Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/15e6a076-1fca-3dd7-860a-79054c7165b6.roa
File:                     15e6a076-1fca-3dd7-860a-79054c7165b6.roa (raw, json)
Hash identifier:          WAJEugxfTzZuiNtgghEkiLqBI1xlIauSXRoI33lufjE=
Subject key identifier:   A7:E5:42:AF:F0:4A:8A:01:15:48:13:5C:56:64:45:B1:44:47:9F:31
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7E8A15893C858961BF07500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/15e6a076-1fca-3dd7-860a-79054c7165b6.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        207.229.0.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:e8:a1:58:93:c8:58:96:1b:f0:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=a9a128fd-468e-4e74-b5a6-2c1f351b4526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:16:81:c3:e3:f4:85:44:8c:1c:cd:6b:75:99:
                    9a:6f:e0:d6:01:36:5e:c1:21:3d:8d:32:3a:e1:36:
                    14:5c:64:fe:36:1d:28:f2:95:33:8e:e0:36:01:8f:
                    1a:bd:ee:79:8b:d2:5f:65:c7:c8:11:26:a6:4b:fb:
                    b9:b4:41:15:be:4a:ba:60:1d:31:f0:bb:f7:0e:77:
                    cf:69:fa:3b:7b:12:81:b7:05:da:5a:26:28:79:d2:
                    6c:cc:66:ae:35:17:15:c7:e5:f8:78:bc:f0:07:44:
                    d7:7f:a6:6e:23:b6:5f:39:3e:86:bf:f0:b7:e1:b2:
                    65:d4:70:d3:de:78:85:63:ba:7d:cd:f8:31:08:39:
                    03:9b:f4:7a:aa:9a:2e:cb:ae:a3:3e:e8:58:f1:42:
                    93:13:f3:7c:ce:4d:8c:67:85:ca:54:ce:00:b4:44:
                    65:53:f0:8e:88:f8:de:ec:25:cb:17:9e:a9:40:36:
                    15:8b:f3:6b:ed:cc:52:96:c9:71:03:2f:67:ae:19:
                    aa:e1:f2:1a:7c:61:86:4a:60:b6:30:53:4e:0e:26:
                    84:96:53:f5:16:7d:6d:38:0a:ea:79:42:45:3f:f1:
                    c9:88:2e:9c:ee:53:44:bb:c3:9d:33:9d:ab:9a:de:
                    71:61:75:95:36:a4:a4:11:fb:12:37:0a:0d:85:09:
                    34:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E5:42:AF:F0:4A:8A:01:15:48:13:5C:56:64:45:B1:44:47:9F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/15e6a076-1fca-3dd7-860a-79054c7165b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.229.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:6d:cc:c7:c7:0a:ee:d1:29:57:2f:94:ca:ca:3f:38:36:84:
         a2:77:7b:d7:e7:70:c1:9b:dc:5a:58:4c:bb:17:b2:86:85:1f:
         16:59:e8:aa:f2:c8:ba:42:c8:1c:ea:ae:b6:4d:c0:b4:cd:e8:
         76:ad:ef:09:38:5c:13:e2:5f:6f:2b:26:ff:22:57:34:a5:95:
         1a:1a:c3:10:1b:b1:0c:cd:d1:79:45:84:7e:af:9e:6a:3c:74:
         cc:6e:11:25:a3:9d:0c:29:42:31:4c:73:15:74:d1:a0:2e:99:
         f9:37:1f:6f:6b:9c:f7:98:78:2e:c8:d8:52:77:29:78:84:22:
         38:49:38:01:f2:6c:d8:13:8c:0e:0d:23:43:da:5b:42:b2:74:
         40:61:af:60:24:96:23:ec:7b:b3:20:33:0b:52:57:9a:3e:17:
         57:84:3b:48:a7:9e:97:1a:f7:8b:36:01:db:0c:53:43:83:5e:
         02:50:88:08:f6:1f:4e:82:77:06:10:0f:59:8d:ea:d0:e9:1f:
         10:95:8c:0e:9e:1a:1c:0d:d0:a1:b5:36:5f:f5:6f:31:69:b4:
         e0:83:27:1d:71:f7:00:0f:a7:85:b3:2c:06:fe:8b:49:1a:d9:
         f2:f0:c0:5f:d7:b3:7a:73:ad:44:a9:74:42:04:a7:2e:74:1e:
         51:18:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----