Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ea9ce78-31e2-3451-9bcb-1e156991635d.roa
File:                     4ea9ce78-31e2-3451-9bcb-1e156991635d.roa (raw, json)
Hash identifier:          fcTUjR7utbFR5FRA7/1EEO3w/86wYVzAm8MA8UUluSA=
Subject key identifier:   87:07:B3:E3:C9:4D:8A:81:DB:DC:77:B9:9C:AD:7B:C9:B1:D6:65:3B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584309FFA542772C738D6A9A9670
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ea9ce78-31e2-3451-9bcb-1e156991635d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.67.128.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:ff:a5:42:77:2c:73:8d:6a:9a:96:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=eb940f92-bacf-453b-a4df-5bfc16dd386b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:3f:77:92:50:d2:1e:cf:2f:ee:47:ea:65:
                    99:33:91:4b:2a:9c:fb:54:af:41:49:28:8d:68:8e:
                    5e:e0:27:bc:7a:2e:a7:7d:12:46:8c:71:67:d1:96:
                    75:d3:0e:cc:3a:7b:5f:b3:dc:09:fd:d6:f2:7c:47:
                    ee:b0:07:bd:71:f5:f7:1c:f4:80:cb:20:21:e4:6c:
                    e1:05:66:1a:4f:c5:09:30:68:f9:fc:f8:f3:0d:63:
                    1f:e4:f2:49:ec:11:5c:ca:eb:2b:a9:b5:67:f0:fb:
                    d5:d6:7f:37:fb:5b:63:3c:a2:79:51:c4:b0:43:c6:
                    10:d2:d2:80:7c:87:4b:dc:83:2d:37:88:a3:cc:34:
                    bb:84:71:95:c4:6d:36:95:31:69:66:31:61:aa:40:
                    ce:c0:6c:7b:1b:27:9f:22:9e:51:c3:5d:e0:1c:00:
                    87:60:0a:97:8f:21:2b:3b:f2:ed:f6:5d:41:c2:69:
                    5e:e4:54:64:b4:26:6c:99:f3:2e:ac:8c:d4:07:33:
                    91:e6:77:b8:96:15:70:4d:eb:b5:a1:96:3a:63:19:
                    75:9b:34:67:51:55:a1:30:f3:14:0a:17:f1:92:7a:
                    41:c8:33:8c:2f:c8:43:8d:23:de:25:cf:a1:97:86:
                    26:bd:6b:56:f7:38:a6:18:34:32:00:9d:65:08:20:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:07:B3:E3:C9:4D:8A:81:DB:DC:77:B9:9C:AD:7B:C9:B1:D6:65:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4ea9ce78-31e2-3451-9bcb-1e156991635d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.67.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d9:65:18:da:52:ff:7d:a8:15:bd:a2:c2:b1:92:50:5e:2b:
         05:15:9c:70:bc:e9:aa:14:46:49:c1:37:52:f8:13:82:20:f9:
         5c:25:ce:86:c0:93:ab:27:38:8e:e4:0c:d5:76:24:ad:18:c1:
         cb:0a:dc:8e:ce:02:a5:de:a5:1c:92:cd:c5:2d:32:6c:a2:f4:
         68:07:94:02:56:e4:2e:8e:23:cc:86:7d:81:ba:1b:26:a5:a9:
         1d:0d:03:64:06:6d:15:ba:24:7a:b6:c3:7a:34:94:ed:48:fa:
         fc:e0:c8:18:3d:39:4c:50:99:b6:1a:fc:31:13:f9:6c:65:75:
         01:6c:10:29:bf:ad:54:68:30:a6:7c:4f:9d:e6:80:4a:78:61:
         0b:01:d1:db:5a:bd:68:53:8c:e6:7d:68:0b:2b:77:e6:39:b1:
         fd:cb:40:22:5d:17:95:43:72:1b:c1:00:8f:86:5a:3c:1f:a6:
         eb:70:a5:78:70:fb:65:60:ef:79:2d:42:b3:a6:ab:e8:37:0b:
         5b:da:89:86:42:ea:8c:3a:fa:c6:ea:19:68:ff:57:42:ef:b6:
         db:a2:e0:58:7e:ac:d4:84:26:00:de:98:f6:55:f4:c9:e5:9e:
         97:45:21:0d:21:25:6b:fc:74:33:35:75:c2:29:fc:a8:2f:fc:
         04:13:60:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----