Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b8578147-8eed-323c-ab9d-44c9bfe65dd4.roa
File:                     b8578147-8eed-323c-ab9d-44c9bfe65dd4.roa (raw, json)
Hash identifier:          Gpb31cG3d3Ppis5XVFd974BdF5JY26McnAn50mj/0d4=
Subject key identifier:   77:F5:D0:B1:72:9B:C3:BC:76:83:1B:39:30:D8:57:37:71:9E:CD:82
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583E579EFAAA7B3030261CBDD500
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b8578147-8eed-323c-ab9d-44c9bfe65dd4.roa
Signing time:             Thu 08 Jul 2021 16:58:24 +0000
ROA not before:           Thu 08 Jul 2021 16:58:24 +0000
ROA not after:            Thu 15 Dec 2022 05:00:00 +0000
asID:                     203724
IP address blocks:        161.69.12.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:57:9e:fa:aa:7b:30:30:26:1c:bd:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Jul  8 16:58:24 2021 GMT
            Not After : Dec 15 05:00:00 2022 GMT
        Subject: CN=10f00a5b-9767-420c-94cf-edf0988d3934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:7c:dd:e6:3c:40:9d:5c:65:19:a5:cc:8f:
                    ab:d4:c5:19:80:07:e7:11:9e:d5:f8:07:7e:80:b9:
                    31:cd:72:70:a7:77:44:14:f8:f5:b2:bb:b4:42:ff:
                    c2:3f:e1:ca:da:bd:61:4d:6e:db:c8:c4:b5:90:2a:
                    44:7b:e4:5e:76:1a:53:55:c7:32:e2:53:9d:d4:db:
                    d1:3b:33:30:38:d2:47:ea:07:87:e9:d2:d5:5f:d4:
                    ce:3a:b5:c4:96:9a:e3:8a:32:e1:d6:b7:01:e9:74:
                    7f:70:06:ee:99:85:35:9c:34:b8:75:29:23:01:ad:
                    b7:a8:00:dd:93:78:a1:76:63:18:bc:85:c5:c3:aa:
                    e7:ef:06:82:5d:7b:15:4c:bb:22:81:e3:3c:3e:23:
                    6a:cf:20:14:3f:85:2f:18:0c:f0:67:6b:83:64:01:
                    85:ad:6c:b3:ca:36:57:63:1d:f7:5a:81:bf:9a:2b:
                    24:18:35:8b:2c:c2:97:60:b5:45:4a:ba:33:38:1f:
                    6a:88:67:8b:2d:c8:1a:57:46:01:ff:bc:46:c4:36:
                    b6:b1:06:48:c5:de:c7:db:26:64:c9:90:a4:55:a4:
                    1f:bd:e2:f1:94:30:a9:0c:53:24:e8:92:b8:c2:31:
                    21:4d:69:0c:9e:34:a5:a2:41:1c:e9:10:60:d6:91:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F5:D0:B1:72:9B:C3:BC:76:83:1B:39:30:D8:57:37:71:9E:CD:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/b8578147-8eed-323c-ab9d-44c9bfe65dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:fd:6a:5e:19:b2:83:16:be:6d:b9:1b:62:66:2c:4b:41:6b:
         2d:30:d7:18:0c:16:7c:a2:26:3c:33:08:71:56:70:74:88:a9:
         23:ab:f8:3a:84:f4:dc:f1:bb:a3:81:56:fd:44:bc:a5:7c:c2:
         a0:38:9e:43:f3:40:f8:9c:ed:fd:74:9c:97:5f:a5:36:62:c7:
         9a:03:38:3d:7c:cc:02:bc:cd:d5:0c:51:d8:25:88:69:7b:b8:
         b4:ec:7b:86:35:72:93:9c:a0:95:fc:9f:5c:a9:1e:89:93:40:
         ea:24:6e:d9:ff:e9:1d:2c:46:ee:a6:7f:5f:d9:e9:b6:db:57:
         96:10:80:0b:ad:df:7f:05:c8:be:54:f1:05:8f:54:e1:e2:0e:
         9c:7d:fb:30:0c:84:f7:a6:ce:be:0e:ba:61:e1:3f:30:5f:33:
         ae:b3:fc:2f:26:9c:9b:3f:66:92:68:55:94:27:c0:35:80:08:
         85:0c:35:50:fa:32:cc:e8:d4:21:47:c8:be:ce:30:12:a7:d0:
         ca:87:15:70:f0:7e:f7:50:89:5c:bb:73:d4:fd:f0:b7:08:cf:
         ae:80:c0:f2:1a:89:c3:4f:f8:4a:9a:57:46:61:e6:0a:a0:3c:
         b3:3c:f6:ef:a7:73:12:d4:65:0a:c9:71:7d:e5:72:33:8d:0e:
         24:2f:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----