Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/24a8393a-2a24-319d-9aac-f20b199c318a.roa
File:                     24a8393a-2a24-319d-9aac-f20b199c318a.roa (raw, json)
Hash identifier:          B98raoHe/4qpvUwu2CDNDBf+96fgeWgXo4YRP1Md6gU=
Subject key identifier:   BA:B6:78:92:D8:17:AD:18:D6:7B:68:48:51:13:D2:6B:0B:AF:76:32
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837EA52F112B3527A74DDAAD000
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/24a8393a-2a24-319d-9aac-f20b199c318a.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        173.182.104.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:ea:52:f1:12:b3:52:7a:74:dd:aa:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=6e26784f-a9f7-4e2e-92aa-e985b6a67178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:f2:3c:e6:a9:78:72:b6:c2:97:fb:b0:a4:
                    79:ce:d3:49:ff:15:fa:04:32:d0:55:c4:1f:15:03:
                    e1:06:07:ad:45:c6:45:b9:27:df:d5:09:cf:d8:1e:
                    36:54:ca:6a:12:37:e7:57:39:70:ab:e2:84:a2:6d:
                    dd:ac:52:49:48:b9:f6:62:f2:bf:95:53:5e:ab:82:
                    37:7f:40:42:b7:55:da:f0:cc:36:f4:96:f9:24:91:
                    17:8e:ae:d4:8d:44:ae:82:28:8f:47:21:a3:a1:e5:
                    c5:ab:42:c3:76:c2:d9:60:84:05:d6:6a:f7:33:40:
                    84:be:96:f9:a4:a5:32:e7:7e:13:b2:8e:dc:39:2d:
                    86:b3:9c:3d:21:c3:a6:2a:56:60:d4:11:f6:32:6b:
                    ac:4f:4d:99:f8:ca:03:07:a5:25:47:7d:c0:bb:7d:
                    0e:df:53:08:40:2a:53:2f:3f:c3:18:6b:e9:4b:5d:
                    8d:ca:f1:9f:d4:56:7c:a3:2a:0a:29:73:f6:3b:b6:
                    ba:41:9a:ec:25:db:fe:a6:31:d2:65:83:91:fb:e3:
                    46:7f:61:24:10:f8:06:85:19:f1:c6:af:ec:e8:35:
                    d8:45:d8:ae:1c:68:e6:fe:fb:bc:fd:96:fa:1b:cb:
                    de:48:1a:c3:21:47:15:ba:d7:9a:02:9c:50:0c:53:
                    c6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B6:78:92:D8:17:AD:18:D6:7B:68:48:51:13:D2:6B:0B:AF:76:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/24a8393a-2a24-319d-9aac-f20b199c318a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.182.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a6:61:08:2c:09:94:30:25:14:f6:f3:b4:bd:53:87:00:33:
         f9:93:5b:6a:87:45:0e:64:e2:4a:70:8b:ca:36:93:19:1f:9c:
         79:6a:e0:24:e8:e0:c1:cd:80:03:87:24:a6:3e:07:01:9d:dc:
         95:57:e8:c2:5d:34:3a:7f:9c:83:9b:a7:16:7d:2b:52:f9:ea:
         45:34:07:61:93:47:64:f4:95:4e:2c:cf:ea:91:82:a7:11:3a:
         8f:33:52:f2:e0:4b:ea:55:af:46:1f:62:24:a9:be:63:ce:88:
         3d:ed:f7:d7:63:6a:ff:81:98:69:d6:9b:8b:ec:0e:f4:fa:af:
         2a:e0:24:5b:fb:70:2d:0e:c7:60:c1:6c:2d:00:53:9c:a6:2e:
         71:23:69:c8:30:57:5a:7a:2e:f3:90:6d:9d:ea:85:a4:00:9b:
         e5:bd:0e:21:dd:a9:bc:2d:2b:2c:fb:08:1d:5f:24:f8:7b:ec:
         c6:60:e6:98:59:d1:84:23:dc:d9:a4:f3:d8:ee:a6:05:cb:50:
         74:48:22:26:9e:b8:8b:25:2e:7b:78:0e:2d:60:ea:5a:49:5e:
         c4:22:e7:a6:9f:f6:57:41:9e:60:8a:ce:ae:9e:6e:9a:b2:69:
         5c:d9:ce:74:6b:c5:be:e0:32:2b:1c:c5:04:45:77:7b:b3:97:
         8a:92:1a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----