Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/69e4343f-fc54-3959-a6be-f5c3a51d5599.roa
File:                     69e4343f-fc54-3959-a6be-f5c3a51d5599.roa (raw, json)
Hash identifier:          zSnWjfF1CzY4aeV2zctzmtOrJ4RFSpYbzbWKCa/zkG4=
Subject key identifier:   44:75:45:B5:C2:DB:EC:1D:CE:55:54:9D:7D:33:16:66:23:C5:40:01
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583A10C2C7E2192E69C2CEBBCF80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/69e4343f-fc54-3959-a6be-f5c3a51d5599.roa
Signing time:             Wed 26 May 2021 04:00:00 +0000
ROA not before:           Wed 26 May 2021 04:00:00 +0000
ROA not after:            Wed 30 Aug 2023 04:00:00 +0000
asID:                     55293
IP address blocks:        190.92.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:10:c2:c7:e2:19:2e:69:c2:ce:bb:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: May 26 04:00:00 2021 GMT
            Not After : Aug 30 04:00:00 2023 GMT
        Subject: CN=7329e086-ae08-48d2-8f55-532823db9fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d4:9f:d0:5e:79:82:e1:ae:64:64:a7:f0:ed:
                    c3:b5:fc:c6:32:9d:e5:58:ad:26:05:82:84:3d:da:
                    78:fa:e1:ac:e0:b6:5e:b1:95:90:65:98:07:92:65:
                    49:a2:c0:4e:fe:92:74:f2:fe:49:32:f9:fc:92:76:
                    b2:00:3c:11:19:e5:b2:4f:64:1a:2c:e8:21:d0:86:
                    9a:be:7e:4c:d9:bc:1c:72:c6:1e:ea:60:ec:1c:fe:
                    c6:93:ba:b6:07:3d:12:b5:26:e9:a1:35:4a:45:79:
                    8c:28:12:4a:32:89:e1:25:3a:82:9b:5b:eb:22:42:
                    03:e0:77:ad:07:86:fc:06:fe:3a:c4:c6:e8:ca:83:
                    17:a1:9f:75:9c:22:90:8c:53:0e:2f:fb:fa:be:fd:
                    c6:54:76:70:3b:c8:c8:f8:a3:9b:6f:fe:a8:ed:f2:
                    dd:35:10:f5:e9:1c:91:34:8f:a2:02:26:66:83:de:
                    80:77:13:e8:2f:c9:3e:46:cd:f6:b9:5c:60:7f:dc:
                    a1:72:cb:e7:6a:e8:df:f7:b9:ef:2c:3d:84:29:ac:
                    64:a8:e5:74:5e:19:90:2b:9a:32:87:75:22:84:67:
                    8c:44:70:60:4e:4f:aa:58:aa:44:ab:69:dd:39:00:
                    a0:0b:3a:02:2e:2b:51:4b:61:b2:fc:0d:fd:c2:46:
                    81:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:75:45:B5:C2:DB:EC:1D:CE:55:54:9D:7D:33:16:66:23:C5:40:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/69e4343f-fc54-3959-a6be-f5c3a51d5599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:85:04:3a:5c:48:94:dd:60:d9:f4:16:fc:5d:b9:27:7b:11:
         10:43:15:7b:37:df:fa:de:89:68:dc:14:86:0c:ec:25:53:2c:
         5d:b8:7d:61:16:f0:77:7b:c2:d9:86:62:f7:c0:2f:0e:b6:1e:
         c5:34:95:34:6a:11:b9:fa:97:f5:a7:7a:ec:d0:9e:b4:25:71:
         18:72:95:4f:fc:04:8a:10:9c:cb:40:c6:af:ab:dc:58:fc:07:
         af:c2:31:40:ab:ab:df:d5:7b:2a:1c:a2:e8:9f:7e:8d:03:c3:
         db:bd:d2:5f:98:72:06:12:d2:2f:bb:52:53:ae:0d:ba:af:bc:
         c9:d7:9d:2e:84:5e:cd:99:00:70:4b:5a:75:74:75:36:f5:4a:
         96:3e:2a:2f:46:b9:23:c9:c2:b6:c5:ae:fc:94:ef:ca:7e:f6:
         fa:66:fc:c2:b8:d2:33:f0:c1:9b:ad:59:a2:d0:6d:85:13:f8:
         79:ab:3f:68:8d:43:de:4d:18:a6:c6:44:f1:1f:89:0e:b9:46:
         2f:95:0d:55:a6:d8:50:f0:43:25:7e:10:1c:77:a1:68:0a:4c:
         53:44:19:ea:a0:f0:f0:c2:ee:03:95:3d:e5:c2:ee:24:ca:7b:
         28:f4:c6:d5:c4:83:89:21:1f:6c:a7:4b:34:f2:d0:1c:02:60:
         2b:81:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----