Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e705828d-f7bb-3738-853d-1d65be2497b0.roa
File:                     e705828d-f7bb-3738-853d-1d65be2497b0.roa (raw, json)
Hash identifier:          JCnTApEisbtH6kFx9Lmthmr+8KBKhJK7imZArzcpBj8=
Subject key identifier:   7B:66:C0:51:D4:7B:3D:E2:AD:22:11:B7:D0:5C:2A:64:E1:07:AB:33
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D706A6A34142D96FF0018980
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e705828d-f7bb-3738-853d-1d65be2497b0.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        23.16.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d7:06:a6:a3:41:42:d9:6f:f0:01:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=3eb3042f-ac6e-40e4-973b-11a945343f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ea:4c:ce:64:8e:f0:40:60:19:0f:6d:52:b5:
                    52:32:59:7e:93:5d:a9:72:b7:6c:e7:56:37:b4:4e:
                    c3:c6:b8:46:fb:a1:be:25:ff:e7:4b:df:70:6d:89:
                    7a:d4:bb:ec:8c:ab:15:5f:1a:4b:9c:ca:d6:4c:a7:
                    fe:88:70:b3:e7:8e:f9:c9:f5:14:17:e7:b9:a5:bd:
                    77:15:38:99:56:89:10:a7:37:bc:62:ad:79:18:41:
                    a0:d4:bb:9e:da:2d:11:3b:c1:20:a3:38:69:e0:5f:
                    2e:d1:79:e0:3c:a7:9f:4a:2c:2b:06:96:e3:9d:39:
                    2a:62:f7:98:6d:76:18:1d:10:ad:cd:7d:21:9a:63:
                    57:03:b0:c5:8e:20:5e:b0:d7:5c:a7:4d:05:7c:4d:
                    46:42:c7:5d:7c:1c:10:b5:c7:db:03:88:7d:54:70:
                    ae:b5:57:fe:17:fe:75:bd:9d:ae:61:8e:e2:d6:58:
                    42:8a:ee:90:14:e8:88:05:19:c4:fa:bb:07:56:cf:
                    64:cd:41:34:4d:1e:2c:7f:a5:6d:38:08:22:de:77:
                    f5:d1:39:99:e7:77:b7:5e:7d:08:4c:7f:51:97:58:
                    cf:ad:83:94:2a:be:2a:45:13:2f:f3:f8:54:59:6d:
                    b3:13:9e:bb:95:e1:94:1c:24:b1:85:d7:ae:95:cd:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:66:C0:51:D4:7B:3D:E2:AD:22:11:B7:D0:5C:2A:64:E1:07:AB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e705828d-f7bb-3738-853d-1d65be2497b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.16.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:5a:73:30:a8:ea:c7:4c:2e:b3:fc:ff:30:80:c6:25:db:1a:
         37:b0:47:0c:e2:f2:27:d3:e0:ed:77:c1:bc:82:3e:8e:b0:78:
         92:f1:24:36:d0:62:6f:c2:9e:8d:06:d3:b3:54:b0:6a:d7:15:
         40:4c:5a:d4:a1:cf:bc:bb:dd:e6:df:cb:ce:24:30:13:a4:b6:
         e5:21:6c:60:bc:f6:c4:9b:ea:7c:4d:61:f9:52:a1:15:9e:ee:
         d5:b5:64:cd:72:37:2b:b0:99:13:fb:68:7b:b6:0a:ab:3a:fa:
         4a:fb:4a:9a:7d:cd:39:d1:d1:c9:33:ee:e6:f8:83:57:7c:d0:
         a3:b2:5a:21:ed:a3:bf:cd:62:0f:8f:e8:a5:ae:72:e0:43:95:
         2a:6e:fb:05:51:ca:82:de:2a:b2:2b:f5:96:ce:4f:8f:46:91:
         be:c9:2b:e7:30:a6:65:59:16:f9:a4:04:07:7d:b8:61:bd:9c:
         9c:7e:e2:e8:15:8c:20:66:86:fa:e3:66:79:39:ce:84:53:82:
         1c:a0:ec:cd:01:87:d8:cb:0e:db:29:42:82:63:eb:d1:2f:58:
         be:e4:5e:d9:8d:fa:cd:fe:0f:9a:fa:61:60:eb:be:bb:98:a4:
         57:7c:f9:38:b8:ff:c4:79:12:21:42:bc:c2:8e:c1:f4:98:43:
         64:cf:5a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----