Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/74321a51-736c-3171-a2f7-6a2db7341d0c.roa
File:                     74321a51-736c-3171-a2f7-6a2db7341d0c.roa (raw, json)
Hash identifier:          9CkuxiGhDUARQVubvmZhEawhwmkNv+QelFH41oAaz4g=
Subject key identifier:   2B:1C:9D:96:AD:7A:B0:8B:56:C1:80:74:8E:79:8E:87:60:5C:CB:AD
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583AB94B2D8F8EA65846A4FB9380
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/74321a51-736c-3171-a2f7-6a2db7341d0c.roa
Signing time:             Tue 27 Jul 2021 04:00:00 +0000
ROA not before:           Tue 27 Jul 2021 04:00:00 +0000
ROA not after:            Wed 27 Jul 2022 04:00:00 +0000
asID:                     36692
IP address blocks:        204.194.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:b9:4b:2d:8f:8e:a6:58:46:a4:fb:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 27 04:00:00 2021 GMT
            Not After : Jul 27 04:00:00 2022 GMT
        Subject: CN=9209b539-6ead-4a18-a78e-7acc9a7fc979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:36:51:07:54:7b:14:09:15:ed:40:02:62:5f:
                    5c:3c:bb:93:ef:dd:c2:a5:35:df:04:e2:7d:30:0f:
                    6d:c8:96:bb:02:0c:af:e7:ed:46:cd:ed:c0:66:19:
                    e0:cf:9f:2d:60:2e:a7:66:5f:37:69:e7:be:59:a6:
                    a6:a9:24:18:ae:27:86:d5:07:c6:cd:6d:95:7e:bc:
                    77:90:f8:a5:e6:0b:7e:0c:f6:3c:63:a2:7b:9d:b8:
                    7b:1f:a7:4c:03:a4:4d:b3:9c:98:16:90:63:b2:d1:
                    76:da:d7:44:a7:45:ab:d0:1c:9e:af:2a:12:db:9d:
                    ce:b6:0f:54:c3:81:d0:14:c9:a6:11:d0:9c:f2:d6:
                    fb:e1:b8:1a:37:29:de:5b:d7:ad:6a:e3:90:70:f9:
                    68:e0:83:3a:0a:ae:2d:56:67:e2:0f:a5:31:3c:a4:
                    53:ff:1e:89:2b:46:d1:57:45:83:36:9a:d1:6a:25:
                    bb:15:ed:db:85:6a:e0:02:63:55:69:3b:5c:0a:67:
                    b9:1a:09:ed:6b:ad:75:f2:3e:3b:c3:f9:8e:f4:fc:
                    89:dd:4a:44:5b:14:f5:2a:b1:8c:9e:1c:ff:e4:ff:
                    75:2b:c9:d4:d8:71:54:18:71:15:52:b8:9d:d4:63:
                    f9:9b:78:a4:15:c4:cf:83:d8:f0:d0:7c:e6:67:b9:
                    4a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1C:9D:96:AD:7A:B0:8B:56:C1:80:74:8E:79:8E:87:60:5C:CB:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/74321a51-736c-3171-a2f7-6a2db7341d0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:24:62:e0:36:e5:c0:1a:da:35:30:fb:54:61:da:da:f5:cb:
         6e:49:f4:7f:64:02:0e:05:33:6f:4b:f3:93:89:7d:ce:49:ae:
         16:e4:b5:c1:40:5f:2b:f5:ef:ea:a8:5a:ab:ff:b4:a6:76:10:
         69:84:c1:79:f8:ea:79:ce:7f:86:14:d3:17:27:64:ae:9d:fe:
         32:76:08:a1:a4:ab:fd:d5:7d:66:01:1f:ba:74:6f:c5:5b:60:
         5c:43:73:76:fa:82:58:fc:6d:bd:70:e0:00:a4:92:79:8b:a4:
         0e:67:5c:23:3b:e0:48:75:7f:d1:3b:1a:49:91:e3:73:5e:ad:
         82:e9:e0:2b:9a:ba:f2:f9:e7:00:b7:64:ca:23:7e:38:c7:06:
         2f:c9:05:d0:f0:44:a1:c6:5c:01:57:74:2f:81:8e:ac:e3:d8:
         dd:e7:63:15:93:c4:72:1d:7a:d4:fc:5b:ca:5b:09:65:16:9a:
         de:75:b9:5f:66:37:7e:8a:90:24:b9:3c:13:d1:ee:3f:ae:bd:
         60:48:0b:f6:87:65:9a:fb:9a:f8:a3:d6:c4:66:6b:8a:fe:7e:
         4a:89:cf:e2:3e:de:71:e6:12:2a:fe:6e:7d:16:c5:8c:87:00:
         6b:aa:69:9e:3f:91:29:07:81:fd:c9:74:72:7b:7f:fc:44:f1:
         c9:16:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----