Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/45d07783-e9e2-329c-8159-5b469879e8b1.roa
File:                     45d07783-e9e2-329c-8159-5b469879e8b1.roa (raw, json)
Hash identifier:          za+XxQGPzAVAP+YyQlENH3X7o7LpYUAOhP+ik6lWzZk=
Subject key identifier:   ED:2E:26:97:56:04:4F:27:C6:85:E1:29:93:75:BB:84:73:DF:51:73
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A27799C87DFBA14C25FB340
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/45d07783-e9e2-329c-8159-5b469879e8b1.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.100.16.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:27:79:9c:87:df:ba:14:c2:5f:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=df3229fa-ad67-499d-add2-1c97d17720ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2b:86:42:b6:d6:fc:81:7c:98:05:f5:52:a6:
                    37:f9:39:f7:0b:ca:4f:f9:4e:29:e3:c7:e7:bb:ff:
                    ae:56:7e:3d:60:c3:c5:a3:d8:69:8d:4d:a4:76:47:
                    72:0f:dc:b2:0f:f8:76:c2:55:cd:76:72:7a:43:d7:
                    b9:08:05:a3:dc:ae:2f:cb:7d:84:c0:78:22:01:ca:
                    19:e6:e3:01:2d:ed:5d:50:ce:5c:62:0e:a1:23:81:
                    36:48:23:1a:0c:7a:53:21:61:7f:5b:e9:55:88:31:
                    34:15:09:45:dd:f6:c8:88:38:a5:8a:49:0b:c7:db:
                    26:14:f1:4b:b4:33:d8:fb:b4:f0:81:49:08:87:ef:
                    18:c5:c6:59:78:35:5c:64:3f:04:71:16:a9:34:6e:
                    c5:75:e0:28:1b:8c:27:33:f1:00:23:58:e9:4e:7d:
                    c8:de:4e:2e:cd:6f:1b:aa:f0:21:db:68:cf:17:3d:
                    92:48:7c:84:4d:18:63:c9:38:e3:77:cd:3a:f6:48:
                    08:1a:ca:e8:3b:f7:ea:c4:30:f9:f8:a0:61:8b:6c:
                    15:9b:6a:d9:2c:fa:7a:1b:bb:ea:4a:49:10:05:72:
                    ed:b9:25:c8:55:85:f3:f6:a8:30:ac:58:bd:e3:cc:
                    b9:6b:7e:a9:2f:d2:bf:c4:cb:1b:db:19:93:f2:4f:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2E:26:97:56:04:4F:27:C6:85:E1:29:93:75:BB:84:73:DF:51:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/45d07783-e9e2-329c-8159-5b469879e8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.100.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:38:b1:4e:a6:c5:23:f3:fe:25:63:95:2d:fc:fd:66:67:25:
         27:58:e4:5e:ba:41:0c:8e:45:3c:03:a3:d5:db:10:85:1f:1f:
         f8:75:73:35:d8:cf:99:56:d9:7c:4c:bc:6c:93:a9:dc:c0:af:
         68:0d:58:67:8b:39:59:d6:a6:b3:9e:4d:63:f1:65:e9:f7:f9:
         2c:20:21:d4:22:45:b5:23:1a:a3:72:3a:e9:85:5b:80:1c:a8:
         67:00:ce:e4:1e:a1:4f:4f:b9:eb:dd:82:2d:cb:9f:ed:fe:d0:
         62:a9:92:46:36:b0:10:20:81:37:e0:23:0d:9b:14:4b:05:11:
         e6:fb:26:b2:f8:4f:21:80:ff:70:be:80:03:3f:f8:c6:a0:7b:
         45:ba:9d:ed:78:9f:ea:bd:f3:9c:69:a8:d5:d7:c3:6d:cd:e8:
         f0:26:4d:75:63:14:2d:fc:0d:cb:66:34:80:3a:d3:65:be:79:
         e8:6d:dd:5a:64:dc:2d:22:94:82:8f:f2:54:7a:e8:81:f5:80:
         2f:93:7a:43:83:7a:ea:cc:8a:5c:9e:95:1d:4e:68:f0:d2:96:
         ab:c5:01:74:a3:b6:80:d7:68:da:5b:85:71:48:9b:a8:12:2b:
         dc:28:fa:09:37:eb:d0:94:d0:e1:5b:bf:33:6e:0a:d9:b7:5c:
         8a:18:04:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----