Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c048ba29-0c53-3550-852d-b98d6f5320f9.roa
File:                     c048ba29-0c53-3550-852d-b98d6f5320f9.roa (raw, json)
Hash identifier:          pdAh0WAxy83v/kdzFQMLgEhXf6PmMKg3h02mKQcXynM=
Subject key identifier:   EE:75:87:62:DE:43:28:19:56:BE:DF:00:00:E1:8E:43:F8:03:66:21
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837BDB99A7202048A45A7E41F00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c048ba29-0c53-3550-852d-b98d6f5320f9.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 29 Jan 2023 05:00:00 +0000
asID:                     21723
IP address blocks:        208.181.196.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:bd:b9:9a:72:02:04:8a:45:a7:e4:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Jan 29 05:00:00 2023 GMT
        Subject: CN=1ace5d9e-79bd-488d-8739-d46685f1a7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:20:49:9b:ed:51:51:a6:fe:50:45:98:57:
                    2a:ad:8b:d8:f4:92:17:d7:de:2f:ac:f8:86:57:7c:
                    e5:a0:ea:41:eb:e2:a6:3f:c9:a8:ca:49:1a:98:f9:
                    c8:5d:05:37:b1:8e:97:74:0b:7c:c4:02:05:d2:e1:
                    c8:1d:14:71:4a:36:5b:08:de:28:f5:ae:30:25:91:
                    7c:25:e2:2a:93:85:3d:d0:ce:80:74:c9:f7:da:9d:
                    92:e0:ec:38:35:10:0d:f1:97:64:53:93:85:c5:b0:
                    a3:3e:c9:bf:d1:b7:2c:62:68:ca:4a:8d:d6:5f:dc:
                    8c:40:2c:a4:88:41:e3:74:b8:72:55:1e:32:8f:61:
                    a7:45:a8:a0:27:85:d4:ea:2d:25:73:38:73:dc:e3:
                    ce:67:80:25:29:38:d0:f5:e2:ae:08:66:9c:6b:c3:
                    87:5c:4f:75:ac:e5:89:12:4f:df:a4:ca:0f:20:03:
                    d6:0f:1e:b7:e2:54:be:6f:e5:65:cb:a6:23:7b:b9:
                    21:79:00:f1:46:58:b8:b1:7d:87:31:b9:36:f2:f9:
                    44:4d:c9:75:fd:a8:03:bd:b1:76:95:fa:c7:e0:00:
                    05:f6:db:bf:90:1f:46:68:2d:12:66:bf:0f:38:a3:
                    2a:2d:f7:22:f6:10:51:b7:c4:11:eb:fe:b2:d1:43:
                    1f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:75:87:62:DE:43:28:19:56:BE:DF:00:00:E1:8E:43:F8:03:66:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c048ba29-0c53-3550-852d-b98d6f5320f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:9e:82:98:16:5b:d5:a5:a3:d4:10:de:f3:68:f4:0e:0d:85:
         7c:b2:79:57:0b:f5:7a:62:33:1b:c5:bd:2c:aa:ae:13:14:3d:
         50:74:62:f0:80:00:24:8f:c0:8e:33:97:60:c9:06:ca:c4:6e:
         da:ae:f5:4f:dc:d7:0d:92:cd:87:a9:9b:25:a6:e7:33:e6:e6:
         57:f3:f4:25:47:2d:48:0e:e4:85:40:7a:53:33:b4:0d:f1:ee:
         81:49:18:84:82:33:52:74:fc:a6:62:a5:40:71:31:e3:ec:97:
         29:b3:b3:df:14:d8:79:b6:8f:5a:7b:1b:81:48:e9:82:08:1f:
         f3:10:8b:74:84:c0:df:93:ce:8c:0c:90:a5:66:df:37:b6:81:
         17:54:99:7a:b4:64:5d:85:18:4b:6a:e9:15:9c:02:6a:67:67:
         84:a1:6d:95:70:97:ac:16:89:42:9d:1e:37:fa:fd:bc:1c:da:
         a7:9a:d0:39:f2:45:89:45:3b:ec:18:84:8d:cf:7a:55:46:ab:
         ef:b6:17:2e:8c:eb:61:e6:6f:35:9e:e1:3e:c1:95:aa:f9:75:
         46:bc:9f:c2:04:f1:8e:81:b1:e6:f3:2d:03:4e:64:27:d2:f9:
         fe:28:c4:f8:1b:7b:0f:6c:76:07:f9:07:7f:f0:14:c4:fc:2c:
         db:cc:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----