Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d3054be-4fe0-3276-9f1e-df347768a062.roa
File:                     7d3054be-4fe0-3276-9f1e-df347768a062.roa (raw, json)
Hash identifier:          /jS9uyQOZgR2B1LeZgQraVmEdZCqEQpKkp+SRTuu/dg=
Subject key identifier:   40:73:4F:29:AC:5D:5E:E5:2E:72:A6:64:B0:5A:9F:A5:A7:6C:3E:45
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583AEEBBA4C2D5FCA2A769495680
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d3054be-4fe0-3276-9f1e-df347768a062.roa
Signing time:             Sun 15 Aug 2021 04:00:00 +0000
ROA not before:           Sun 15 Aug 2021 04:00:00 +0000
ROA not after:            Tue 15 Feb 2022 05:00:00 +0000
asID:                     394708
IP address blocks:        184.105.21.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:ee:bb:a4:c2:d5:fc:a2:a7:69:49:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 15 04:00:00 2021 GMT
            Not After : Feb 15 05:00:00 2022 GMT
        Subject: CN=d856f0fc-968f-452e-939b-ba9ac98f0959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:22:c5:84:fc:e6:85:0f:c6:15:0e:98:26:
                    f5:38:25:a3:1f:1a:c5:67:28:51:0d:02:67:4d:a0:
                    02:b7:bd:77:fb:28:ce:c5:17:70:97:1d:f3:53:cf:
                    54:1c:47:62:c0:bb:44:0e:bc:45:0b:3d:12:e7:12:
                    12:d6:46:1d:9b:4c:c6:38:b9:cd:a0:a6:9e:2f:b0:
                    aa:60:67:68:d6:1c:6d:f8:38:ea:43:eb:86:0c:32:
                    1e:db:67:28:f3:56:77:94:98:a2:5c:31:a1:c7:2a:
                    d8:d7:ff:6f:e1:45:ff:72:d1:e3:16:93:b1:a4:c3:
                    c7:d8:60:ea:88:75:fd:93:f3:48:f3:4e:fe:d1:08:
                    7a:b1:67:a3:f8:af:a0:0c:ff:e5:fd:ca:5c:0b:3e:
                    a2:45:9c:f1:7e:93:10:fa:44:bc:09:fb:6a:01:da:
                    77:c4:91:02:23:b1:68:cc:be:f8:a1:61:98:97:2d:
                    0c:ea:2e:1d:3d:a7:25:fe:fd:5f:80:a5:03:84:61:
                    55:ec:b5:68:06:ab:61:f3:63:bc:25:36:4d:54:c2:
                    5f:ef:cd:7d:17:40:fb:6e:b1:c6:1b:37:42:33:4c:
                    8c:81:f0:15:da:83:80:91:b1:30:1e:9b:71:2b:3a:
                    35:28:1a:8e:fe:54:f1:d8:8b:6d:d8:df:46:84:be:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:73:4F:29:AC:5D:5E:E5:2E:72:A6:64:B0:5A:9F:A5:A7:6C:3E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7d3054be-4fe0-3276-9f1e-df347768a062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:55:67:bd:63:2c:c8:91:20:a8:4f:00:46:93:7b:17:1e:
         ff:d8:21:d8:ad:17:83:b9:1b:83:07:70:f0:4c:57:39:01:d9:
         6a:38:61:cf:a0:03:3c:ba:38:5a:c0:be:9e:71:6c:2f:f9:09:
         cc:02:0c:d8:a5:37:e2:29:9d:91:d1:09:2d:f3:73:f5:b8:65:
         81:2d:fc:28:cf:db:87:c5:05:8e:9d:4b:aa:15:28:07:60:53:
         c8:21:7b:9a:f1:87:99:4f:82:1f:cc:9d:c1:12:f6:9b:f5:a2:
         7c:0f:02:ce:22:51:84:8a:c3:17:93:85:e8:23:05:9b:60:45:
         dc:c0:c5:e1:1c:c7:00:b6:9e:64:d7:1e:72:81:54:81:82:51:
         ce:87:e8:2f:6f:0e:1d:5a:25:d1:2d:84:6b:25:11:fc:53:82:
         76:3e:6e:7d:ea:cb:c6:28:56:b0:ef:6f:ec:c2:de:cd:53:f9:
         0a:31:e9:b8:b2:2a:1d:00:68:6f:ed:bd:28:84:74:ce:15:00:
         18:04:f3:1c:08:22:91:99:91:27:31:cd:5a:a5:45:9c:d4:c0:
         c6:18:54:ca:a3:6d:46:7f:ae:11:a7:29:b7:3e:2e:46:a8:4a:
         4c:9b:43:d5:10:ea:0c:df:bb:8f:b2:29:24:f3:49:83:41:0b:
         49:fe:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----