Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3c40cc4-8d0e-3d10-86ce-1fa215fa163b.roa
File:                     c3c40cc4-8d0e-3d10-86ce-1fa215fa163b.roa (raw, json)
Hash identifier:          n3RZI8EKEbpi5LdtFkNYC4mKwzVFA0j5zlGsb89K76E=
Subject key identifier:   14:06:E1:CD:54:85:3C:9B:87:5F:7C:C0:72:BE:18:86:84:96:E9:E2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7A171953E375B398FD83900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3c40cc4-8d0e-3d10-86ce-1fa215fa163b.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        66.102.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a1:71:95:3e:37:5b:39:8f:d8:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=4efd72d5-cc24-4665-a20f-cf95de3561eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f4:f5:df:bd:4d:ed:a0:1d:b3:94:87:f0:06:
                    e7:a2:46:bf:a9:dd:fc:b5:ad:56:b3:65:40:16:93:
                    cb:65:2e:18:53:83:8e:e2:6d:0b:4f:f2:fe:2a:d0:
                    55:e7:e1:06:97:fd:4a:20:7f:cd:88:7b:1d:8f:a3:
                    b4:5e:43:45:86:1d:82:f6:ad:c1:37:0d:ec:95:28:
                    98:0b:5e:88:1d:44:32:a7:f9:b7:61:18:0a:45:33:
                    26:8f:21:33:35:fb:60:6b:83:a9:d8:51:d8:32:f2:
                    5e:6b:31:9c:29:a5:9e:e3:ba:9b:92:6a:1d:6b:23:
                    99:73:40:26:b1:c8:8a:e2:ef:86:3e:b1:d9:0a:39:
                    cd:ca:36:fc:71:d4:3b:04:ca:ac:4c:af:54:46:c6:
                    6a:1a:57:6c:37:7d:4b:21:64:3d:75:e2:f2:ec:1d:
                    92:85:62:26:7a:0b:ff:ba:26:db:cc:c9:e5:5c:36:
                    1d:ac:73:75:ab:87:f8:0a:8e:e3:3f:64:65:fa:a7:
                    78:5b:ab:cb:4e:95:04:2f:17:85:eb:b7:65:d3:44:
                    45:c5:0f:33:77:29:70:82:cc:2b:56:45:50:04:85:
                    b2:b7:6f:ea:86:1a:b7:01:0a:0c:6b:61:87:a6:51:
                    51:26:a5:1e:dd:5d:6b:02:e7:96:31:4f:05:76:9d:
                    10:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:06:E1:CD:54:85:3C:9B:87:5F:7C:C0:72:BE:18:86:84:96:E9:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c3c40cc4-8d0e-3d10-86ce-1fa215fa163b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c6:f6:02:c1:6d:42:30:e2:c7:6e:b7:17:6c:75:62:55:85:
         8e:56:e2:d5:2f:10:5a:69:04:d4:21:92:d2:4a:ef:89:5f:e4:
         3d:e2:3b:33:94:17:b9:2d:0d:dd:d8:03:9c:96:2e:b2:40:c9:
         62:b5:0e:0f:41:6f:3c:2f:09:e6:80:26:5f:27:06:fe:97:a2:
         4e:36:d1:54:43:79:49:e4:c4:d1:e9:b6:fe:aa:fe:28:60:23:
         0f:d0:cf:72:5e:fc:c3:e7:84:2b:9a:f6:b6:67:77:2a:5c:6a:
         d5:a9:c3:a6:e6:83:9f:7d:9b:33:0a:b8:14:01:97:88:76:69:
         21:a1:48:79:eb:e6:08:d9:12:1c:5f:2d:3c:9a:f0:a3:d1:c3:
         36:64:74:6c:28:bc:f7:4a:56:16:9c:71:cb:78:33:11:a9:a1:
         cb:40:15:3b:b6:1c:2e:e4:65:30:95:9d:3c:79:a6:b1:c3:f5:
         a0:fe:bf:0b:e0:dc:6e:99:01:d1:28:1e:05:39:20:57:a3:43:
         bd:47:0a:f0:fc:e2:d4:ba:d5:99:1a:3d:ea:c9:23:07:aa:72:
         0c:d7:b7:f7:3f:da:b8:fd:d1:45:79:bb:70:8b:fd:53:56:a3:
         e2:3c:93:58:a5:63:55:1f:4e:56:60:1c:7c:07:df:9c:32:c6:
         62:67:75:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----