Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7083b0c4-dcda-3e08-9c55-60e4acbd01fc.roa
File:                     7083b0c4-dcda-3e08-9c55-60e4acbd01fc.roa (raw, json)
Hash identifier:          5/sIngDdbatIRjfURVSxDas54TvNOFZKcXd1yQLGyXQ=
Subject key identifier:   92:8D:B8:CB:63:DE:97:B8:58:FA:33:84:59:FC:8D:DB:0B:EF:B3:60
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583A10CA799F4D57E3044F63DDC0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7083b0c4-dcda-3e08-9c55-60e4acbd01fc.roa
Signing time:             Wed 26 May 2021 04:00:00 +0000
ROA not before:           Wed 26 May 2021 04:00:00 +0000
ROA not after:            Wed 30 Aug 2023 04:00:00 +0000
asID:                     55293
IP address blocks:        198.100.44.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:10:ca:79:9f:4d:57:e3:04:4f:63:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: May 26 04:00:00 2021 GMT
            Not After : Aug 30 04:00:00 2023 GMT
        Subject: CN=0f320a98-8d10-4151-86e8-2ba331b95541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:a5:7a:c0:9f:e8:b5:46:46:a1:b2:9e:3e:
                    9d:d9:12:be:57:b4:32:66:eb:f6:3b:83:c0:6a:8c:
                    a4:ee:b7:a3:78:d1:b4:40:ef:76:18:f7:3a:a6:55:
                    a3:91:ca:29:3a:aa:e3:fa:0a:e3:95:2a:3f:bf:2f:
                    6e:e5:b9:c4:cf:37:97:5c:4f:a9:f0:ad:5e:f1:e1:
                    87:4f:2c:ce:d8:8e:b0:a2:03:61:ca:a9:72:2e:fd:
                    2b:31:bb:ce:06:11:e7:d8:1c:45:bd:74:0b:c1:ee:
                    ad:78:2d:46:4c:0c:52:e9:2b:b2:d1:8b:96:5b:31:
                    19:c0:24:1e:73:5c:f2:ac:a5:4c:6e:09:a5:69:37:
                    df:68:23:17:f7:57:03:a1:4e:f3:d1:54:1e:16:61:
                    90:a9:d3:bc:08:aa:dd:fc:bf:36:e1:1c:10:f9:fc:
                    a9:ce:22:4c:df:ed:dd:78:17:f1:b1:91:8b:f1:05:
                    8d:49:a9:9a:44:b5:da:6a:62:3a:b2:84:10:34:dd:
                    ea:af:6b:f2:c3:57:f3:0b:c6:f6:4c:ed:cb:e1:d5:
                    7a:0a:9f:95:47:72:22:ac:42:2d:cd:d4:87:19:fb:
                    dd:26:8b:30:86:2c:d8:a3:43:66:bb:c9:5f:44:7f:
                    5a:9e:c2:71:0d:e0:7a:83:f0:ae:5c:92:31:4e:c3:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8D:B8:CB:63:DE:97:B8:58:FA:33:84:59:FC:8D:DB:0B:EF:B3:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/7083b0c4-dcda-3e08-9c55-60e4acbd01fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.100.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:24:13:fd:b5:20:b8:ae:3e:60:2f:3a:83:bc:1b:a1:61:73:
         d8:10:6a:91:e7:12:3e:c5:e2:fb:fc:74:59:d4:3b:2f:b2:6d:
         bf:61:69:10:ff:08:2a:88:af:34:78:8e:e1:f0:5f:72:f2:69:
         b5:97:a1:67:bb:5a:aa:5c:53:76:1f:03:f3:75:86:6b:c3:88:
         04:dd:ad:51:5b:9a:62:8d:7b:ea:9e:8f:c7:d1:d5:2c:12:4e:
         c6:a9:82:47:df:89:15:2c:19:11:cc:f6:98:5f:f6:50:a8:ee:
         8e:23:6a:04:3b:50:43:72:85:aa:5b:34:ca:5b:a6:74:1d:8c:
         0f:38:5a:7a:68:26:aa:1b:40:45:67:43:f8:3a:35:f7:17:b6:
         d6:5e:6a:3b:4f:79:9a:d9:86:d8:02:b4:50:96:b1:ba:53:c9:
         54:44:dc:3b:45:79:8f:07:5b:1f:eb:db:96:1e:54:95:de:af:
         f4:d5:bb:69:4b:90:9b:94:56:aa:74:e2:02:6a:47:b8:c1:8d:
         2f:c4:7e:68:9e:9a:f5:49:b3:46:33:32:b1:5c:76:cd:35:cb:
         bf:15:fa:40:c3:97:c0:9d:90:e9:72:fb:51:b6:97:c1:22:c2:
         c8:d4:fc:20:67:d5:bd:5c:e8:1c:d4:4e:39:cd:9d:0c:d3:eb:
         82:bd:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----