Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d72c53b0-9742-3f41-8a6a-ab89292176d7.roa
File:                     d72c53b0-9742-3f41-8a6a-ab89292176d7.roa (raw, json)
Hash identifier:          yiVsd5IHKxRd1fJDl4pDqA5BZsepOE2A9+YQyLWZdsQ=
Subject key identifier:   0F:AF:D9:9B:8F:AA:AA:BB:67:88:93:6A:BD:96:E7:F1:99:44:3E:9B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837E4E19CD1F14CFE2F54C5F7C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d72c53b0-9742-3f41-8a6a-ab89292176d7.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 12 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        209.115.240.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:e4:e1:9c:d1:f1:4c:fe:2f:54:c5:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2023 GMT
        Subject: CN=acd0cae9-18ab-4116-83e9-c0e0acb2d7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:25:a3:bd:ef:44:5f:2a:8a:5f:b2:16:1e:cb:
                    3a:ad:35:5c:74:9b:9f:0d:74:dd:70:fc:0b:60:19:
                    65:dd:01:1f:9b:43:85:7f:de:04:3e:38:78:f4:88:
                    dd:b9:4d:f3:9c:a6:8a:a0:aa:3f:c8:6d:15:46:4d:
                    b0:c2:ce:12:1d:bb:64:8a:94:45:51:d1:b6:66:25:
                    0c:2c:1c:70:d2:f9:74:a4:74:98:08:7e:df:b0:76:
                    3f:8d:56:cb:bb:f8:13:25:74:5c:bc:3b:5e:ac:21:
                    e9:4a:dd:95:51:6d:18:dd:84:0c:9e:f0:ba:03:b1:
                    3f:95:5c:fa:8e:e4:75:36:c1:de:4d:27:62:04:6d:
                    f9:0a:ef:c6:2b:00:eb:ea:3f:0f:fb:54:ff:2e:cc:
                    71:57:c5:a4:c7:91:aa:ad:de:84:c1:27:f5:14:5d:
                    28:e3:bd:f3:88:2e:f3:2a:ea:2d:61:59:ce:c9:f2:
                    a1:7f:74:1a:7a:5d:25:cc:b7:dd:e0:1e:c8:15:db:
                    22:c7:d9:31:97:fd:17:5b:09:ab:41:04:17:d9:c6:
                    f9:ed:90:44:ff:6c:eb:42:73:1a:08:1f:0f:ba:88:
                    f1:ef:4f:e5:64:20:d4:f5:7d:ca:59:0a:3c:26:e4:
                    1c:cf:ce:9b:17:38:5b:a4:c7:f1:31:e9:6e:a4:e1:
                    6c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AF:D9:9B:8F:AA:AA:BB:67:88:93:6A:BD:96:E7:F1:99:44:3E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d72c53b0-9742-3f41-8a6a-ab89292176d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.115.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:82:8c:e5:c5:90:bd:22:51:6f:4d:f1:1e:3a:86:4d:a6:b1:
         42:a8:8d:0f:db:c4:c6:1b:ef:a1:ff:90:1c:52:e9:ff:be:04:
         84:cc:0d:10:8e:f6:5d:a2:62:43:35:d4:d5:14:b2:5f:31:1b:
         7e:d7:bf:c1:65:52:0c:22:49:57:47:09:5c:fa:f3:43:96:db:
         9c:29:5e:2b:af:26:dd:5b:8e:32:89:ad:80:c6:7d:e2:7f:a0:
         bb:b1:f2:48:f1:51:5a:14:82:0c:61:dc:d6:3a:b9:44:f5:72:
         75:06:49:98:be:62:07:c8:92:48:90:46:6e:8d:93:79:0b:9e:
         7b:df:b4:33:c9:79:ac:2a:0c:ad:4a:b1:e8:a5:ab:33:c7:ef:
         d9:01:c2:88:ed:cb:cb:60:21:9e:c9:e7:b5:66:c3:9b:24:87:
         38:bc:75:92:9f:9b:6c:96:26:2e:90:f5:ad:7d:a0:30:d1:7c:
         85:6f:c4:d8:d9:59:0f:3d:87:20:94:c2:13:1f:ec:06:96:b7:
         91:69:35:13:c7:15:ae:28:cd:75:f6:4b:5b:a9:9b:bc:59:e0:
         d0:f5:c4:e5:38:cd:5f:15:23:6a:1d:26:4c:e8:a7:59:90:f2:
         77:db:ca:b5:37:e7:e8:68:b5:85:fb:ed:16:ff:02:58:b6:e8:
         b5:b6:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----