Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d078672-3d5a-3d06-a9f8-24b33284d7c9.roa
File:                     0d078672-3d5a-3d06-a9f8-24b33284d7c9.roa (raw, json)
Hash identifier:          whLiZh123SwitQSf8V8GpOdm+nxm5X+Gry8529BVWsQ=
Subject key identifier:   11:73:C0:E3:4F:71:10:1B:B1:4A:B0:8E:3A:9E:EE:FA:0A:E7:4A:EA
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A25DE14A3AC6726661D4700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d078672-3d5a-3d06-a9f8-24b33284d7c9.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.74.128.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:25:de:14:a3:ac:67:26:66:1d:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=b2d6b738-0ea7-4c49-9e88-3072c97dfb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b4:80:a7:1e:8e:da:7f:52:9d:0e:31:ec:0c:
                    ae:3e:f6:8d:36:23:fb:db:2d:29:e9:29:8c:ad:de:
                    41:2a:1e:d2:d4:53:b2:9e:0d:71:31:95:8f:c4:4b:
                    81:47:c7:a8:1d:aa:29:56:69:5b:12:f9:00:54:f9:
                    45:a3:8c:68:23:48:b9:f3:c1:9a:49:01:02:e2:ef:
                    87:20:fc:50:95:fc:8a:34:e9:54:58:ab:11:da:fe:
                    96:e1:b7:0d:9d:80:41:75:34:c8:0e:ef:d0:84:af:
                    59:5a:7a:a3:1c:f4:af:31:53:4a:03:69:fa:cf:3b:
                    b4:1d:a9:b5:11:22:c6:54:ac:66:74:aa:a3:90:e3:
                    ec:72:2f:d4:75:d4:2e:0d:92:66:db:50:7c:7a:46:
                    12:56:75:a9:83:10:40:e9:df:ae:e9:a1:2c:b2:b3:
                    1b:32:ad:2c:de:f3:ac:60:b9:67:f9:3f:23:40:83:
                    a2:63:f6:2c:b1:65:c6:b5:3d:93:5e:e5:25:79:2e:
                    09:e0:ef:44:9e:34:55:0d:e5:1e:f6:25:85:b4:6d:
                    ea:3e:88:1e:af:82:ac:1f:c4:92:be:21:e4:c5:02:
                    07:78:59:fd:3b:d3:7b:3d:81:0d:cd:dc:51:51:76:
                    63:8e:f7:98:48:b6:50:8c:12:74:5d:83:ce:03:c6:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:73:C0:E3:4F:71:10:1B:B1:4A:B0:8E:3A:9E:EE:FA:0A:E7:4A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0d078672-3d5a-3d06-a9f8-24b33284d7c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.74.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:2d:69:95:e8:fd:79:28:7a:ca:b9:0c:7b:39:81:92:3f:
         f7:b4:a2:b3:ca:e4:68:73:f3:df:31:71:30:82:eb:a4:e1:4e:
         ef:e0:68:3f:e3:2f:18:59:d5:b0:7b:00:c0:fe:ef:d6:9d:ef:
         44:af:bc:fb:2a:0e:d1:d4:67:82:c2:3b:f5:24:1a:bb:e3:ae:
         6d:47:a7:e4:ea:ca:7c:12:84:6f:68:ec:d0:7c:72:ff:b4:62:
         a5:4b:a4:0e:dc:d2:b0:f6:37:fc:f8:35:83:66:e5:e8:29:20:
         fe:9f:e9:38:6e:af:a5:19:2f:d1:ee:ec:4d:3b:90:f8:9e:67:
         e9:be:45:55:3f:72:c1:5c:b2:af:6e:c2:60:99:5d:c8:e7:dc:
         b3:ab:61:86:57:27:97:3c:2f:52:03:ae:d7:a4:24:fb:1b:0d:
         8a:c3:da:ac:f6:13:3c:c9:15:5b:87:34:60:0b:bd:d6:e5:c5:
         c6:89:06:67:71:46:a8:3c:b4:48:b1:d1:2a:c9:65:59:21:60:
         37:92:16:19:e7:f8:0e:a6:33:ad:50:04:e2:26:38:68:73:c3:
         d0:2b:65:84:6e:f4:68:4d:8e:ca:7f:1d:2c:d1:80:e0:ac:14:
         ef:01:75:19:19:8b:29:ba:22:78:fa:32:8e:a7:26:bd:60:22:
         7e:48:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----