Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/881374d0-6277-32be-9a37-ff68774a50cf.roa
File:                     881374d0-6277-32be-9a37-ff68774a50cf.roa (raw, json)
Hash identifier:          O901OOWxjDkaMfulMqM3bjaB8HDKolIemRNcxT5jB0Q=
Subject key identifier:   B0:2C:C6:FC:46:53:DF:8C:52:C5:64:E5:34:F5:D2:B6:B6:23:12:94
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837BDA0D38020E1D53C06B24620
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/881374d0-6277-32be-9a37-ff68774a50cf.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 29 Jan 2023 05:00:00 +0000
asID:                     25668
IP address blocks:        209.53.212.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:bd:a0:d3:80:20:e1:d5:3c:06:b2:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Jan 29 05:00:00 2023 GMT
        Subject: CN=75d6d625-bca9-47cd-8e8e-60b6fc0c707e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:d7:7a:7a:95:ff:82:c7:41:bc:34:93:cf:
                    f4:25:0c:43:d0:60:3d:e1:81:a8:c8:96:02:a6:d7:
                    ab:3a:17:e6:da:f9:19:a6:33:54:93:3a:50:aa:b5:
                    cd:6d:75:e9:8f:f9:85:39:88:3b:99:b6:64:c8:70:
                    05:db:9e:07:f5:a3:b6:23:f8:7e:57:d9:3f:ed:a8:
                    21:af:1f:39:ba:97:4c:f3:b2:c6:fd:8d:13:a8:4a:
                    98:95:f1:42:62:b2:0a:14:d2:b4:8c:84:6a:9a:5f:
                    1b:f0:1f:ac:2f:66:cc:46:37:a2:22:d7:8e:98:03:
                    ba:b7:e5:d5:14:54:c4:32:c3:f8:2b:9b:17:18:80:
                    35:03:82:9a:66:16:80:98:c8:76:16:d8:86:bb:bc:
                    b9:6d:fa:f5:cc:43:b9:09:37:0a:b5:11:d3:cc:d2:
                    85:f4:70:69:8d:d4:db:3e:13:d3:5c:2d:1d:e8:59:
                    c1:57:68:6f:20:fb:73:0a:ca:e6:ce:bb:1a:dc:c9:
                    a8:61:20:63:e1:9e:43:9d:28:95:af:2f:bf:8a:1f:
                    99:8b:c6:6c:27:b1:e2:49:57:52:eb:16:2c:f7:68:
                    39:f1:22:83:ad:1d:93:1b:b5:bf:c9:2e:5a:21:4a:
                    73:5e:be:d6:18:e9:81:54:79:1a:96:22:3f:07:b6:
                    85:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2C:C6:FC:46:53:DF:8C:52:C5:64:E5:34:F5:D2:B6:B6:23:12:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/881374d0-6277-32be-9a37-ff68774a50cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:9d:ac:24:2d:bb:d6:82:ba:40:c7:62:f2:c5:4c:31:bf:a7:
         6a:48:3d:f8:b8:ae:ee:65:85:ea:2c:7e:2e:b4:38:b6:9d:0a:
         15:ad:7b:00:e4:2c:4e:2a:32:96:05:44:ce:be:5f:eb:7d:bf:
         ec:6b:f3:ea:62:84:69:9c:7f:4e:4f:f3:eb:17:a9:f3:48:db:
         6b:ac:e2:dd:63:94:0d:41:fa:9a:2d:1f:4b:3f:99:93:93:73:
         fb:a9:60:ff:11:6e:d7:c1:ad:17:7f:e6:98:25:46:45:5b:a1:
         01:ae:99:f2:10:8c:93:d0:65:25:2b:fb:20:4d:dd:98:ab:f1:
         a6:f7:d8:0e:8b:47:83:04:5e:d6:33:86:ae:2a:5e:33:d4:ce:
         d0:98:11:33:e2:03:2a:2c:26:d7:bf:a0:3d:e5:d3:13:b6:a5:
         12:c4:58:76:8c:7e:4d:7b:b3:21:e2:e6:f9:88:a6:c1:18:ed:
         55:f3:c5:49:73:6a:c0:cf:dd:bd:97:0c:66:9d:25:66:ab:93:
         6c:55:10:54:56:d4:22:ad:f3:81:2f:ed:d1:e0:33:97:57:6a:
         85:b0:ee:c1:7b:aa:5f:ed:d8:f5:48:79:7b:93:74:79:e7:61:
         be:52:d8:3e:24:da:88:81:59:44:65:ba:43:d3:3d:9e:30:ba:
         d5:ab:0f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----