Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/dfc8fbf8-116a-3753-b36d-4101752de52a.roa
File:                     dfc8fbf8-116a-3753-b36d-4101752de52a.roa (raw, json)
Hash identifier:          VEv0IydcRGCYwHUMHtLT2HC7BAeAqHZ76eCuYfdsNmU=
Subject key identifier:   A7:70:D8:7B:E6:4F:5B:72:D2:50:52:D7:5E:1B:D8:C9:13:ED:18:FE
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285837DA9A7541EA81B8C1F3A14BB4
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/dfc8fbf8-116a-3753-b36d-4101752de52a.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     393841
IP address blocks:        45.42.32.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:da:9a:75:41:ea:81:b8:c1:f3:a1:4b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=6e512b3a-68ed-4000-a7f0-8663ade63084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d2:0a:a3:03:5a:0c:82:42:ca:c6:f0:86:51:
                    32:b6:12:d3:d6:1d:1a:23:57:12:55:f3:8d:a4:d6:
                    02:6a:11:1a:d0:8f:90:95:69:92:d0:18:16:f8:33:
                    e8:02:77:16:88:c8:30:dd:2e:94:cf:4c:17:4a:6a:
                    5c:d2:0e:b7:b4:7e:4c:11:c6:4b:5a:64:7c:62:5a:
                    54:9f:d0:66:cd:38:83:a1:99:7e:6a:b9:b0:1b:76:
                    62:cb:a5:ec:f2:4e:6d:73:4d:bf:19:3c:cd:b3:8e:
                    93:e1:8a:54:d4:c1:bf:9a:88:4d:cc:d5:3f:41:76:
                    5a:89:4b:3d:51:e9:8f:58:1b:4a:e3:2b:f4:6d:c7:
                    12:bb:cd:15:a3:28:27:9f:a9:02:ac:61:fb:6c:c4:
                    cb:a9:74:be:3e:c9:e4:f8:df:74:62:35:ac:67:6b:
                    37:34:a4:25:62:d4:76:10:66:e0:6f:09:a5:80:76:
                    d0:80:b7:0c:13:8d:ec:fd:3b:dd:0e:a3:2e:30:85:
                    68:f0:4e:c0:28:e4:9f:dd:9e:eb:93:f8:6b:8d:21:
                    9c:32:43:1a:43:a9:10:36:dc:50:69:50:cd:1d:49:
                    22:a9:35:79:93:47:83:b4:42:2a:4b:9f:99:21:76:
                    5a:6f:0a:8e:5d:fd:fc:01:bf:b6:8a:f3:c3:75:52:
                    13:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:70:D8:7B:E6:4F:5B:72:D2:50:52:D7:5E:1B:D8:C9:13:ED:18:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/dfc8fbf8-116a-3753-b36d-4101752de52a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d9:d0:75:1f:74:2c:49:e8:12:c9:b4:b9:e3:f6:0a:f9:69:
         2f:9c:ec:be:f7:26:e4:b1:5f:90:d8:fc:6a:db:27:9a:b9:f0:
         a5:ce:09:1a:79:26:71:41:99:1b:e6:2a:bd:0b:90:8b:fa:e1:
         45:77:dd:f2:b0:6a:25:d5:28:45:a5:27:78:07:f8:1f:64:cd:
         b9:8d:b7:92:0c:d6:18:2d:5a:1e:cf:ab:b5:c1:02:4a:b8:2d:
         10:c5:54:e2:cc:a4:d4:d4:23:cc:ec:e7:f6:e7:89:9e:d7:54:
         26:25:0d:d6:29:20:00:78:50:de:bd:2b:0d:d7:f5:3c:dd:15:
         bb:59:1c:36:01:80:06:80:6a:d0:02:d8:10:36:36:99:ec:a4:
         ca:3a:b8:65:eb:b9:11:cf:d0:9b:82:55:41:27:d4:02:c8:4f:
         e8:a5:37:61:e3:b9:00:e3:1d:ef:98:1e:19:c4:ef:b3:cf:a7:
         c0:bf:c2:2d:3b:9c:76:94:f8:09:4c:1d:e0:30:10:d8:42:e5:
         ec:1a:e0:09:e7:c7:d0:4a:31:f6:66:4a:bd:e3:af:02:4b:89:
         ad:6c:2a:0e:d1:52:80:38:a6:3d:e4:df:74:8a:cb:b3:ab:7d:
         4f:f6:dd:0b:af:7d:a6:43:45:c4:1d:a2:24:45:53:21:2d:b4:
         62:19:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----