Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/53bf4c9d-dd28-3a72-897c-ecc21df9dddd.roa
File:                     53bf4c9d-dd28-3a72-897c-ecc21df9dddd.roa (raw, json)
Hash identifier:          lt6tR6BI9Cp+3E79in/kvTffBJWcZ5WMjajbc40MQqc=
Subject key identifier:   69:F4:39:09:DA:FC:C3:57:E5:0F:DB:B4:84:F3:DD:5A:29:FF:6E:A0
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285837DA9B608224B8409A35D76C80
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/53bf4c9d-dd28-3a72-897c-ecc21df9dddd.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     393841
IP address blocks:        68.65.253.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:da:9b:60:82:24:b8:40:9a:35:d7:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=ba6ae9ba-afa3-4c7e-9f82-3264e524c459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:ea:23:bb:9f:01:c6:92:e0:d2:70:62:40:
                    1c:9d:89:53:77:ae:93:0a:50:4d:70:69:9e:49:aa:
                    81:26:2a:0f:c3:eb:79:22:c1:b1:96:37:8f:70:f3:
                    2f:c9:6a:79:df:a8:76:5f:af:df:c1:0e:35:e7:b2:
                    07:20:7a:c2:6d:78:66:a5:16:d7:52:0f:fd:85:6b:
                    f6:81:40:17:48:24:dd:14:d1:f4:fc:e0:1d:e6:97:
                    c0:6a:ad:c4:12:24:a7:ac:44:cd:29:b9:e9:42:48:
                    a2:45:3c:67:df:fc:51:71:18:2a:23:46:f7:1e:4d:
                    fb:7b:5a:49:0d:9b:d9:56:b7:68:0b:97:30:4e:66:
                    66:f2:68:ef:43:25:db:4f:21:c1:f1:aa:a4:f6:9f:
                    03:d9:5e:40:d4:47:9a:a4:20:99:53:06:45:97:55:
                    dc:e6:ce:47:c6:3b:5e:82:7f:96:19:9e:39:5b:02:
                    43:da:a6:46:36:a2:83:da:1e:9d:28:a6:09:a0:6f:
                    57:d4:2f:f2:c7:b6:23:f7:f6:64:44:a8:cb:16:bd:
                    45:cf:3d:5c:dd:ce:b5:35:d5:57:02:39:ba:15:2b:
                    65:ed:c6:ba:2d:00:7b:a0:4d:16:bc:18:76:cb:a5:
                    d6:3c:70:c7:05:68:e5:72:e2:64:0d:cd:10:d8:88:
                    c9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F4:39:09:DA:FC:C3:57:E5:0F:DB:B4:84:F3:DD:5A:29:FF:6E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/53bf4c9d-dd28-3a72-897c-ecc21df9dddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.65.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:68:db:13:ee:42:3f:1c:13:73:44:51:ac:7b:af:cd:b0:5e:
         98:a3:ac:73:e2:4f:63:a9:5a:eb:de:3f:6c:d0:ca:ff:23:d5:
         78:4e:41:bc:d4:99:24:6c:11:17:1e:cb:55:0d:88:9b:f9:b3:
         e4:52:98:97:78:6b:d3:8a:96:5a:d1:14:e5:8c:0e:80:56:08:
         3b:4f:a7:5f:0b:92:0f:e1:3d:ce:5d:e2:bf:87:c6:fc:4a:f6:
         e1:d5:52:cf:cb:75:5d:42:11:dc:ff:38:77:c1:a1:35:0a:98:
         f3:1e:88:b6:b9:08:d8:b6:96:b0:12:2c:33:83:56:70:9b:90:
         f0:cf:3a:63:2f:a8:44:26:99:05:04:ae:01:a7:4d:07:83:da:
         bb:7d:fe:56:18:b0:a4:7c:d1:45:6e:3a:d7:f5:38:11:d0:98:
         0b:72:9c:7c:b5:d6:a5:51:6b:ce:53:d4:ac:ec:69:4d:25:55:
         e3:03:af:36:7a:dd:8d:ff:bd:2e:a7:6e:c3:25:6d:e2:73:b0:
         e1:04:c9:47:1e:96:55:b0:7c:25:3b:24:fd:f1:e3:3e:8e:12:
         48:a1:e3:b7:30:2e:7d:95:83:28:82:d7:f3:58:33:19:05:6d:
         c3:19:55:3d:da:3e:0c:b3:0c:42:54:20:0a:fe:f8:d9:47:8a:
         bb:14:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----