Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0d6cb9f-bf3e-34c8-9ab7-d39d4fc5d946.roa
File:                     d0d6cb9f-bf3e-34c8-9ab7-d39d4fc5d946.roa (raw, json)
Hash identifier:          h8GnOcjb883oz0tvnh3H7+cyV71ztDq71PWm2C4WxKA=
Subject key identifier:   F5:7E:5F:D1:D4:2E:19:C9:6C:82:29:F5:A1:75:4F:BF:63:26:40:91
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D7060495D9E72099779646C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0d6cb9f-bf3e-34c8-9ab7-d39d4fc5d946.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        208.38.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d7:06:04:95:d9:e7:20:99:77:96:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=9bfd5ab1-d714-4fe7-ad7c-5b993cb5b94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:71:d1:bc:64:51:77:df:4a:30:2c:08:d3:
                    d7:3b:27:91:94:34:12:ef:62:ac:b5:59:df:a8:c1:
                    63:1b:4c:4f:b0:1d:8f:7f:aa:13:2f:b0:eb:76:52:
                    d8:c8:1f:19:60:16:e8:5b:40:03:57:fc:64:aa:ca:
                    b9:5c:71:45:d7:a2:e9:5c:bf:c2:8e:0d:94:51:48:
                    7a:d6:f5:e7:46:94:9e:bd:5f:3d:7e:a8:3e:81:85:
                    97:d9:a3:f9:15:2d:65:ab:4a:eb:58:6b:31:2d:a7:
                    70:01:df:22:53:0a:4c:69:a5:ed:75:82:b2:aa:2e:
                    45:e2:7d:48:fd:5b:01:a8:50:b2:88:a6:b1:c5:ad:
                    3b:c0:e7:4d:be:54:5d:d3:85:40:b1:c9:7b:89:d1:
                    13:33:40:35:8e:2e:ba:82:39:ec:26:53:60:07:b2:
                    d5:7e:5e:64:5e:be:56:95:e7:99:1e:1c:53:a1:64:
                    b4:91:f3:3d:b2:a3:9c:e0:53:f5:b3:8f:00:3a:b9:
                    8e:a3:c3:10:90:b8:0c:68:79:4c:0a:9e:67:13:d5:
                    05:e8:01:5d:31:b3:96:4d:40:e3:9b:4d:d2:27:cc:
                    7a:87:ff:29:2e:92:26:c6:31:20:a3:0f:ab:ca:73:
                    d4:a2:d6:72:a4:a8:a5:11:42:1e:cb:d0:08:6a:76:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7E:5F:D1:D4:2E:19:C9:6C:82:29:F5:A1:75:4F:BF:63:26:40:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d0d6cb9f-bf3e-34c8-9ab7-d39d4fc5d946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:69:f5:73:22:c7:14:8a:cb:bc:1c:96:e4:86:74:5c:47:1b:
         3f:03:97:a3:2b:9c:f6:0f:fa:87:42:1d:5b:c8:0c:73:39:a1:
         25:01:ff:cb:12:ef:7a:e2:bd:2d:23:c4:72:e2:95:3d:4a:f4:
         76:40:dc:64:5c:02:16:4c:9b:ae:79:ab:d6:0c:87:89:fd:69:
         26:c8:65:62:f5:02:f6:8e:e4:bb:6d:7e:39:e1:b5:19:11:b6:
         63:3e:c4:8e:19:fb:29:36:17:c8:62:2f:c7:a1:7f:a4:b3:72:
         05:b0:0d:1b:27:e5:41:2b:a1:be:8f:0c:7b:6a:2a:95:bc:1b:
         2a:1e:b2:5f:e4:02:f1:a0:08:e5:8a:46:4a:76:1b:a9:66:78:
         5e:a9:b7:5f:82:9d:a1:65:47:02:e5:1d:5b:e2:bc:5a:2d:a2:
         95:f6:1b:44:66:bb:bb:3a:de:1d:b6:dc:a3:21:0e:75:d1:0e:
         48:fb:8b:19:93:eb:df:6e:3f:5e:45:a8:47:c6:93:0e:5f:2f:
         fc:52:30:d1:de:a9:db:83:68:40:19:a1:e1:2a:b0:2e:ad:63:
         bf:17:61:b6:a1:fc:59:76:7d:a4:dc:93:25:d4:71:7f:c2:72:
         bd:36:18:e7:c9:59:46:96:84:db:48:12:ac:20:ba:35:1b:09:
         f5:6e:3f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----