Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d2301b66-933b-3633-92f7-f9932a1f0286.roa
File:                     d2301b66-933b-3633-92f7-f9932a1f0286.roa (raw, json)
Hash identifier:          PPUUhkHvuTzRlP8NwCS9Mi+MMX1N9yDRY9PKMkc2NXM=
Subject key identifier:   B5:B4:A9:BB:DC:D7:52:0E:FA:15:68:E1:2D:C3:43:C3:86:AC:E5:0B
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F4328583D0D0F63DFAB296A09D83E2A80
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d2301b66-933b-3633-92f7-f9932a1f0286.roa
Signing time:             Fri 25 Feb 2022 05:00:00 +0000
ROA not before:           Fri 25 Feb 2022 05:00:00 +0000
ROA not after:            Wed 14 Dec 2022 05:00:00 +0000
asID:                     203724
IP address blocks:        161.69.110.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:0d:0f:63:df:ab:29:6a:09:d8:3e:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Feb 25 05:00:00 2022 GMT
            Not After : Dec 14 05:00:00 2022 GMT
        Subject: CN=5bfef40f-c445-41df-894c-0f97003d5df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:bb:b0:f5:65:14:28:85:d8:e3:2e:7d:d9:
                    11:13:d0:5c:74:4f:82:81:b3:ad:ae:c4:2b:92:af:
                    e2:5f:a5:b7:82:b9:50:0f:5f:46:a1:e1:42:74:31:
                    14:49:0b:22:80:4a:d2:ba:4e:a6:f6:f0:91:f6:16:
                    d9:2c:a6:fd:50:4b:01:1d:1b:c4:29:a2:5e:44:81:
                    37:05:12:90:4f:60:67:83:ec:f8:84:8f:46:63:e1:
                    70:75:0b:43:b8:5b:98:c1:62:e8:07:62:2b:53:a2:
                    c2:67:05:46:d0:26:e3:6d:6c:45:4e:70:26:32:28:
                    0e:54:96:a3:31:53:c5:98:27:a7:6e:23:0b:e0:0e:
                    9c:5e:3d:69:92:38:8f:ed:c2:d6:fb:dd:a8:3b:ef:
                    ef:5e:52:65:ea:98:a9:90:1f:ef:3d:57:20:1e:26:
                    21:1e:ca:29:08:b2:9c:2f:01:13:15:ba:be:0d:74:
                    bb:4e:d1:cc:58:35:37:2c:99:f2:48:08:dc:de:69:
                    4c:1b:6f:c4:36:1a:9e:8f:be:e5:b4:7a:c3:0d:33:
                    03:e6:a2:b0:75:62:47:df:b0:13:fa:ac:e2:f5:3a:
                    36:70:11:62:09:cb:61:1b:d2:d4:84:b7:15:e9:52:
                    bd:09:85:e5:85:38:a9:04:b8:16:51:7f:eb:2f:1f:
                    9b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B4:A9:BB:DC:D7:52:0E:FA:15:68:E1:2D:C3:43:C3:86:AC:E5:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/d2301b66-933b-3633-92f7-f9932a1f0286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:93:af:63:39:8b:61:78:d8:c4:a5:01:4c:a2:3e:4d:94:d0:
         ca:6e:2b:76:fe:6e:11:b4:ed:06:69:69:3e:39:8c:0c:02:9f:
         10:30:13:85:2f:18:b3:f7:c7:6d:3f:a9:93:b0:b1:7d:de:6f:
         21:74:8d:11:29:3a:bb:2a:65:3e:fb:62:9e:80:01:ef:49:58:
         eb:64:3e:b2:c2:7a:5d:c7:f7:2a:a9:ac:37:2b:91:2b:bb:30:
         9a:4b:11:c6:e2:96:d8:e7:34:bd:2d:01:2c:dd:13:02:92:78:
         a8:5f:2c:5f:1b:a7:ed:fd:9d:b9:0f:ef:a8:03:b2:1c:d8:a6:
         0b:36:b2:a0:11:6e:f6:1e:3a:26:b0:9b:e5:e7:c0:a5:07:e0:
         23:3b:e4:cc:a3:42:0a:30:29:44:03:47:6b:e7:c0:ce:e3:4a:
         68:da:51:b2:23:9d:75:ed:55:66:d0:b0:24:42:49:f2:27:ca:
         48:c7:05:05:5f:e5:6b:b7:96:0d:b1:0a:74:59:03:43:4d:e9:
         46:14:c6:1e:6d:c1:07:fb:04:6f:c1:37:84:c8:37:cd:29:b3:
         7e:96:cd:6c:5a:84:2d:25:8c:4e:ad:b9:27:7a:40:62:f3:65:
         90:58:ba:05:fb:3c:73:37:62:f9:ed:a4:02:7d:1b:3a:5f:22:
         f0:6e:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----