Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8f1f116-50a4-3ab1-a26e-0e635aaf4876.roa
File:                     c8f1f116-50a4-3ab1-a26e-0e635aaf4876.roa (raw, json)
Hash identifier:          hyNF01Z3HL645a/E8QkpLWzHRuvZ4+dr18Rih/ZFG2M=
Subject key identifier:   E0:E0:62:89:9E:CE:31:79:A9:0C:B1:4D:28:6F:C0:63:00:6C:0F:D5
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583AA7B01FA91F84E47300EA7920
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8f1f116-50a4-3ab1-a26e-0e635aaf4876.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        142.250.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b0:1f:a9:1f:84:e4:73:00:ea:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=b6e9e5a1-a322-4aa6-af57-af37895889e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:18:26:c4:2d:53:3a:8f:11:04:ac:98:6e:
                    63:fb:44:c6:4f:78:94:d5:29:41:2f:01:38:45:78:
                    27:91:15:f5:2a:e7:f7:61:d6:ec:27:07:63:79:1f:
                    16:5a:1f:46:59:a6:d8:69:2e:dd:bc:a6:bb:2e:cf:
                    87:e3:c5:29:0b:b3:15:b8:89:2c:92:74:06:b8:6c:
                    6e:0a:28:e1:8c:c1:a5:88:2c:3d:af:02:4e:23:bd:
                    3c:8d:9a:05:35:02:f1:a9:57:95:79:4e:7c:d0:da:
                    9e:6b:0b:83:25:10:29:89:1a:4f:e6:d4:3c:41:db:
                    59:37:43:2e:13:d5:cf:43:8f:bb:aa:31:6c:44:b3:
                    c0:6a:8b:68:bb:65:d9:90:5e:4b:b7:59:12:4a:cf:
                    e7:7c:83:26:c9:7e:28:d1:b5:5d:28:36:bf:b8:f1:
                    f3:c7:74:b3:4b:0b:60:1a:19:60:e4:a0:88:73:b7:
                    16:8f:6f:94:d4:fa:50:6b:1c:cf:5c:37:91:95:21:
                    aa:9b:d1:7d:cb:12:71:24:21:2c:10:00:14:84:d4:
                    00:4d:1e:23:50:3f:7d:76:05:04:4d:43:60:1c:a8:
                    72:f6:18:5e:97:52:85:6a:93:35:be:5c:d0:04:f3:
                    ec:49:55:ce:18:b0:a4:de:39:21:42:f8:76:92:47:
                    bc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E0:62:89:9E:CE:31:79:A9:0C:B1:4D:28:6F:C0:63:00:6C:0F:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c8f1f116-50a4-3ab1-a26e-0e635aaf4876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:e5:dc:bb:6a:92:a9:62:bb:0e:8b:de:18:2d:84:10:cc:f3:
         f7:da:04:08:05:2c:f8:a6:0e:88:7c:9c:82:ac:08:77:dc:b5:
         ef:44:76:57:4d:17:02:0f:7c:d3:fb:57:94:07:7b:01:26:e9:
         af:86:1d:de:17:bb:2c:26:55:cc:2a:f0:e0:08:bf:0d:54:bd:
         5d:64:8a:6a:27:0f:89:2b:69:71:b9:4c:be:e1:27:65:9a:42:
         ff:ae:7f:ac:75:ac:f5:9c:2a:b3:83:a1:9e:96:ae:0f:eb:05:
         75:9c:42:46:8e:bc:f8:cd:b7:68:72:b4:dd:23:f0:4a:09:7a:
         99:5c:a0:16:31:8e:3c:be:4b:e9:45:8d:55:19:c7:13:a6:41:
         10:1f:ea:a3:65:bf:0b:42:ab:9e:9f:c0:31:9e:bd:4d:8c:54:
         40:f0:7e:e6:ff:42:c5:3d:6d:aa:0a:09:82:6a:8e:2b:c6:1b:
         c1:f6:79:fb:ba:8a:27:fe:08:ae:42:45:50:0c:6a:28:86:f5:
         a4:f0:25:fc:63:3e:ae:63:19:f3:b6:9b:f4:3b:9e:76:33:e1:
         47:cc:eb:f6:16:5b:56:98:de:98:cb:13:ff:c2:03:ce:e3:10:
         76:df:08:f7:6a:7b:3c:48:70:0a:ea:d1:36:69:7a:c1:72:c3:
         99:95:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----