Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e5ec855f-b7a9-328b-b435-c682962611a3.roa
File:                     e5ec855f-b7a9-328b-b435-c682962611a3.roa (raw, json)
Hash identifier:          TfBxJIAA1cxy1t7lvbdT7jXRChbAEyIetkfWddsp6Ao=
Subject key identifier:   69:2D:73:ED:10:27:00:02:5F:E3:31:7B:A0:7E:2A:B6:80:CA:82:76
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837BD9F72B01D9ABD048F4D8850
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e5ec855f-b7a9-328b-b435-c682962611a3.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 29 Jan 2023 05:00:00 +0000
asID:                     25668
IP address blocks:        207.34.168.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:bd:9f:72:b0:1d:9a:bd:04:8f:4d:88:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Jan 29 05:00:00 2023 GMT
        Subject: CN=d87c4b64-6045-4972-a300-bc4cc7733248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:10:af:a4:34:51:8d:34:9b:a0:f7:aa:5a:df:
                    c0:d6:f6:50:07:bf:c9:0a:6a:90:02:a2:6e:bc:9f:
                    41:52:84:6d:29:85:4f:f8:44:2b:95:4a:9e:7b:8d:
                    fb:81:d7:88:cc:5c:85:85:88:01:8d:a9:b6:10:99:
                    d9:9a:e5:a8:35:cd:42:56:57:6a:08:f1:d0:f1:ff:
                    23:b0:e9:67:40:42:94:d5:ac:b2:2c:b3:ff:7c:ef:
                    84:aa:c2:f4:9f:21:14:da:b5:7b:38:5b:3e:ae:6d:
                    30:c8:38:09:6e:24:37:25:8b:8c:51:a2:04:bf:fe:
                    8b:b0:92:24:bd:a5:c6:35:99:90:33:74:b3:d0:c4:
                    3e:36:23:20:4b:57:db:e1:76:f0:d4:7f:37:74:15:
                    6d:a5:67:f3:fb:b0:e3:58:b6:7c:19:af:64:42:d9:
                    38:9a:4a:20:12:2c:b1:21:d8:90:50:18:aa:a1:fc:
                    59:ea:65:92:2b:ec:54:ed:11:8d:fd:e3:f5:ff:32:
                    14:44:a7:15:d9:df:8d:16:d4:a3:a0:d1:9d:84:d8:
                    55:4b:9e:63:23:15:79:da:f9:91:09:14:e6:01:45:
                    ae:29:62:9d:9f:96:db:e5:d5:da:f2:45:0f:48:b4:
                    2e:f8:be:05:5d:ad:c2:01:45:46:71:4f:fe:10:bf:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2D:73:ED:10:27:00:02:5F:E3:31:7B:A0:7E:2A:B6:80:CA:82:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e5ec855f-b7a9-328b-b435-c682962611a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:57:ee:02:4d:3e:71:d6:b1:52:9f:ff:24:78:24:b5:d8:67:
         8b:7d:51:e7:62:65:28:b7:bc:a8:64:30:8f:42:bd:a2:60:55:
         16:22:c4:6c:96:1c:e6:de:3d:a2:8e:0e:e5:0b:05:6f:74:48:
         1e:4a:c0:a5:ee:12:df:cd:f9:20:65:ff:c4:d7:5d:a0:20:c1:
         4a:ea:71:b6:a7:01:a8:ae:0a:e9:3a:54:3e:d7:85:11:dd:49:
         50:5b:9a:89:dd:f4:17:b3:ec:78:c6:8b:c4:72:9e:27:c7:eb:
         a8:03:9f:88:0f:f0:9f:5c:a5:10:85:b5:23:f1:bb:ed:40:18:
         0f:9f:8a:f3:4c:05:82:a1:5a:81:77:44:b7:a5:35:e9:36:11:
         51:46:00:f5:86:95:b8:6a:87:70:3b:e7:71:06:c5:7f:33:5f:
         1d:8b:fb:61:b5:8c:59:c0:16:ea:00:97:45:c7:c5:c9:34:20:
         ae:51:55:1c:1e:aa:2e:84:bf:3a:ca:db:51:46:ce:f4:d9:de:
         b5:f9:2e:42:d7:9a:79:ec:cf:ba:31:96:69:95:15:34:48:86:
         f8:1b:39:fe:b9:25:66:e1:e3:9c:51:68:58:36:39:1a:e2:ac:
         2e:0c:a6:c0:30:49:bd:53:cc:b7:e5:99:54:78:67:0d:bd:27:
         ce:9f:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----