Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/29628795-b3e0-3dd3-84b0-629c7ff39de3.roa
File:                     29628795-b3e0-3dd3-84b0-629c7ff39de3.roa (raw, json)
Hash identifier:          yk4yF/o9/eWTfSY3o82pwmFw6vj6hNL7DilSZYRECR0=
Subject key identifier:   E6:B7:52:DB:70:37:5B:16:C2:69:CC:BA:C6:00:2D:02:8F:B9:68:2D
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328576D51CC73C042CFC173EF0F9A72
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/29628795-b3e0-3dd3-84b0-629c7ff39de3.roa
Signing time:             Mon 22 Jun 2020 04:00:00 +0000
ROA not before:           Mon 22 Jun 2020 04:00:00 +0000
ROA not after:            Thu 17 Nov 2022 05:00:00 +0000
asID:                     14413
IP address blocks:        108.174.8.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:ef:0f:9a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Jun 22 04:00:00 2020 GMT
            Not After : Nov 17 05:00:00 2022 GMT
        Subject: CN=c9a25fb0-8399-402d-a81b-af9b187fff2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:24:3e:80:fb:e6:f2:fb:4d:b0:0f:8a:03:
                    9a:32:a4:ec:1e:8e:b2:79:83:ef:a7:bc:7c:fe:77:
                    a8:7d:fb:eb:89:77:0d:c3:8e:b2:cc:be:52:01:e1:
                    da:b2:8f:69:08:35:19:a2:82:ba:d1:ac:e8:a8:4a:
                    7c:9b:4a:b4:ea:aa:06:fb:52:7b:86:cf:be:f9:56:
                    1a:28:99:e6:9a:a6:6f:59:cd:8f:76:0a:04:60:89:
                    35:c2:ff:7f:c3:f7:34:95:06:d0:f5:a7:8f:53:cc:
                    ca:18:58:4d:3f:f2:53:be:92:cd:32:dd:7d:c3:7a:
                    20:1c:8b:9e:2c:25:9e:32:92:bf:96:84:29:ca:58:
                    ab:e0:58:4f:08:fa:72:6e:70:5a:e5:3c:99:a0:f7:
                    3e:2a:fe:b9:b6:a9:b9:3f:04:fc:8e:37:35:94:47:
                    dc:66:e6:53:f6:81:b9:93:36:35:1f:fc:20:4a:fe:
                    bd:17:96:8e:aa:94:d5:6d:b6:ad:7b:b9:cd:b7:d0:
                    3e:67:1c:ec:13:67:42:8b:9a:35:97:8b:66:8b:e9:
                    c6:e5:48:d7:85:63:e9:99:bb:ed:39:3a:77:ec:9d:
                    bb:d4:42:de:2b:64:2e:32:1b:ff:38:20:30:25:53:
                    5f:35:cd:50:1c:3f:bb:0f:18:f1:c3:13:d9:61:dc:
                    c6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B7:52:DB:70:37:5B:16:C2:69:CC:BA:C6:00:2D:02:8F:B9:68:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/29628795-b3e0-3dd3-84b0-629c7ff39de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:59:aa:86:46:0f:d5:d1:39:fe:27:91:da:21:63:15:69:
         7a:59:8b:e1:ca:c1:35:f1:14:10:1c:80:aa:2e:5c:07:ec:cc:
         96:f1:df:7a:5e:c4:e6:38:40:d1:e4:8c:27:13:63:53:b3:84:
         12:72:99:a9:da:a6:0d:c9:36:c6:22:12:cd:73:a1:3f:39:7e:
         84:aa:80:b4:ed:d4:41:42:b9:2f:9f:83:0d:44:47:fc:8b:72:
         44:d9:48:ae:d8:42:29:bf:9f:e4:0b:82:df:a0:74:ea:5e:93:
         aa:14:5a:b0:dd:b5:16:1f:a6:73:7f:39:af:a7:68:ee:d2:54:
         06:96:62:0f:3a:f8:f4:34:8f:03:fb:89:be:b6:cc:db:92:2d:
         d1:d8:12:19:5b:3a:4e:f7:c8:3c:08:7f:ab:e7:0b:78:6b:6b:
         f9:6a:62:6e:ea:c6:f9:ad:ca:d6:f7:a1:16:36:08:eb:b3:da:
         4f:bd:67:53:4c:e7:f1:10:0f:dc:90:f9:fe:58:9c:c2:64:ba:
         e8:6b:ec:7a:e6:8a:f7:5a:73:86:9c:9f:9c:88:f0:07:6a:53:
         46:45:c2:f9:87:4c:ee:ee:64:0a:70:3e:51:92:0b:14:fc:6d:
         bc:a2:dc:36:93:16:b7:f6:28:da:c2:6b:a8:75:51:7c:66:c5:
         86:31:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----