Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/0d456e6c-e1b7-39fe-a0cb-b26dc73973cb.roa
File:                     0d456e6c-e1b7-39fe-a0cb-b26dc73973cb.roa (raw, json)
Hash identifier:          kFy4HK7zgqky1FCBmLT+n1GPi4H1gaCTyl169pmEEoM=
Subject key identifier:   56:F3:FE:94:FC:79:E6:51:29:D0:63:99:23:08:17:3E:09:5F:89:21
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F43285837C61DC40373CDD4BA7E420400
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/0d456e6c-e1b7-39fe-a0cb-b26dc73973cb.roa
Signing time:             Mon 26 Oct 2020 04:00:00 +0000
ROA not before:           Mon 26 Oct 2020 04:00:00 +0000
ROA not after:            Wed 01 Feb 2023 05:00:00 +0000
asID:                     16552
IP address blocks:        208.94.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:c6:1d:c4:03:73:cd:d4:ba:7e:42:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: Oct 26 04:00:00 2020 GMT
            Not After : Feb  1 05:00:00 2023 GMT
        Subject: CN=c334a067-5842-4b85-9e16-3b6c4a6a8b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7b:b4:13:44:97:a1:d4:41:e5:d9:e6:de:a4:
                    56:bc:7c:9c:7a:bf:83:e2:9d:ca:c1:67:61:a0:9a:
                    64:6b:07:bc:4a:1e:b3:47:5b:d5:b3:b5:e7:a7:7c:
                    e7:2c:4a:2f:89:58:6d:9f:4a:ae:d6:c8:ef:80:36:
                    39:26:b2:d5:c0:9f:ce:68:c4:34:93:2d:ba:88:8b:
                    d8:b5:bb:28:7d:af:d7:16:84:fc:bb:ea:e5:88:ea:
                    2c:27:57:3c:d3:e4:c5:69:02:8a:48:70:4b:ab:a5:
                    b2:d2:92:cd:6b:3f:d3:2f:af:91:ee:e8:be:4d:df:
                    1d:f4:58:5c:2f:7b:16:48:9c:39:44:9a:ef:8c:ef:
                    00:08:64:74:54:ca:3a:31:ae:3e:0a:5c:5a:13:2a:
                    7d:71:ea:8c:1c:3c:3d:8b:6e:3a:fb:9f:9e:06:17:
                    3f:61:02:5a:82:75:c7:e1:e4:13:7a:58:19:e2:42:
                    d6:9d:4e:30:fb:43:57:a9:b2:f9:f7:7b:8b:80:20:
                    cb:f2:05:1b:dd:58:21:79:e3:a9:7a:94:bd:ac:0c:
                    1e:3a:17:e3:b6:7c:d4:7e:30:a0:97:88:bb:8b:03:
                    6d:e7:31:f7:08:c0:81:0e:97:df:99:98:bd:da:fa:
                    c5:4e:0d:e2:9b:46:5a:0d:88:0d:65:3e:d7:6f:b7:
                    df:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F3:FE:94:FC:79:E6:51:29:D0:63:99:23:08:17:3E:09:5F:89:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/0d456e6c-e1b7-39fe-a0cb-b26dc73973cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a2:1d:a4:d9:18:36:64:f4:8e:3b:80:da:21:9c:0c:c9:bc:
         55:59:ba:aa:58:ee:32:dd:16:ae:84:5c:ef:60:98:ed:f2:c9:
         f0:ad:d9:2a:20:ab:a4:f5:5a:ab:f0:c6:80:e1:2e:75:ec:df:
         5c:8b:73:c7:e0:ba:74:55:21:8d:da:32:1d:46:e2:5e:74:e1:
         8e:c9:2c:f9:94:7c:af:ff:36:ee:b4:f0:5d:ec:97:c0:71:54:
         c7:85:e0:49:7d:23:49:e9:3c:3a:2b:5b:f4:57:36:c8:94:6b:
         ff:72:0f:26:52:de:ef:20:8c:76:65:81:09:70:c7:e5:f6:72:
         32:8f:cc:cf:bb:bb:27:ad:1a:93:a5:24:f5:4d:ca:35:30:fe:
         73:46:1b:59:f4:f8:fc:19:c7:6a:e5:2f:bf:56:14:a3:e2:d8:
         ef:70:00:a9:8e:05:90:d0:d2:30:c3:ab:4b:56:6d:7f:e7:51:
         10:ad:c6:b0:61:b0:73:7e:f9:51:58:fe:f8:ae:5c:84:51:31:
         24:1b:4a:15:08:94:0b:3f:7a:7b:18:67:b2:f1:de:0c:24:3b:
         0f:1d:a1:66:82:e6:e8:b3:5a:c9:bf:1c:37:fd:fb:eb:3d:47:
         98:33:c7:f4:25:d4:7e:79:78:42:bf:e6:49:1b:c2:00:32:71:
         59:52:4a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----