Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/222e34f8-f902-3257-b72f-a2ea4ac10590.roa
File:                     222e34f8-f902-3257-b72f-a2ea4ac10590.roa (raw, json)
Hash identifier:          lVk8LLJmfbRe+Mzd/vy8+SEbbpq0/ITjrmjyvEAP2sk=
Subject key identifier:   44:ED:4C:22:07:D6:55:B7:9B:8C:FE:52:78:2E:17:8C:A0:86:83:DB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7DF66C3727CDCA6038D7F00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/222e34f8-f902-3257-b72f-a2ea4ac10590.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        209.29.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:df:66:c3:72:7c:dc:a6:03:8d:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=92e4a554-a320-449e-b919-e8f3f986e844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:3d:92:09:17:fe:ae:25:c4:a4:e5:d9:04:
                    91:98:a2:c9:03:95:55:bf:31:2a:87:53:c9:86:df:
                    ea:a5:b5:b3:5c:c6:e4:89:80:0d:3b:36:7d:cd:f2:
                    ee:6f:48:60:0b:d5:8c:52:f1:d5:11:5d:c7:d7:b0:
                    d9:06:18:fd:ff:e8:9a:49:78:1d:1b:e4:db:f5:4c:
                    42:34:6a:5b:0d:96:ff:a7:c6:ea:8f:fb:62:67:0e:
                    52:6f:86:f8:42:3a:de:3f:52:05:a4:e5:37:69:73:
                    02:bd:8c:37:95:e5:3b:56:d3:fa:51:92:10:ed:f0:
                    96:95:43:e2:90:2e:3e:66:76:83:73:2a:15:4e:d9:
                    5f:4c:a7:ef:60:4f:77:42:2e:7b:fa:bc:54:12:87:
                    85:3d:ec:5b:56:a1:ba:2d:b3:13:b2:e7:4d:f9:44:
                    cb:1d:68:61:7c:e5:f2:9c:5b:b3:29:12:f9:05:07:
                    cf:cb:92:84:2e:23:ca:1a:c5:16:45:5d:1d:83:c5:
                    6c:86:4d:85:60:a9:a2:dd:18:e1:ab:34:f0:00:03:
                    17:c1:17:d7:c8:6c:a4:c0:ab:d1:76:23:cf:16:e1:
                    b9:aa:ca:fc:15:21:29:2e:a9:05:b9:14:da:15:a3:
                    90:c1:38:8d:94:d8:76:19:ce:43:a1:f8:f6:f2:b9:
                    76:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:ED:4C:22:07:D6:55:B7:9B:8C:FE:52:78:2E:17:8C:A0:86:83:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/222e34f8-f902-3257-b72f-a2ea4ac10590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:05:45:e2:4f:87:9d:1a:10:4e:44:8f:26:dd:71:28:b1:
         20:15:04:8c:ae:53:3a:90:78:ed:fd:f5:6f:76:30:f4:35:74:
         da:c5:d6:62:18:58:6b:1c:b9:6c:02:06:6c:4f:3b:83:5a:86:
         95:b5:84:4c:49:93:29:a2:cd:c7:71:4d:1e:17:cf:7a:d7:b2:
         a1:8d:01:58:7e:f3:dc:09:8b:3b:b5:d1:84:0f:1a:56:65:f2:
         37:c1:f4:d8:1c:9c:a2:58:58:69:09:4b:6d:ae:8b:5b:62:9e:
         12:36:c9:38:d8:10:5a:d6:b1:55:9f:8e:bb:7c:3b:53:3b:b7:
         0f:e5:66:e5:5f:a9:a9:ca:43:a1:53:cb:8d:0c:37:02:04:22:
         2d:e4:16:b6:33:26:48:87:e6:17:98:5e:9f:7a:b4:3b:90:84:
         d6:b7:c0:bc:b3:b7:a9:8c:fa:b8:9b:44:59:f6:73:0d:bb:d0:
         1c:88:2a:9b:23:a2:ed:99:72:5d:17:ae:db:66:2e:07:96:46:
         a3:ae:3d:b0:f7:cd:19:4f:4a:e3:b0:53:b4:26:f8:30:80:e4:
         19:b3:98:32:ca:c1:1f:22:27:c4:40:18:04:43:8c:24:55:c9:
         b6:cf:28:3b:25:f3:19:4f:e5:7e:ef:67:1a:6a:e2:1b:b4:af:
         3f:73:80:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----