Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/1fc9f806-8e8c-3ebb-b9f7-d8c763a9af5a.roa
File:                     1fc9f806-8e8c-3ebb-b9f7-d8c763a9af5a.roa (raw, json)
Hash identifier:          vgHyNUNIZpLGziaAAD0y8D8rxY83IDsQ7Obr0OQIz2k=
Subject key identifier:   5F:23:1D:BD:93:BD:4F:66:D3:DD:30:B2:1D:42:E9:AA:4A:93:D1:08
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328576D51CC73C042CFC173087D9FE0
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/1fc9f806-8e8c-3ebb-b9f7-d8c763a9af5a.roa
Signing time:             Wed 01 Jul 2020 03:48:37 +0000
ROA not before:           Mon 29 Jun 2020 04:00:00 +0000
ROA not after:            Tue 04 Oct 2022 04:00:00 +0000
asID:                     24429
IP address blocks:        47.246.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:08:7d:9f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Jun 29 04:00:00 2020 GMT
            Not After : Oct  4 04:00:00 2022 GMT
        Subject: CN=fe8c1ff7-7f03-4c17-951d-fe02336015b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:80:1d:e1:2c:a0:68:9c:5e:6f:e0:26:c5:
                    df:78:e2:0f:0c:52:37:10:04:9b:b1:50:4a:27:6e:
                    8c:33:ba:39:ef:b9:7e:26:6d:49:34:5e:e6:b7:30:
                    a3:5e:d6:29:22:29:47:91:96:e3:3f:67:c7:f0:23:
                    fe:5b:6b:ee:49:70:b0:ce:77:6d:57:a8:f9:fc:0e:
                    c3:e3:be:6e:16:4a:8f:3e:ce:16:dd:6d:e5:99:3c:
                    4f:57:e6:fc:ff:17:b9:15:32:d4:92:8b:1e:1f:a0:
                    ff:1e:ad:56:c9:e7:73:ff:27:a3:88:02:1b:83:f4:
                    7d:4d:f6:4a:8a:39:2d:02:63:de:d2:fa:b0:67:bc:
                    5a:a9:26:60:76:4d:0f:cd:d2:e7:f6:af:2a:c1:5d:
                    db:fb:1b:c8:85:c1:7e:fa:f3:80:92:07:c4:31:27:
                    4d:f4:ed:a7:f9:c0:f2:cb:9c:dd:1b:19:f6:bb:e9:
                    ab:95:23:68:e8:46:18:bb:8e:eb:ad:1d:6d:00:07:
                    d7:53:b7:bc:12:c1:13:a1:64:dd:e5:2d:76:b1:d2:
                    12:a9:b1:c1:b0:d0:96:f2:f9:34:8b:f4:64:6d:3b:
                    64:c8:56:79:f3:cf:d7:d6:5e:51:94:bd:3b:f9:e8:
                    78:62:24:8a:ba:19:a7:8e:56:11:0f:da:04:b2:2d:
                    dc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:23:1D:BD:93:BD:4F:66:D3:DD:30:B2:1D:42:E9:AA:4A:93:D1:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/1fc9f806-8e8c-3ebb-b9f7-d8c763a9af5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a0:a5:74:ee:87:ed:6c:86:4e:01:ac:30:44:97:81:c8:f6:
         00:b6:b0:5a:2c:e3:37:93:5d:bc:a4:97:3f:7e:e2:ed:c4:87:
         5b:d6:cd:cd:a9:f7:bb:28:d8:93:aa:ba:ef:de:82:37:99:80:
         2c:36:6d:fa:1a:b7:42:c9:ca:26:83:0a:ce:d4:71:6c:51:7d:
         17:6c:ef:4f:e4:4a:9d:d1:5e:4f:d8:79:25:1c:bd:5d:f0:46:
         52:ff:d4:fb:06:2c:a6:d4:78:e6:63:16:4d:61:5b:ca:e6:bd:
         22:06:08:7f:29:4b:83:cf:82:55:f4:05:10:2f:ef:b1:5c:ff:
         71:92:a5:06:2d:be:b6:5c:53:f3:63:6f:9d:d5:ce:b0:ff:b9:
         a0:94:31:82:bd:b4:42:ce:ba:a3:fe:0a:f4:31:be:e3:d7:60:
         11:56:f3:52:6b:0b:4f:8c:d5:51:50:3f:ab:e0:aa:36:64:ef:
         8a:12:6d:37:79:d6:c3:0e:fb:95:38:05:7d:36:a1:7e:df:91:
         4c:c5:75:b6:da:90:20:f3:9e:b6:22:43:95:85:6c:c1:6a:a6:
         4a:b6:c9:a6:32:43:39:3c:44:cc:18:f7:37:96:67:27:f2:d5:
         09:ae:dc:90:31:98:f0:13:9d:31:f2:92:26:98:5d:c9:ac:a8:
         4f:04:1c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----