c3:3e:1e:ea:65:96:
         96:a4:9b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----