Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0686b43-9ccc-3a8a-a43d-ca73357e9b31.roa
File:                     b0686b43-9ccc-3a8a-a43d-ca73357e9b31.roa (raw, json)
Hash identifier:          hROBkL06rt08LsMDitXYP85Z/o0sVp1ipHCC8qYMsQE=
Subject key identifier:   B3:A6:1F:41:82:F3:7B:97:A1:93:21:47:DC:4C:29:4F:35:87:A1:DA
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7C2C709A1EE79CB0D0B15C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0686b43-9ccc-3a8a-a43d-ca73357e9b31.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        172.217.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c2:c7:09:a1:ee:79:cb:0d:0b:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=acddc2fc-43eb-4e53-b32b-9c0d03cc0f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:6a:bd:2f:b0:cd:54:68:bf:df:dd:fc:46:
                    da:cc:e5:2c:ce:90:3f:52:cc:19:1a:a7:da:14:5f:
                    bf:c9:f6:31:de:4c:d9:df:f0:67:3c:2d:6c:38:eb:
                    2f:6c:a6:32:5a:e2:2a:e2:98:62:12:f1:ce:c2:bb:
                    07:91:d9:00:d1:4a:5e:b9:8b:24:3c:04:84:0f:95:
                    15:57:ff:ac:0f:ab:c1:9f:39:cb:bf:f9:da:2b:cb:
                    fc:f0:8d:d6:81:4a:79:43:8d:1e:6d:26:a0:5f:a5:
                    ef:1f:7d:8e:9e:03:47:56:4a:47:22:2f:76:6b:b0:
                    c9:a7:f0:fe:d9:45:29:47:f5:14:9a:3a:07:33:d6:
                    72:cf:9d:0f:2f:57:ba:b9:02:5f:51:78:b6:35:06:
                    75:31:0a:39:e9:da:94:94:4f:ba:92:18:7d:30:cc:
                    92:bd:a9:19:63:b0:c7:bd:3f:9e:f1:82:13:4a:e3:
                    1f:72:78:8e:2c:27:30:a6:fe:7a:de:99:55:4d:b1:
                    7f:62:55:df:40:40:dc:ce:6a:33:e2:52:88:39:cf:
                    dc:07:e2:98:55:65:3c:28:ec:d2:aa:14:fa:30:e5:
                    80:87:c6:e5:89:7a:22:cc:74:f8:84:fe:88:5a:e4:
                    b5:d9:1f:c5:93:fd:26:52:53:88:da:24:be:18:5f:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A6:1F:41:82:F3:7B:97:A1:93:21:47:DC:4C:29:4F:35:87:A1:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b0686b43-9ccc-3a8a-a43d-ca73357e9b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3a:34:99:fc:e9:d5:49:aa:54:42:1c:8f:08:d7:ad:ca:68:
         d3:ae:b3:6b:06:03:46:18:37:09:7a:96:b2:85:a4:77:0f:23:
         d4:a8:f7:96:a7:46:fe:c2:f6:17:95:d3:a7:63:a4:77:d0:5e:
         77:6c:ff:42:4f:a2:bd:77:f9:2f:e9:71:31:7c:0b:0c:9b:4f:
         86:95:58:7d:12:2b:08:b6:f1:73:17:ec:ce:09:b0:6e:d3:69:
         a3:5e:72:55:b6:b1:68:82:87:10:ea:a1:2c:48:b4:13:5b:e1:
         41:25:d4:27:ac:8b:c8:96:3e:16:0e:8f:5a:10:8f:0d:ca:9c:
         a5:8a:00:96:97:65:a7:23:b5:65:ef:38:69:cc:22:15:b4:2b:
         63:ae:37:52:d7:a9:a7:6c:fc:93:01:02:62:2c:a5:a8:c7:7b:
         7c:ba:d1:b2:b4:fd:4d:8b:95:cd:5e:89:55:a1:df:ba:d3:d1:
         5b:a3:49:6c:07:85:92:32:4c:16:a4:54:19:6c:6c:36:53:ea:
         8c:bc:45:78:17:ef:83:ce:00:00:27:47:07:2b:80:5d:9d:04:
         a3:bc:b3:85:ef:83:73:83:79:bd:11:65:ca:69:3d:1e:2d:fc:
         a5:29:e0:1f:fd:0a:ca:f5:4a:c2:4f:58:52:1e:fd:55:0c:7b:
         5f:17:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----