Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d314137-c657-3e8d-8c1f-f1fb4377b117.roa
File:                     8d314137-c657-3e8d-8c1f-f1fb4377b117.roa (raw, json)
Hash identifier:          8KnKAjDQ9VNV6AbZzZhEXfwtOpNo6EsmuEC2BFhNqg4=
Subject key identifier:   59:BD:3A:C9:6B:DE:2C:64:7D:65:EE:C1:97:E5:6F:3E:8B:33:3F:1C
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7B7A3CF6E861620ABC889C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d314137-c657-3e8d-8c1f-f1fb4377b117.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        142.250.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b7:a3:cf:6e:86:16:20:ab:c8:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=70092da3-0139-4d3b-9b0b-9eb681c17a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:f3:ae:b2:93:8c:66:38:ae:f4:f4:8b:00:
                    4e:31:31:3d:c8:e1:44:95:0a:10:ea:aa:3f:4e:fb:
                    4f:9c:54:5f:90:5c:c7:a8:ad:a6:fe:ea:a9:d0:5b:
                    ff:c5:20:6a:1c:17:62:ee:f0:5d:53:57:2e:30:62:
                    90:ed:34:8d:82:d0:35:99:d9:ac:18:e2:b2:bb:80:
                    5d:b3:77:3a:82:89:64:5d:56:4b:6d:78:1a:18:f9:
                    fb:ab:13:65:14:72:00:98:07:ca:cf:a3:53:d4:1e:
                    ef:fd:d9:bc:04:26:94:20:84:d2:62:5e:5f:ee:42:
                    c3:82:d3:bb:07:01:11:f3:31:f8:a8:fb:78:bd:73:
                    f1:23:47:a7:89:40:7f:1a:2b:a7:40:57:fc:f6:a8:
                    99:90:49:d4:dc:52:b3:ee:3f:b5:24:92:5e:43:06:
                    07:ea:a5:50:d4:a2:80:84:78:1e:ea:e0:4c:dd:99:
                    14:62:2e:51:2b:ec:e9:60:ea:e8:07:57:cd:73:78:
                    4e:10:2c:f8:c0:47:f8:8e:46:7e:06:8c:79:d3:13:
                    18:07:f5:8e:0d:f8:90:ee:4e:40:4c:86:bc:a5:55:
                    71:a3:d5:95:c3:d4:a6:36:fc:8c:ed:c8:ac:f3:4c:
                    7f:cf:7c:7a:9d:69:aa:1c:06:e4:f7:58:94:bb:67:
                    93:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BD:3A:C9:6B:DE:2C:64:7D:65:EE:C1:97:E5:6F:3E:8B:33:3F:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8d314137-c657-3e8d-8c1f-f1fb4377b117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:cd:0a:f3:6f:49:bb:4a:ea:1c:9a:f2:ef:bc:85:af:38:bf:
         48:3d:13:d4:4b:99:a8:ca:c8:db:53:bd:89:b7:71:65:59:1b:
         fd:3a:e4:8a:ac:36:df:bf:6f:30:61:aa:2a:c9:f2:84:41:1d:
         4c:71:98:3f:09:07:52:e6:23:dd:ad:ad:24:e5:52:d2:25:cb:
         ea:cf:f9:64:b0:3b:fa:13:cd:15:95:f0:8f:39:45:be:f4:03:
         67:24:fe:c3:39:8f:6f:c6:56:aa:9f:bd:b9:62:6e:25:9b:1a:
         0f:5b:6f:7d:14:0d:bb:c9:92:9c:e7:d0:b2:0a:fe:95:b9:ca:
         13:58:7b:e3:e5:45:08:b4:60:88:e5:5d:94:72:86:37:00:3f:
         7c:06:5b:43:93:f2:1c:17:e6:54:10:10:25:d7:9c:23:a8:ed:
         f5:35:8d:66:17:bf:ca:e7:c3:2d:bf:d0:0b:88:15:79:bc:ec:
         94:d4:04:0f:d8:ba:19:09:09:f0:c6:7d:8c:d7:b7:2e:37:76:
         7d:69:3a:68:f2:47:1b:33:ae:dd:3f:18:72:ad:52:bc:af:76:
         00:f0:3c:1e:6c:d5:22:86:10:de:82:f3:35:0e:c8:95:2f:3e:
         42:22:52:65:4d:a5:1e:9f:20:cc:33:c2:d3:08:af:29:b4:10:
         74:b3:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----