Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/3ed12005-43c8-3ac7-8bae-85bdd2f26e18.roa
File:                     3ed12005-43c8-3ac7-8bae-85bdd2f26e18.roa (raw, json)
Hash identifier:          rH4eOjcgOY5ALqdd2Ii6JmAY2vMywwrer7qEh55sEkw=
Subject key identifier:   AB:33:39:AE:3C:B6:88:06:1E:4D:50:F1:96:71:9E:84:3C:36:55:93
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328583E9BA20E2249D02112EF6B8D40
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/3ed12005-43c8-3ac7-8bae-85bdd2f26e18.roa
Signing time:             Sun 17 Jul 2022 12:00:00 +0000
ROA not before:           Sun 17 Jul 2022 12:00:00 +0000
ROA not after:            Fri 29 Jul 2022 04:00:00 +0000
asID:                     209242
IP address blocks:        71.18.254.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9b:a2:0e:22:49:d0:21:12:ef:6b:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Jul 17 12:00:00 2022 GMT
            Not After : Jul 29 04:00:00 2022 GMT
        Subject: CN=c63815ef-5491-4b88-ad8b-ff7fdde99117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a5:99:0b:26:47:0a:34:a4:01:d9:73:ec:ac:
                    9f:c3:f9:3c:6e:4b:0d:e0:b1:d9:3a:ba:36:b3:32:
                    06:68:3f:61:a4:95:b0:a9:5d:47:da:8b:2f:d7:a8:
                    8f:77:cf:95:ba:7c:58:78:14:20:bb:d7:08:b2:90:
                    28:58:81:f9:2b:ae:58:d6:13:0e:b3:bd:28:e8:c5:
                    67:be:65:13:5c:09:8c:27:ae:cf:d0:b1:85:90:64:
                    06:0a:19:03:af:51:65:fd:18:53:11:2c:55:63:19:
                    ff:c0:be:73:f0:d8:25:50:86:da:b9:62:3b:f1:6b:
                    42:fe:c5:91:c2:2a:a1:c9:77:58:e4:96:23:8a:dd:
                    7a:42:60:7a:95:4d:7e:65:7a:b1:bd:4b:a8:01:70:
                    c4:92:5b:fb:8b:16:1e:22:3e:b6:17:97:37:8c:88:
                    2d:46:a8:7f:1f:98:c5:17:ca:e9:86:d7:84:5b:a9:
                    35:20:0e:c2:1d:fe:05:73:94:45:39:db:04:dc:86:
                    0f:12:a0:c0:50:4f:75:0f:e8:7d:c3:34:80:a5:9d:
                    78:f9:7c:c3:00:9a:4c:06:c2:eb:63:a4:b9:c4:38:
                    75:1f:2a:05:15:0b:7b:f4:7d:54:60:92:43:da:c2:
                    4d:ff:51:4d:a1:43:16:a5:b1:7f:be:f9:50:c8:b4:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:33:39:AE:3C:B6:88:06:1E:4D:50:F1:96:71:9E:84:3C:36:55:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/3ed12005-43c8-3ac7-8bae-85bdd2f26e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:35:c1:3e:2b:61:42:29:d9:66:3b:10:28:64:27:20:2c:f9:
         2b:a8:94:03:07:35:dc:e3:53:99:c0:a2:b1:46:70:98:33:d4:
         1c:47:dc:9b:22:22:9a:44:c7:e0:91:b6:89:0e:63:e6:42:1a:
         88:7b:4f:6c:59:0b:e0:75:9e:65:ae:f2:11:8b:21:25:d4:37:
         be:37:ff:7f:4b:ae:a1:db:b5:af:11:63:33:00:e8:89:22:97:
         4f:a5:bc:f3:77:cb:a5:5f:a6:0c:5f:fb:cc:a4:91:b5:cc:6f:
         4c:92:c1:08:c9:82:ec:b6:f3:7f:5d:88:ee:54:9c:e3:76:60:
         6b:d9:ec:55:3c:59:3b:67:f9:f4:bd:eb:61:8e:0f:79:41:6a:
         c6:38:72:b9:04:9c:e4:a3:da:2a:a8:95:1c:28:4d:47:67:f8:
         45:04:a4:02:4b:64:37:ab:f4:59:90:e4:e4:5f:7b:91:c0:90:
         aa:14:f2:90:e5:72:e9:79:df:41:dc:d0:ec:63:07:83:7f:2d:
         2c:c8:71:b4:a1:c2:f1:c3:95:4c:a1:1d:e0:49:ce:82:a0:5a:
         f5:ef:b9:70:d9:13:d2:80:ff:ff:d5:2f:ed:e1:13:49:2e:dd:
         c1:cf:bb:16:a8:54:8c:1b:45:61:fa:1c:93:ce:e1:23:3b:23:
         97:d2:82:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----