Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/849418ef-c129-31aa-b152-6ae5caa32421.roa
File:                     849418ef-c129-31aa-b152-6ae5caa32421.roa (raw, json)
Hash identifier:          jyRMl2v3iJ/kZyYEiky+9W7cf6tN+NRyHTea/bQuzqU=
Subject key identifier:   B2:F7:1A:11:7C:B4:E1:DA:BB:29:C0:45:5B:19:35:A4:17:C0:AB:60
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583E579F739EC46B7FD8663BC1C0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/849418ef-c129-31aa-b152-6ae5caa32421.roa
Signing time:             Thu 08 Jul 2021 16:58:24 +0000
ROA not before:           Thu 08 Jul 2021 16:58:24 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        161.69.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:57:9f:73:9e:c4:6b:7f:d8:66:3b:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jul  8 16:58:24 2021 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=39b2d111-2027-431e-bab6-195548a1b9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:71:70:32:21:95:a4:bf:48:6c:f6:80:2b:0c:
                    9b:e2:f1:d7:48:6a:38:59:2b:71:63:ee:bb:37:11:
                    96:33:8a:cd:5b:85:1f:e9:9c:a0:db:6b:62:03:13:
                    32:e6:f4:f8:6f:34:5a:7e:0e:ab:2c:2a:7b:c1:5c:
                    c5:2d:0e:be:a7:4f:a8:f8:43:3c:91:46:a6:85:bc:
                    8b:05:cd:a2:7c:e5:93:e5:9b:15:4e:11:8d:a0:84:
                    c5:02:f4:09:14:44:7a:40:38:de:bb:b5:c9:84:88:
                    3c:70:43:b6:9f:f5:42:95:3a:e6:d1:1b:86:a5:e7:
                    02:2a:4b:89:90:8f:32:2c:dd:39:9f:47:16:20:3f:
                    9c:3d:a0:36:09:ce:0d:4e:76:c7:67:e1:86:6e:eb:
                    3c:78:57:7f:a7:d6:fa:f8:0e:48:60:9d:dc:1b:e4:
                    5a:42:e7:f8:9c:66:3b:71:f5:01:2a:fe:64:6e:6c:
                    f5:8e:94:2a:4f:8a:13:3e:45:47:3c:6f:03:51:c8:
                    31:3a:2a:f6:6b:14:8e:ae:c7:ed:68:4c:f5:3c:b0:
                    c5:b6:15:72:53:63:ae:2b:17:23:1d:5f:d2:15:b5:
                    09:95:19:25:60:b9:a7:bb:17:17:28:52:7c:1b:e6:
                    d7:2f:c4:d9:85:ae:f6:5a:62:1d:41:3e:73:6e:33:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F7:1A:11:7C:B4:E1:DA:BB:29:C0:45:5B:19:35:A4:17:C0:AB:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/849418ef-c129-31aa-b152-6ae5caa32421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e9:90:30:1c:5e:aa:1f:0c:91:94:c0:47:46:8d:18:a3:30:
         e2:c8:43:a2:ce:b8:99:fe:0b:0e:e6:3f:2c:87:0f:16:fb:25:
         81:f5:6a:3c:3d:59:f8:ac:4f:82:31:54:71:30:86:5b:44:07:
         e0:9d:39:a2:4d:6c:a9:06:d0:0c:3d:3f:32:d8:c8:7b:39:84:
         10:33:6d:b4:4c:df:2c:52:91:56:f5:6a:96:b7:d8:3e:0c:16:
         b1:c9:aa:10:37:11:1e:03:e5:ff:31:01:e0:01:bf:0d:9f:7b:
         0f:0d:bd:f6:76:8d:7b:a1:e1:d9:9f:ff:9e:fb:bc:6d:be:b8:
         c4:a2:8f:85:b6:2d:b3:a9:29:4e:6c:7a:2c:0d:0e:a9:22:7f:
         c6:c1:56:52:04:0e:41:b1:cb:2f:a6:00:62:c3:5d:98:c4:b7:
         e2:b6:62:27:61:d8:26:9d:36:7f:2a:b5:82:68:4d:b7:d3:9a:
         93:fa:42:dd:7c:17:62:27:9a:85:fb:10:48:e1:f2:81:88:ef:
         86:96:58:ff:1f:ca:99:f4:72:f3:9b:b5:28:24:a2:b5:f0:57:
         0d:0c:63:7b:a0:56:3b:b1:bc:9f:27:39:b3:63:c5:0a:9c:a3:
         34:51:35:44:2a:40:81:3e:d6:a3:f6:f0:ee:78:5b:f5:70:6f:
         7b:92:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----