Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39c14b71-c0c6-3f37-a241-a16ea56cd659.roa
File:                     39c14b71-c0c6-3f37-a241-a16ea56cd659.roa (raw, json)
Hash identifier:          Fpf+VFg4i73oc6tNp9oIBC00c0hJSc3tGCrFT9Ikj6Y=
Subject key identifier:   B1:74:AF:35:2F:E4:11:0E:9D:C0:08:B3:75:2E:F6:DD:BF:0F:44:9D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7A42D7F3BA2BB90BCB8C700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39c14b71-c0c6-3f37-a241-a16ea56cd659.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        142.251.11.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a4:2d:7f:3b:a2:bb:90:bc:b8:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=7847b031-6090-4d68-99dd-9e9870e6ed87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:80:4b:09:c2:e1:98:43:7c:73:54:95:e7:
                    c3:2d:eb:de:f3:69:00:4e:ae:8c:a3:98:ad:d7:67:
                    e2:fe:42:36:ee:df:b0:3e:66:f9:95:71:79:de:b3:
                    6b:50:a7:bf:42:63:11:fc:b8:44:b0:db:17:df:3d:
                    5e:30:d2:04:78:57:02:79:d6:84:22:38:2e:a1:13:
                    e7:65:33:52:31:99:f2:14:8f:57:ab:54:78:e0:1d:
                    5c:48:66:8d:c7:17:b5:94:1c:22:c8:8f:9f:ee:8c:
                    6a:d5:e7:b0:12:2b:8e:1e:56:62:4d:88:70:82:87:
                    e5:2b:14:86:08:a0:9c:2c:c3:a7:2e:34:3f:9a:8b:
                    88:5b:00:4c:14:d2:ff:55:40:cb:5a:49:1c:cd:4e:
                    2f:1b:c2:ed:25:3a:68:5f:0c:92:53:62:df:92:23:
                    22:d4:e0:a1:24:23:9c:e2:39:78:b4:8a:42:8a:9f:
                    84:49:7a:cf:83:72:86:cc:17:66:7c:3e:8f:9e:ac:
                    07:1a:f4:49:c8:fb:b2:07:23:46:07:ad:ca:a2:12:
                    13:cd:52:ff:ec:fe:6f:34:2b:6d:fa:29:f5:29:4b:
                    83:9f:aa:23:4d:92:50:49:64:fa:0f:ff:8f:8b:b2:
                    bd:82:bf:a8:d6:27:12:8a:54:d8:7f:13:c8:db:93:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:74:AF:35:2F:E4:11:0E:9D:C0:08:B3:75:2E:F6:DD:BF:0F:44:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/39c14b71-c0c6-3f37-a241-a16ea56cd659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ce:84:40:ae:c9:a2:81:f5:17:8f:71:48:e3:07:79:67:8b:
         a3:d1:fb:f0:61:d3:76:af:40:1a:b2:41:20:1d:83:c9:6d:b0:
         dd:2e:39:9a:4d:40:1d:3f:51:be:98:4a:1f:15:10:bf:eb:6e:
         49:57:54:06:66:44:0a:cc:59:a1:86:c0:a5:2d:c8:61:dd:0c:
         e5:3c:ae:17:69:26:53:e0:92:06:23:e7:39:f1:92:45:73:1a:
         c7:b3:74:0d:c2:06:2f:a6:9e:3c:47:a1:d7:2a:84:4a:ab:f6:
         dc:66:6d:3f:35:99:c9:82:24:bd:c7:c7:4e:eb:40:c7:bd:dd:
         fd:b9:83:dd:8d:12:d5:a3:ef:8a:d6:93:15:3b:b3:b3:ad:8b:
         e9:e4:6e:b4:ef:4f:f3:67:73:de:72:3b:cf:54:fc:23:dc:9f:
         2b:64:de:04:53:24:cc:92:9b:7b:55:33:99:53:9a:ba:77:2c:
         e2:d7:01:29:24:6f:87:70:b7:15:d0:96:15:af:ef:56:0e:e5:
         9a:7e:44:e2:e5:35:9c:0a:44:0d:74:45:9c:88:46:8f:a7:75:
         ce:46:b0:cf:87:a4:a5:7a:c3:58:dc:10:bd:15:d9:a9:82:5c:
         f6:2d:9c:dd:30:83:dd:70:4c:7a:1d:7d:f0:3e:c4:3f:d6:fc:
         09:fe:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----