Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/a719f29f-61b1-38a6-96d0-86a6b5339856.roa
File:                     a719f29f-61b1-38a6-96d0-86a6b5339856.roa (raw, json)
Hash identifier:          gKQMeKn4kFp0ePL8NhSK+jxdnMhsFVDzQJDWtLLAcvE=
Subject key identifier:   29:1A:F2:2E:4E:8F:60:0A:B7:47:88:2A:75:30:78:1A:B8:BB:DE:AB
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328583752A4A4BBB7D7BD990CB0B580
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/a719f29f-61b1-38a6-96d0-86a6b5339856.roa
Signing time:             Fri 17 Jul 2020 04:00:00 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Thu 22 Dec 2022 05:00:00 +0000
asID:                     812
IP address blocks:        72.143.208.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:52:a4:a4:bb:b7:d7:bd:99:0c:b0:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Dec 22 05:00:00 2022 GMT
        Subject: CN=ff12fc62-c8a6-4270-aac3-4b1c975a21fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ff:e1:c9:5b:b4:c6:63:42:69:28:9d:44:4f:
                    1d:c7:05:b6:61:f6:40:0b:83:1a:23:05:95:48:25:
                    ac:8c:2c:4f:2f:6d:ff:3a:99:35:35:c0:68:42:cd:
                    e7:de:39:37:22:b0:6f:37:31:ed:f5:69:22:0c:1a:
                    20:84:c7:de:0f:9b:c4:68:4a:cd:87:7d:d4:2d:e0:
                    b2:49:06:17:3e:be:78:d8:79:25:b7:e7:5f:6b:27:
                    a2:9a:99:d9:82:eb:bb:d3:90:d9:20:1b:2d:84:1c:
                    c6:19:93:a0:49:2f:ff:60:a6:c3:ff:ab:df:f9:96:
                    41:40:85:67:60:b1:6b:40:20:f7:22:14:04:0b:4f:
                    a7:ee:5b:ae:f1:42:10:5d:d1:f0:68:16:88:f1:29:
                    44:c8:70:c8:e4:1b:9b:60:4c:62:78:ed:c2:90:48:
                    a7:1f:0a:c6:39:04:03:29:22:fd:be:42:c6:c1:e4:
                    c6:e8:bb:30:ef:e1:66:c8:d1:55:7f:75:70:62:4b:
                    08:d9:99:13:1b:40:5d:9f:5e:38:e3:9d:c9:58:61:
                    ba:aa:34:95:78:11:92:ad:92:0b:d4:7b:c1:7f:fe:
                    85:9b:83:54:3f:68:04:d5:85:46:0e:97:fc:ef:4b:
                    b8:a5:22:4c:59:a6:ea:e9:25:f7:9a:5e:c0:71:76:
                    d2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1A:F2:2E:4E:8F:60:0A:B7:47:88:2A:75:30:78:1A:B8:BB:DE:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/a719f29f-61b1-38a6-96d0-86a6b5339856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.143.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:36:14:d8:79:3a:01:e0:88:13:f8:6f:7e:e4:61:e6:56:79:
         3a:56:24:61:06:4c:1b:d1:81:7d:52:88:da:a3:0b:fc:39:86:
         98:58:7f:be:7e:21:f4:33:ca:85:2b:32:2b:ab:01:67:a0:a0:
         3c:4e:c9:b9:a1:e3:ed:90:cf:07:39:d2:ab:54:42:f7:a7:4e:
         2a:bd:84:e2:bf:28:54:4b:95:4a:0d:55:81:2d:fc:d2:3a:43:
         a8:77:16:5d:42:3a:4d:b8:95:ea:10:0b:b0:a1:e7:ef:a4:27:
         de:9b:f3:ee:76:53:2a:3f:9d:3c:74:19:b6:6a:aa:d0:3d:7c:
         28:3d:8d:c0:df:1d:3b:cb:bc:5b:af:79:cd:6f:8c:1d:b0:dd:
         5a:46:b0:f0:3e:31:d7:a8:12:65:ca:3f:7b:74:d3:0f:e4:f8:
         9a:3f:f3:52:48:52:9d:d1:68:c0:e8:e0:b3:e9:32:dd:53:ba:
         5e:1e:1e:91:e7:0d:38:83:70:55:2b:24:fe:98:a1:f4:fc:4e:
         60:b7:db:14:01:8d:af:56:21:34:17:97:9c:35:ef:62:da:20:
         8b:6b:b3:3b:e1:e5:f9:5a:85:48:16:ee:23:c9:8e:1c:74:3b:
         cf:7f:b2:3d:8c:33:3f:77:5f:1f:cc:a8:a5:84:15:53:96:37:
         aa:5d:62:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----