Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/d0b37ecb-d4f0-3c52-be79-fae707387cbd.roa
File:                     d0b37ecb-d4f0-3c52-be79-fae707387cbd.roa (raw, json)
Hash identifier:          wpDsNY6AoFTqmN67QyG1247kdHaX211pnnjF0lYAB0E=
Subject key identifier:   D1:29:12:07:CD:FA:7B:09:41:BF:24:4E:53:AC:41:1B:9D:8C:45:FE
Certificate issuer:       /CN=6eaf8e46-1c3c-40d4-8479-327c364c3dd5
Certificate serial:       010D0C9F432858380F4E0F71CDBF30849AC22060
Authority key identifier: F4:CF:FE:67:40:8E:6F:BA:7E:84:02:B0:2E:F3:0D:26:6D:2A:E7:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/d0b37ecb-d4f0-3c52-be79-fae707387cbd.roa
Signing time:             Fri 13 Nov 2020 05:00:00 +0000
ROA not before:           Fri 13 Nov 2020 05:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     15830
IP address blocks:        204.14.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:0f:4e:0f:71:cd:bf:30:84:9a:c2:20:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eaf8e46-1c3c-40d4-8479-327c364c3dd5
        Validity
            Not Before: Nov 13 05:00:00 2020 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=62de9d68-e2f8-4e75-b13e-7d0d1091e916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:53:b7:ee:19:e2:00:41:1d:72:b0:f2:d8:2d:
                    34:ed:f7:4d:fd:eb:71:a8:04:23:cf:a4:30:f6:be:
                    da:04:41:3f:79:92:41:b7:53:6e:16:5e:d6:bc:cc:
                    5b:bf:95:bc:69:d7:62:d3:3e:2b:c3:1d:88:bd:a4:
                    32:43:76:dd:6e:c3:24:0a:75:5a:78:f3:9d:d7:5b:
                    97:38:92:49:e7:47:91:39:af:c0:57:68:4e:54:83:
                    fc:de:07:8d:ac:83:dd:25:14:44:cc:e8:90:78:38:
                    72:e2:cf:0c:f0:87:38:00:85:e5:d4:11:69:1a:15:
                    64:35:4e:3b:75:47:a8:60:5a:69:cc:87:1c:ac:09:
                    63:52:65:aa:51:d4:91:2d:e4:0c:7b:41:76:44:9b:
                    64:5e:1d:11:2e:f4:3c:a9:29:cd:e9:90:9e:18:61:
                    92:8c:40:e8:73:fe:c7:b3:81:85:f2:d6:6e:3e:f8:
                    57:11:9b:83:7d:04:96:c0:eb:f4:f7:15:ca:f1:73:
                    e8:91:f7:a0:93:77:81:d0:dd:52:b1:36:e3:f4:a3:
                    54:fa:85:2a:d9:a3:93:35:95:59:a4:00:c6:bf:09:
                    38:0d:9b:a9:5d:aa:45:47:6d:da:ff:4d:52:04:05:
                    6f:a7:e2:87:ec:8c:8e:a9:c4:90:9d:1c:d9:ec:ea:
                    97:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:29:12:07:CD:FA:7B:09:41:BF:24:4E:53:AC:41:1B:9D:8C:45:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/d0b37ecb-d4f0-3c52-be79-fae707387cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5/6eaf8e46-1c3c-40d4-8479-327c364c3dd5.crl

            X509v3 Authority Key Identifier:
                keyid:F4:CF:FE:67:40:8E:6F:BA:7E:84:02:B0:2E:F3:0D:26:6D:2A:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6eaf8e46-1c3c-40d4-8479-327c364c3dd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:8f:3a:51:5a:ed:f4:d9:d0:e7:fd:b1:27:68:6c:0a:3a:5e:
         a0:8c:68:70:ce:c1:8a:00:ce:34:da:b7:c1:60:d8:a8:be:1a:
         f5:0a:4a:ec:10:0d:06:be:c8:27:23:d8:19:ca:8f:c6:90:37:
         10:03:d8:81:26:79:bd:78:a8:cf:f4:da:e3:ab:cb:cc:37:96:
         50:81:ab:25:23:b7:c2:fd:e2:8f:76:af:b1:4b:a3:ef:67:65:
         67:d2:c1:09:49:c3:45:31:00:b6:40:c3:c5:04:5d:53:5d:da:
         05:05:ab:0a:1d:13:0d:68:ce:8a:95:fd:a7:1a:17:2c:37:bc:
         41:51:d8:86:af:28:2e:c5:f6:b7:3b:59:75:ae:d6:6c:b8:ae:
         73:e3:74:50:de:42:b1:9a:21:74:f4:23:20:ac:1b:73:fc:c4:
         04:6f:c2:ca:86:33:b5:39:e9:94:d4:29:f0:1d:40:6c:4a:b8:
         36:e3:e9:d8:5f:be:a2:57:1b:f7:d6:58:8f:94:91:f8:fc:ef:
         c8:68:85:b2:62:d0:6c:33:f3:99:52:69:c3:81:09:27:51:a7:
         10:37:ac:22:f1:d8:7b:1d:91:0d:2d:94:53:be:5e:77:ea:41:
         61:9b:36:f4:66:e4:f5:8d:84:be:a9:49:1e:e0:18:6e:02:86:
         b2:4f:a2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----