Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/78fe7854-4d13-309b-8cb0-8bc4208f6ce2.roa
File:                     78fe7854-4d13-309b-8cb0-8bc4208f6ce2.roa (raw, json)
Hash identifier:          AfMl0DzcTS+apZZRPOMTjeWRItMrzm/Lywsjw8aURRs=
Subject key identifier:   E4:19:20:70:EA:09:79:D4:E0:FF:80:64:11:C8:BC:96:21:BC:3A:C1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D4167D6F666DE7789DBAFC80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/78fe7854-4d13-309b-8cb0-8bc4208f6ce2.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        2001:568:203::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d4:16:7d:6f:66:6d:e7:78:9d:ba:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=a00976b9-0bd9-4d6d-b6f3-d8fc70c7a727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:82:da:3b:7e:c3:7b:8a:2f:cb:08:44:82:ca:
                    2b:72:9b:3d:3e:06:c7:2d:a7:9b:c5:bc:6d:75:d8:
                    3f:b9:cb:e8:2c:05:38:c3:c8:85:8a:a6:df:5c:70:
                    5d:a4:1d:a0:22:10:25:7c:b5:b4:aa:da:62:15:32:
                    b5:b8:0d:62:26:93:d6:9e:82:0b:b0:97:4f:35:3f:
                    79:c0:13:8a:da:95:b3:a5:e8:f6:2b:1d:bb:5b:88:
                    a6:a4:3f:7a:78:ec:84:ff:de:97:04:e2:dc:23:d5:
                    1e:f0:59:74:dd:ba:0b:f4:40:17:56:ae:8e:95:12:
                    86:78:34:70:52:5a:15:04:39:fe:e2:ac:55:5b:cf:
                    72:26:1d:e5:01:b6:48:fa:bb:dd:6b:49:76:8b:d5:
                    e4:c9:fa:55:11:d8:05:08:e6:4d:3f:51:79:ec:eb:
                    69:92:9f:e1:bf:4a:2d:2b:e5:3a:94:21:5b:99:39:
                    42:c1:eb:28:9b:4f:1d:59:e5:df:75:3e:bf:43:90:
                    9a:74:a8:89:2d:ce:02:e5:86:8e:92:78:0e:8e:a5:
                    01:0b:8f:d6:d3:3a:d1:07:43:1e:c5:d3:88:94:6c:
                    54:d9:52:a0:06:cd:c6:63:c1:5d:8c:b7:cf:f9:44:
                    cb:9f:bc:74:f5:83:7f:f1:da:9f:51:ee:ef:00:14:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:19:20:70:EA:09:79:D4:E0:FF:80:64:11:C8:BC:96:21:BC:3A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/78fe7854-4d13-309b-8cb0-8bc4208f6ce2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:568:203::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:50:62:e7:72:f5:9a:a8:4c:6b:40:50:b5:7b:40:61:d9:bc:
         04:e7:33:2c:34:4f:6a:03:4a:8b:ba:b2:f6:f0:4c:c2:de:cc:
         d1:b6:ab:60:30:1c:89:ad:8c:3a:de:39:97:05:18:27:c1:00:
         af:fa:e5:fc:9c:a2:f6:40:bd:d5:68:1d:67:db:c1:f6:26:43:
         2f:23:a2:90:3d:f7:02:0e:ba:76:c1:7b:46:0e:e9:a2:07:9a:
         e8:0b:11:32:ee:91:11:27:65:6d:db:e8:05:9e:f1:c4:c2:b3:
         b1:78:23:9f:89:61:b9:ad:b8:cf:69:d0:c5:aa:d5:15:f9:08:
         4f:cd:95:7e:3d:35:f8:76:fb:8e:d8:a7:ef:c4:d0:e1:73:08:
         33:4b:66:d8:52:3c:a1:16:e1:63:f9:99:f0:4a:98:1c:e7:06:
         cb:9d:cc:be:e7:67:a2:77:ba:c3:d7:24:2e:38:dc:dd:c6:2e:
         59:ad:89:72:14:16:4e:4b:6b:c3:0b:54:88:79:5a:f1:57:27:
         a5:0b:9b:14:6e:f3:33:93:af:5f:2c:a9:51:6c:d3:11:a6:67:
         a0:81:fe:10:ed:44:32:3d:bc:91:72:77:27:75:6e:7e:7d:e4:
         63:04:c6:8e:95:f9:c3:f3:5f:8d:6c:85:53:60:7b:24:29:e5:
         93:07:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----