Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/caad5b4e-26fc-3d78-8d09-d92ddc562e2a.roa
File:                     caad5b4e-26fc-3d78-8d09-d92ddc562e2a.roa (raw, json)
Hash identifier:          PBHFGQ3vTDT/cyDG2M2XZSUP08X1NuVWX9K4abfrzzw=
Subject key identifier:   FC:F6:C2:42:3A:4D:F0:AE:43:46:03:20:1E:3A:F3:35:30:EB:5C:82
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A106EC168D0990D00A55C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/caad5b4e-26fc-3d78-8d09-d92ddc562e2a.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        34.133.224.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:10:6e:c1:68:d0:99:0d:00:a5:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=cb2b51a0-aa83-4764-aba1-54778dd1af2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:10:73:22:e3:3c:e8:64:25:f9:d2:3d:7c:
                    10:04:5c:f6:b5:29:c4:f2:5d:0c:09:6b:e2:fb:91:
                    d0:42:0a:83:df:85:ab:32:29:32:3c:1e:52:72:ab:
                    b8:7d:59:ba:50:a3:c9:5a:f6:1f:71:d4:d7:fa:b8:
                    0c:35:8d:2a:ed:11:7f:02:53:42:8a:b3:17:07:51:
                    20:4f:9b:b9:3d:41:a2:ed:45:ef:4d:b8:93:27:51:
                    40:cd:2e:32:4f:b0:c1:14:44:bb:3f:dc:c8:ef:2b:
                    8e:11:55:6d:97:3f:fd:e0:5f:06:27:db:81:48:6b:
                    06:4b:81:c8:0e:dd:0c:4c:16:72:31:84:dd:e8:ad:
                    e4:af:ae:7d:96:d2:41:b3:6c:f4:95:7b:4c:e8:39:
                    f7:bc:75:2a:5b:09:1d:b2:ff:70:88:95:6b:e9:04:
                    c9:02:55:d3:b0:a1:44:4d:20:69:dd:fb:2a:a2:89:
                    7a:fd:4f:dd:22:15:1c:bf:7b:78:ca:53:57:18:f7:
                    70:d8:42:1c:e7:72:9d:f3:d3:25:42:f9:9c:f8:fa:
                    b9:1c:71:e5:bd:17:04:ac:a6:b2:f4:98:53:e9:79:
                    3e:40:37:a2:16:bf:d8:cf:49:d4:94:36:c4:f4:5e:
                    a7:b6:c2:1c:98:9e:d0:6b:fa:8c:8f:fc:b9:4f:e0:
                    ee:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F6:C2:42:3A:4D:F0:AE:43:46:03:20:1E:3A:F3:35:30:EB:5C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/caad5b4e-26fc-3d78-8d09-d92ddc562e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.133.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1e:a2:11:a8:d5:88:a5:ac:dd:5a:f2:3c:9c:71:c4:23:c2:
         4b:60:66:59:10:7a:04:f9:75:13:92:a6:2a:f1:fe:a3:cc:4a:
         4a:ab:ce:e3:3e:ac:7b:11:d0:d0:4c:3e:8d:89:3b:d2:2c:56:
         c1:ea:29:eb:db:8f:4b:d4:eb:91:a6:b6:d8:af:c2:af:a2:5d:
         1a:38:55:01:15:f7:20:1e:ae:a6:bb:c3:26:bf:6d:b7:26:03:
         24:d2:04:7b:2f:a3:50:e8:a0:62:70:40:13:0b:1d:a9:2c:94:
         b2:ca:54:9f:ad:d5:2d:cb:2a:6d:98:58:7a:d2:5a:99:26:f8:
         44:2e:d1:9f:f0:70:ea:11:ae:8b:e4:2f:19:e6:e1:13:3d:e5:
         14:cd:81:40:b0:3c:bd:00:72:f2:1f:20:5a:4f:7d:ae:c0:ec:
         ed:ac:ed:c7:b9:a0:15:23:06:f8:cd:31:e7:fa:69:5a:31:97:
         f7:9f:93:a5:e2:0c:f1:31:bf:89:07:e7:5d:b1:4b:ad:4c:bd:
         04:0f:f2:55:a0:f0:e8:7f:91:dd:75:d7:62:81:45:eb:61:2e:
         2f:42:23:8c:a7:62:3c:67:5d:e7:3c:5c:46:e1:b3:61:50:de:
         75:5e:d7:d6:ca:07:e3:07:61:ed:8c:43:d1:a5:b4:8b:c0:d8:
         dc:2a:49:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----