Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a3f23c60-1f8d-3187-ab1b-647acc2c3c5c.roa
File:                     a3f23c60-1f8d-3187-ab1b-647acc2c3c5c.roa (raw, json)
Hash identifier:          Z9N9cG3405zjZBRwW0ESnxpODpnV2DNMDVOCr+CPKoc=
Subject key identifier:   C2:04:E4:3F:AD:48:CD:AD:7C:A5:83:17:0F:5B:95:78:55:90:38:F3
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583A43F513B58CF0BC37585ECA80
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a3f23c60-1f8d-3187-ab1b-647acc2c3c5c.roa
Signing time:             Tue 15 Jun 2021 04:00:00 +0000
ROA not before:           Tue 15 Jun 2021 04:00:00 +0000
ROA not after:            Wed 15 Jun 2022 04:00:00 +0000
asID:                     36692
IP address blocks:        67.215.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:43:f5:13:b5:8c:f0:bc:37:58:5e:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jun 15 04:00:00 2021 GMT
            Not After : Jun 15 04:00:00 2022 GMT
        Subject: CN=80f4b264-fc0d-41fb-9bc1-a29c92be021f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:e9:ef:4d:bf:d5:36:5e:22:ad:f0:71:bd:
                    fe:77:5e:3c:c9:2c:7d:97:41:4b:ee:75:ba:d4:27:
                    a0:a5:f2:c7:c0:b3:f2:3c:e2:00:6d:9b:a5:13:1e:
                    e9:19:1e:d1:63:5f:ae:70:ef:64:ce:17:8b:67:55:
                    45:0f:d4:39:a9:95:84:44:2f:ce:bc:9b:32:03:b2:
                    c5:be:01:fb:6b:a2:34:a7:0f:0c:f3:3c:4f:76:1f:
                    3e:57:a6:1b:a1:37:8f:3b:63:28:3c:cd:22:a8:65:
                    a3:28:73:3a:69:c2:ce:b4:b5:47:e5:c3:6a:e6:8e:
                    e6:8b:56:25:cc:8e:19:ed:e8:05:6d:97:57:ba:c8:
                    68:fb:c6:40:bb:67:cb:14:70:9b:cd:2b:47:0c:92:
                    a8:a4:08:b0:10:c5:9b:3a:f9:90:7c:7c:1e:35:39:
                    53:0c:59:45:8b:50:c2:03:65:d2:29:82:72:a7:a0:
                    5d:75:97:78:4f:7f:ff:c5:bc:16:70:c8:74:94:96:
                    73:8b:91:e8:a5:f9:b6:af:07:08:e7:87:ea:06:3d:
                    94:ca:05:f2:0d:a7:87:72:ab:33:2a:b9:25:1a:a9:
                    33:20:60:d6:b0:7f:02:37:c3:8e:7e:35:83:50:56:
                    74:ff:44:e8:cb:12:d9:99:ef:5b:78:67:0e:bc:fe:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:04:E4:3F:AD:48:CD:AD:7C:A5:83:17:0F:5B:95:78:55:90:38:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/a3f23c60-1f8d-3187-ab1b-647acc2c3c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e8:ba:44:c2:8c:6f:7b:20:82:cc:5b:23:a8:1a:5a:26:c7:
         61:f5:85:47:73:9d:22:ff:c3:ba:5e:d0:c5:ff:39:3e:c6:c3:
         1c:6a:b1:a3:33:6a:e1:d4:cb:53:fe:6f:7b:c5:1e:b9:e0:85:
         fc:3c:56:3d:f2:e4:25:63:07:ad:93:45:2c:25:43:e5:bf:71:
         e4:40:8a:61:f2:5f:10:fe:e6:25:ca:c2:7a:05:5a:77:5c:e8:
         1c:40:55:c2:f2:b7:9d:40:ef:5b:5d:bb:49:65:31:ee:36:86:
         d2:0d:18:18:62:84:38:5b:bd:e8:da:ff:ec:f8:12:0a:0a:7d:
         b3:a7:e8:e8:f3:f4:7a:f6:37:f1:2e:a1:f0:2f:2f:15:12:c1:
         a3:d6:ed:a3:d7:c6:40:52:38:74:f0:10:b9:1b:8f:36:99:ab:
         f4:1b:c7:62:0f:f1:df:20:eb:9e:9c:b6:b8:1a:9d:5b:3d:53:
         27:30:cf:96:32:a2:82:c6:d0:97:55:e2:7d:95:f5:b8:f6:c0:
         f3:a2:ec:1a:c4:4c:05:d0:8e:06:a8:03:b4:6a:15:8c:da:3c:
         13:ae:00:80:25:a7:18:d9:4b:d0:ce:7e:c6:ce:48:d1:7a:cc:
         8f:06:2b:58:4f:2d:5a:79:04:87:65:4f:46:5f:e5:ea:68:d4:
         fb:f9:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----