Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/dd528702-efe4-379f-b7ec-f2fb4bb7f4ac.roa
File:                     dd528702-efe4-379f-b7ec-f2fb4bb7f4ac.roa (raw, json)
Hash identifier:          tBTlzNNf1zu+AIsrk8SCv+1WBb6CYv0RtPaUpx70BBs=
Subject key identifier:   B4:F1:27:45:12:FF:63:3C:E7:C0:BA:C6:FB:5A:BF:98:06:89:F0:AE
Certificate issuer:       /CN=e25d686e-0b40-4450-bc73-6a20b06135f1
Certificate serial:       010D0C9F432858377ACF41296874C0DF87B831C0
Authority key identifier: C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/dd528702-efe4-379f-b7ec-f2fb4bb7f4ac.roa
Signing time:             Thu 01 Oct 2020 04:00:00 +0000
ROA not before:           Thu 01 Oct 2020 04:00:00 +0000
ROA not after:            Thu 05 Jan 2023 05:00:00 +0000
asID:                     3549
IP address blocks:        74.115.88.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:7a:cf:41:29:68:74:c0:df:87:b8:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e25d686e-0b40-4450-bc73-6a20b06135f1
        Validity
            Not Before: Oct  1 04:00:00 2020 GMT
            Not After : Jan  5 05:00:00 2023 GMT
        Subject: CN=679b6c50-9d3b-4b85-8a94-0226cb9b1f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:66:08:75:0f:17:34:15:f1:66:18:5f:4e:d4:
                    47:e3:63:f1:00:8f:51:8e:53:e1:ac:da:9b:be:e5:
                    39:7c:b0:c2:a3:f8:7e:d9:d1:3a:5a:eb:70:eb:b0:
                    f4:1e:e4:6a:17:ef:a5:48:a3:3c:8d:c2:b9:0f:d3:
                    64:d8:95:95:c7:fb:da:bc:0c:b5:82:fe:cf:39:86:
                    82:66:40:6a:44:67:ac:f1:34:f9:d3:01:53:cd:7e:
                    b9:64:13:99:25:01:26:80:e6:17:0d:82:c7:a3:4a:
                    9b:bd:07:82:6c:2a:ad:2e:53:4b:5a:60:cb:90:76:
                    2c:ca:10:51:b6:99:7b:58:54:16:4f:5f:86:f8:25:
                    cc:9a:78:a9:bb:4f:36:55:29:3f:4b:b2:63:d6:2f:
                    3a:63:b3:6b:1a:91:7e:e4:83:42:0e:8d:3c:d2:64:
                    09:03:95:dc:a2:e0:21:05:a2:5b:40:90:95:73:bd:
                    25:91:22:b8:8b:a4:09:a5:98:b5:54:4d:bd:f5:cf:
                    92:32:90:10:e6:f7:ce:f9:1e:a0:d4:af:14:44:55:
                    a3:20:0e:c1:c2:e8:02:ca:d9:56:2a:1b:0b:9e:2e:
                    f3:86:85:27:f2:02:3a:0a:e8:c5:67:6a:e2:a5:39:
                    a6:40:bf:d6:89:f1:30:e8:1d:ad:9b:e0:14:31:f0:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F1:27:45:12:FF:63:3C:E7:C0:BA:C6:FB:5A:BF:98:06:89:F0:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/dd528702-efe4-379f-b7ec-f2fb4bb7f4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1/e25d686e-0b40-4450-bc73-6a20b06135f1.crl

            X509v3 Authority Key Identifier:
                keyid:C8:26:FB:07:71:DD:E6:3D:D6:EF:11:E2:1F:8D:CC:85:37:3A:CC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e25d686e-0b40-4450-bc73-6a20b06135f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:92:d6:52:c1:57:c4:ee:1b:7a:63:e0:5c:13:63:32:7a:a0:
         62:3a:3c:22:56:dd:1b:c3:08:a1:8c:f2:fe:ee:ff:1b:3e:22:
         9d:23:e5:6c:77:27:c0:64:f0:87:0e:1d:3f:cd:45:e9:99:70:
         c2:4a:5a:b4:ea:f8:3c:b1:10:fb:b1:d1:8e:c3:69:3e:b4:1e:
         60:ba:70:70:fb:41:b8:8d:68:7d:ce:ee:78:30:cd:36:b4:19:
         2b:98:47:21:c2:61:32:59:6b:33:09:9d:78:b2:74:6c:f4:c3:
         fd:2e:87:a6:5a:52:02:3d:00:aa:0f:e5:af:e8:5d:74:31:d0:
         dd:65:bc:41:88:53:59:86:2e:78:7f:92:ff:28:ec:01:d0:28:
         a2:06:61:12:6b:fd:cc:4f:d5:75:a3:90:df:64:0d:6b:7d:33:
         f9:39:4c:8d:49:c4:63:30:2b:ca:0a:46:6a:82:b1:bc:8b:75:
         0e:98:a9:2f:32:20:32:06:ba:cb:30:39:74:a5:c2:fd:ba:df:
         01:90:18:fd:68:3d:08:8a:58:88:c3:43:14:35:4d:c4:62:6e:
         dc:15:9b:e1:d3:41:6a:f0:2f:5e:66:7b:32:1a:b1:74:3f:be:
         f1:a8:ec:dc:b0:a1:75:f9:bb:84:57:d4:53:12:1b:d2:b7:a2:
         3e:5f:49:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----