Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/66b32485-64c5-3789-b64c-a4feb865a009.roa
File:                     66b32485-64c5-3789-b64c-a4feb865a009.roa (raw, json)
Hash identifier:          ufvCOlfqpMBGJxkS6SIlLlnCEjrSbiWamvIdRDrz3pE=
Subject key identifier:   3D:55:41:83:01:BA:22:7C:C0:A1:92:42:68:16:62:A4:C4:66:FE:A1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7DD5096241B42B3A2C47A80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/66b32485-64c5-3789-b64c-a4feb865a009.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        198.166.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:dd:50:96:24:1b:42:b3:a2:c4:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=81fc2f2b-e283-4388-843e-20a07f53b528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:78:0b:58:91:50:3c:7f:79:94:5d:35:d1:
                    18:1f:fc:54:0f:6c:50:cb:24:df:ff:b2:75:0f:2b:
                    38:ab:57:c2:70:c1:a2:b4:6d:fd:75:de:79:fd:ac:
                    20:e8:3e:9b:54:4a:3f:d9:88:fb:73:4d:79:51:c9:
                    76:24:df:56:3f:3c:84:b1:2f:a8:3b:1b:3d:0b:47:
                    c2:1a:11:81:cc:9b:c4:35:c6:1b:2d:ed:27:f7:5a:
                    59:a7:9d:44:28:88:3e:cf:4d:33:4a:4c:cb:ea:fb:
                    23:c0:b0:09:09:e3:8b:9b:e7:95:3b:95:d7:87:ff:
                    bc:bc:c4:e3:74:7e:51:a3:c0:21:15:2f:1f:34:a8:
                    f1:c8:52:6b:04:ae:8b:80:25:4d:e1:42:97:6c:83:
                    f5:ac:1b:f0:06:ad:d3:42:a4:0a:d6:1e:d4:8f:c9:
                    b8:4e:db:2d:ab:2d:b5:b6:a4:45:35:8f:fc:85:ed:
                    63:cb:08:47:fd:92:5c:1e:92:90:da:db:5f:e4:64:
                    27:ea:5e:61:94:2b:00:5f:14:69:27:ba:d6:2b:8b:
                    5b:65:d0:6c:65:68:7f:65:c4:eb:8a:51:44:66:39:
                    48:ee:fd:06:fb:7d:a7:ff:47:41:a8:5c:bd:9e:12:
                    fc:9a:ea:8a:2d:80:61:25:e6:eb:11:e9:c8:b9:b3:
                    7d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:55:41:83:01:BA:22:7C:C0:A1:92:42:68:16:62:A4:C4:66:FE:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/66b32485-64c5-3789-b64c-a4feb865a009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.166.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0d:ce:ea:da:fe:1a:f5:c6:3f:5e:c6:df:96:fa:93:b4:26:
         8f:b9:7d:a9:4c:33:ae:e5:1f:1a:c1:91:45:56:54:58:90:0d:
         ea:bf:28:89:b0:20:70:2d:1f:87:84:c8:80:cd:d6:1f:f4:64:
         66:80:9e:bc:a4:6a:8d:f2:e7:ce:e4:a0:23:b5:ed:1e:5a:2c:
         27:b7:b1:6d:0d:e1:91:fc:a4:52:c6:d7:e9:d3:44:e0:83:ee:
         ce:75:16:43:33:df:bc:69:42:ec:4b:ad:77:4d:98:17:60:b6:
         8c:53:f1:b0:27:d4:b7:99:d2:06:d3:58:50:55:ea:1f:40:95:
         56:b7:64:de:9a:26:54:fa:7a:c8:a1:86:65:33:a0:ba:d7:5e:
         02:eb:50:5a:10:ac:44:0e:08:73:28:98:eb:80:cd:f0:c1:10:
         20:02:9e:d6:f2:13:49:3a:02:90:8d:04:a3:c0:e5:80:57:84:
         b5:36:7b:06:4d:0c:86:50:af:e0:3c:00:e0:0b:06:a8:1a:e4:
         6c:28:7f:71:c4:be:b5:33:11:e2:f6:cd:fb:93:25:04:fa:97:
         56:8a:d8:9f:d7:50:bb:f2:27:a2:c4:11:4d:12:33:1b:01:4a:
         b9:af:60:0b:14:a0:65:9c:b6:e9:9c:a2:5b:a5:dc:8f:9a:e5:
         39:c2:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----