Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/3d5ccc9f-c717-3573-9f7c-11974b89afdd.roa
File:                     3d5ccc9f-c717-3573-9f7c-11974b89afdd.roa (raw, json)
Hash identifier:          XIJDMklrkUMtzk1j0tohGBGmPMYNHLKHYJZHQAkAgTs=
Subject key identifier:   F7:6B:82:A4:53:F5:57:29:7A:68:AB:57:71:29:82:41:55:AB:CE:86
Certificate issuer:       /CN=57823265-9949-4030-be09-5aebdf77ae5c
Certificate serial:       010D0C9F43285838E7D02FEB9ADE0CF0859D9400
Authority key identifier: 1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/3d5ccc9f-c717-3573-9f7c-11974b89afdd.roa
Signing time:             Mon 02 Nov 2020 05:00:00 +0000
ROA not before:           Mon 02 Nov 2020 05:00:00 +0000
ROA not after:            Tue 16 May 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        216.157.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:e7:d0:2f:eb:9a:de:0c:f0:85:9d:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57823265-9949-4030-be09-5aebdf77ae5c
        Validity
            Not Before: Nov  2 05:00:00 2020 GMT
            Not After : May 16 04:00:00 2023 GMT
        Subject: CN=1db0e67d-d354-44ba-acdf-404492701475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d9:d1:23:33:9f:b4:98:0d:ee:3d:3e:74:6b:
                    3e:79:b6:3c:77:33:ec:04:d2:9a:70:eb:fe:14:8e:
                    71:17:34:70:1a:64:3d:1b:8b:a9:5d:97:de:ed:b4:
                    16:b3:1f:c6:fc:d7:76:75:29:4c:72:51:56:85:6c:
                    fc:71:5d:2d:41:a6:79:e5:90:4a:14:09:f8:e7:39:
                    99:60:17:3c:d9:db:18:fc:29:90:65:e6:16:30:7b:
                    32:ab:88:fd:ee:3b:e8:6a:ed:10:dd:89:80:10:07:
                    b5:82:31:d2:6d:1e:d4:2b:de:72:1e:99:65:42:7d:
                    c2:d5:6f:2e:cb:58:e1:1e:79:7c:d0:d2:c4:f1:50:
                    3e:bb:0a:65:96:30:a7:08:b3:71:0f:4c:7f:4c:8c:
                    2c:7f:f1:50:9c:79:a5:87:54:47:63:3d:52:4f:e4:
                    67:94:48:f0:33:e9:7d:d4:82:78:a2:c6:89:b4:f8:
                    c5:24:f0:3b:a9:20:c3:58:73:cf:8d:ac:0f:e1:da:
                    e7:13:e3:b0:3c:86:27:31:9d:99:7b:e5:ad:12:e5:
                    32:7d:53:52:04:19:01:80:cc:c0:50:4f:87:69:74:
                    fb:0e:c8:c4:9b:c6:fe:a9:10:50:2f:7d:0c:ff:79:
                    ce:a1:41:8c:58:e1:4f:43:53:41:75:9f:e1:6c:3f:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6B:82:A4:53:F5:57:29:7A:68:AB:57:71:29:82:41:55:AB:CE:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/3d5ccc9f-c717-3573-9f7c-11974b89afdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c/57823265-9949-4030-be09-5aebdf77ae5c.crl

            X509v3 Authority Key Identifier:
                keyid:1C:6D:47:DA:B4:8D:E7:E4:D7:89:61:7B:B7:05:BD:DB:14:10:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/57823265-9949-4030-be09-5aebdf77ae5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:6c:96:9f:12:43:e5:ae:24:a6:1c:a8:08:0f:07:60:29:31:
         96:d1:70:54:8d:f1:da:72:c7:36:59:cf:7a:03:0f:16:c9:0d:
         9a:54:ac:55:03:cd:59:5a:b4:74:c0:47:a1:51:ae:76:28:77:
         ab:c5:86:72:9c:1e:49:8d:af:be:15:1d:71:37:d2:47:40:1d:
         0e:6a:81:a9:ed:d8:ea:0b:4a:76:36:39:1b:79:b4:b3:46:e9:
         9e:fd:e2:a1:5d:4e:ae:e7:ad:bf:6c:ae:b0:09:13:44:2b:b6:
         4f:cb:2f:37:f7:6b:f7:e8:66:ab:0c:05:e3:8f:df:3b:25:f6:
         d7:55:52:86:1f:bd:c1:c2:80:f2:df:93:9e:da:60:c1:cb:68:
         32:10:1d:83:e1:93:44:e4:22:a1:7c:55:d7:19:d4:4a:99:fd:
         47:c8:b0:fe:33:38:c3:41:47:b4:fe:a1:79:11:3e:76:1a:f2:
         74:26:e4:d0:cf:df:06:f9:87:dc:18:57:d9:86:0f:85:44:d2:
         54:39:41:e9:fa:60:bc:64:6e:f7:b0:ca:12:46:5b:3c:ef:76:
         12:35:a0:c4:c0:77:86:31:d6:e0:dc:d3:78:24:44:52:67:27:
         f5:86:23:7d:fc:e9:4c:bf:8b:d5:2d:82:0b:35:ec:ea:00:1f:
         e2:a2:af:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----