Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17d9178a-e22e-3b15-8676-e47e7444708b.roa
File:                     17d9178a-e22e-3b15-8676-e47e7444708b.roa (raw, json)
Hash identifier:          MVKYRse9ekIM6AlvHW80O6POLUZj7x+1XzNhDlvT6Jo=
Subject key identifier:   23:45:FB:81:32:A8:05:0A:35:61:C9:EC:4C:62:1E:DB:A8:B1:B6:F4
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7D786DAD1CDAEFEC0507100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17d9178a-e22e-3b15-8676-e47e7444708b.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        50.98.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:d7:86:da:d1:cd:ae:fe:c0:50:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=192ff088-a172-4340-883a-2c8a6bfaa897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:48:c0:05:b0:13:83:e5:f4:93:8f:64:40:85:
                    45:96:68:76:e9:f6:e7:ab:70:b1:2d:08:d6:10:ea:
                    6a:5a:9b:9a:73:81:19:c9:e5:58:12:fb:72:70:7a:
                    84:02:2e:c0:cd:c4:03:55:3e:fa:b0:5c:8a:9c:b6:
                    32:9f:8d:0a:4b:1f:8e:4e:f1:01:ed:de:09:7b:ea:
                    af:c5:00:61:aa:a8:2b:4b:eb:3f:2b:b1:d4:2e:00:
                    88:d4:b7:6b:84:3e:9c:f0:81:33:47:68:b6:0a:dd:
                    96:54:a3:2d:3c:7d:c1:b2:32:f3:0c:cb:f2:fa:d9:
                    2b:d8:7c:f9:d8:14:26:14:cb:d7:25:e7:c1:ad:5b:
                    7d:77:ba:c0:44:9c:be:e8:06:7c:72:dd:a1:f5:0c:
                    28:8a:a7:9c:80:bd:c5:ae:0b:ca:49:34:8f:ce:30:
                    ab:1f:eb:df:36:13:ac:a2:54:af:84:2e:df:53:7a:
                    c0:cd:b9:3a:92:9b:09:96:72:a2:44:93:5c:1a:43:
                    9b:a7:d3:03:0d:95:43:1c:32:12:cd:4c:e0:7e:4a:
                    8d:7c:6e:61:d1:17:ba:51:63:2d:5d:6e:4e:a3:83:
                    10:2b:60:fb:14:7b:b9:e1:64:ee:36:73:cb:96:42:
                    08:82:6c:d2:77:74:ee:46:82:e5:b6:01:bb:e9:62:
                    07:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:45:FB:81:32:A8:05:0A:35:61:C9:EC:4C:62:1E:DB:A8:B1:B6:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17d9178a-e22e-3b15-8676-e47e7444708b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:64:f3:5d:2f:c0:4c:25:6b:83:95:ec:ba:c4:0a:16:31:b4:
         85:4a:ca:ac:b0:b9:82:f7:2c:9b:fe:ea:01:75:e8:f2:50:5a:
         0c:4b:c2:40:ce:40:f6:b2:8d:fd:cd:40:d4:f7:9e:13:04:91:
         c2:90:fa:18:b9:14:9f:cb:43:8b:fc:04:a9:e1:92:79:26:ba:
         ba:06:3c:1f:0a:95:44:60:bf:e1:be:ff:d3:8c:90:44:08:30:
         ad:96:f0:b8:a0:1e:ea:40:df:fd:2c:0b:4e:48:01:e8:6f:71:
         69:3a:1f:f2:d1:5e:6c:aa:5a:b5:b0:d1:03:58:bb:f9:be:cf:
         77:b0:8d:a4:de:a1:01:0c:7d:96:fb:9f:f2:d3:1f:c8:72:80:
         16:fa:03:3b:84:a6:62:13:a3:85:e8:fb:e9:9e:da:d7:0d:4b:
         96:97:4b:36:cc:3d:23:c8:07:23:8f:6c:68:6d:8d:d4:aa:de:
         bf:16:70:bb:7b:53:6a:1b:fb:36:49:30:d4:f7:70:21:55:61:
         f2:5d:b4:86:03:e9:5d:d0:a4:c5:11:7e:a6:3d:d9:ee:d4:d5:
         84:a5:3b:82:e0:c2:dd:2a:61:b8:cc:b7:11:0d:e5:cd:e3:03:
         a7:e9:2d:3b:c5:a0:3b:db:eb:4a:2c:31:03:f0:5a:b2:d7:04:
         5f:60:23:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----