Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56f300ea-addf-409a-af30-1754486b87bf/349734c2-f062-3b56-a2fe-c1e51ce99f55.roa
File:                     349734c2-f062-3b56-a2fe-c1e51ce99f55.roa (raw, json)
Hash identifier:          EM3FPCKc7mtXX+YUyhey15hd4OYO/4hKRNCCRF6wGMI=
Subject key identifier:   5D:58:E5:29:D1:4A:75:1C:1E:E6:7D:7E:43:4D:1E:AA:C0:1E:13:41
Certificate issuer:       /CN=56f300ea-addf-409a-af30-1754486b87bf
Certificate serial:       010D0C9F432858376F664697D4BB0412DF7ACBB0
Authority key identifier: 61:85:C0:72:2F:8F:E0:EA:99:89:A0:BC:9B:1B:D7:81:6D:F0:C5:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56f300ea-addf-409a-af30-1754486b87bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56f300ea-addf-409a-af30-1754486b87bf/349734c2-f062-3b56-a2fe-c1e51ce99f55.roa
Signing time:             Mon 28 Sep 2020 04:00:00 +0000
ROA not before:           Mon 28 Sep 2020 04:00:00 +0000
ROA not after:            Sun 01 Jan 2023 05:00:00 +0000
asID:                     394006
IP address blocks:        192.149.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:6f:66:46:97:d4:bb:04:12:df:7a:cb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f300ea-addf-409a-af30-1754486b87bf
        Validity
            Not Before: Sep 28 04:00:00 2020 GMT
            Not After : Jan  1 05:00:00 2023 GMT
        Subject: CN=2a575a63-a857-450a-b7d4-e6236d827848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:43:53:73:c3:b9:36:8f:9d:bc:2b:8c:31:d7:
                    d7:e5:ba:75:c6:18:ae:f9:37:75:fc:a9:5b:c0:e3:
                    82:09:5e:2e:44:80:b7:d0:2c:f3:b7:fc:da:4b:d4:
                    65:65:fa:07:68:63:b6:a4:3c:2b:d1:af:61:75:35:
                    c4:a1:14:e8:f2:3b:1b:cb:1b:75:bb:6e:da:57:e3:
                    71:17:76:09:b5:57:4d:07:93:4d:ef:3e:9a:9b:b4:
                    7b:4f:fc:cd:f5:16:19:3f:8f:c9:ce:25:d9:15:28:
                    25:ec:68:37:9f:38:d6:dc:a1:64:a2:54:90:6b:02:
                    70:c6:79:a4:cd:dd:2f:f3:86:cd:be:df:b8:7a:64:
                    23:31:b3:b3:4d:6a:e8:7d:97:58:cb:cd:7e:5a:13:
                    ae:d4:2a:a5:bd:9b:31:f8:fb:c6:41:cf:41:db:a7:
                    af:47:eb:28:51:71:ae:f5:4e:5a:47:8a:8a:ae:90:
                    5c:35:36:5c:4f:dc:aa:6d:8a:b2:35:18:71:5e:28:
                    15:ff:63:39:1a:c5:8d:bf:98:32:10:1a:58:ee:f0:
                    83:cf:25:49:1a:8e:c5:5a:c9:4d:f0:22:a2:05:fd:
                    c5:6e:63:5e:cb:8a:05:2b:7b:6d:85:50:5b:1c:20:
                    32:13:10:f0:99:28:45:be:91:34:a4:e7:a0:3a:a9:
                    29:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:58:E5:29:D1:4A:75:1C:1E:E6:7D:7E:43:4D:1E:AA:C0:1E:13:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56f300ea-addf-409a-af30-1754486b87bf/349734c2-f062-3b56-a2fe-c1e51ce99f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56f300ea-addf-409a-af30-1754486b87bf/56f300ea-addf-409a-af30-1754486b87bf.crl

            X509v3 Authority Key Identifier:
                keyid:61:85:C0:72:2F:8F:E0:EA:99:89:A0:BC:9B:1B:D7:81:6D:F0:C5:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56f300ea-addf-409a-af30-1754486b87bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:10:62:a2:60:66:22:26:65:54:42:80:d6:56:66:d6:2a:e3:
         a2:fd:32:91:2d:75:74:2b:5c:8d:07:31:14:8c:95:17:68:15:
         81:09:45:29:8c:ac:55:78:4d:fb:5c:ed:6a:cd:f0:4e:47:ec:
         80:31:72:1c:b2:f4:30:df:ce:db:88:de:4e:e6:d4:24:a9:49:
         ec:74:dc:1c:de:6e:19:e0:6b:ab:ca:b1:65:79:45:64:78:bd:
         45:62:44:26:f8:b3:60:be:ba:a1:a2:7c:30:75:1b:6d:5d:9e:
         06:d5:61:f2:65:64:e4:e5:c9:0b:eb:16:39:aa:4c:70:64:c8:
         90:ad:51:3f:4f:d1:28:c4:05:f5:e5:71:cb:60:42:d1:6c:fa:
         14:e4:e0:58:4c:45:5b:bd:e6:7d:2b:83:84:7a:58:9d:6e:99:
         94:3a:09:26:82:ad:2d:37:63:49:c4:84:96:05:c2:32:2f:e6:
         0c:90:f5:e7:55:60:80:8a:e9:7d:f7:0c:ed:d0:e0:ae:1e:37:
         e6:36:f4:be:f0:da:7f:95:6b:05:fd:37:00:e2:f9:c3:fe:c7:
         c5:9d:e7:0c:73:8d:2f:1a:d5:f7:10:bc:2f:9e:05:51:0b:89:
         9b:11:91:85:8e:92:cc:eb:82:d2:c7:eb:05:cf:21:42:82:e3:
         5c:32:5a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----