Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/6645f04b-f864-3766-83a8-074157509986.roa
File:                     6645f04b-f864-3766-83a8-074157509986.roa (raw, json)
Hash identifier:          4zbfjR56g3/ur1vGqsnaxhhBl03ZxG65DzbWOGmvuDE=
Subject key identifier:   DB:72:91:7B:B1:10:73:A5:C7:59:5D:9E:5E:43:7B:7E:BF:B9:FD:C4
Certificate issuer:       /CN=e3aefa7a-1469-41b1-a14f-6fc251b55823
Certificate serial:       010D0C9F43285838335C962EE05B961BED259700
Authority key identifier: 23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/6645f04b-f864-3766-83a8-074157509986.roa
Signing time:             Mon 07 Dec 2020 05:00:00 +0000
ROA not before:           Mon 07 Dec 2020 05:00:00 +0000
ROA not after:            Sun 12 Mar 2023 05:00:00 +0000
asID:                     19151
IP address blocks:        205.166.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:33:5c:96:2e:e0:5b:96:1b:ed:25:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3aefa7a-1469-41b1-a14f-6fc251b55823
        Validity
            Not Before: Dec  7 05:00:00 2020 GMT
            Not After : Mar 12 05:00:00 2023 GMT
        Subject: CN=f06e0871-2b22-4b58-9f04-dce45ae38927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:c4:68:e8:e8:79:c8:9e:6f:49:ba:29:96:
                    08:ce:8f:d7:4d:41:e3:b7:a5:5c:0f:a6:d2:22:d8:
                    be:75:c6:16:67:a4:f7:94:ef:d9:6c:a9:dc:e0:98:
                    ad:68:29:1e:8a:49:84:61:cf:89:12:71:e6:ed:f5:
                    51:ea:9b:ed:f5:f7:2d:e7:0e:fd:73:58:fc:d9:16:
                    9f:fa:af:2c:ae:63:06:66:a1:a4:66:2b:2a:c9:4f:
                    52:0d:d5:db:04:0f:26:89:43:9a:72:50:70:ee:c0:
                    cc:56:44:ca:31:2e:a9:cf:9f:2c:b4:1a:2f:63:93:
                    56:9d:50:11:16:2a:95:de:42:0d:e5:12:3a:36:78:
                    f7:39:a1:de:20:0d:8e:50:29:7f:d3:d1:f8:00:9c:
                    5b:88:4f:5e:71:13:4a:79:ab:b2:d8:9e:fb:ed:54:
                    68:fd:1a:6c:62:ac:be:a9:11:2e:28:57:6a:e4:16:
                    20:d7:bd:36:c9:4c:32:a7:68:b5:7f:92:b4:d6:76:
                    31:d0:08:ec:e6:86:41:76:97:ce:54:1d:63:27:b8:
                    fc:37:28:e3:02:9b:7f:f4:c6:a7:f1:0f:ae:fc:5c:
                    69:13:41:4d:b1:27:c9:1f:a1:21:d6:ff:dd:32:39:
                    5a:25:09:3b:68:ca:7f:1a:ee:a6:fc:ed:62:59:4b:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:72:91:7B:B1:10:73:A5:C7:59:5D:9E:5E:43:7B:7E:BF:B9:FD:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/6645f04b-f864-3766-83a8-074157509986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823/e3aefa7a-1469-41b1-a14f-6fc251b55823.crl

            X509v3 Authority Key Identifier:
                keyid:23:A1:6E:FC:A2:EC:5A:D6:A7:A8:05:AB:FD:EA:DF:68:5F:07:21:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e3aefa7a-1469-41b1-a14f-6fc251b55823.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:51:7f:00:47:67:7b:07:39:42:9f:a8:ec:59:eb:d3:ce:57:
         e7:9d:e2:15:e5:87:29:bb:55:04:e6:2c:ae:3f:26:03:eb:74:
         14:d0:36:d7:e0:5f:e3:e9:a9:8c:b4:8d:88:0d:43:91:4f:47:
         b0:00:b8:e4:7a:39:c7:f6:42:69:57:b7:b9:4d:11:be:98:20:
         aa:6e:b3:bc:82:9d:35:d1:ed:93:40:e6:7a:94:cf:15:4b:88:
         fb:6a:fd:5b:38:bf:e1:37:49:51:f5:85:18:88:2e:e2:44:24:
         ef:f2:e1:4e:1d:b3:fd:f5:22:78:11:f7:cc:b8:12:07:8e:0b:
         c1:29:df:21:18:ad:54:2c:81:5e:f7:30:3d:16:34:51:ee:ed:
         4d:5c:b2:a8:22:25:1b:7d:23:47:dc:63:43:ae:f1:8f:9e:1c:
         8a:7f:15:82:08:3d:8d:46:3b:ac:2a:18:a8:59:99:f2:63:8b:
         9b:5d:13:57:3b:e2:84:df:66:ba:ab:2f:13:0f:d5:12:77:59:
         6a:a7:0c:9a:b6:8b:62:4b:1c:29:49:13:3e:c1:6f:e9:e3:00:
         8c:53:7f:12:92:f0:9a:45:a2:97:38:e9:1e:75:2d:d4:fe:dc:
         65:c5:a3:99:ad:a1:30:43:aa:13:70:3d:04:f1:f9:3c:87:28:
         c7:a4:bb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----