Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/3b2b0d0f-4f45-3669-9861-1e7bd0a5397b.roa
File:                     3b2b0d0f-4f45-3669-9861-1e7bd0a5397b.roa (raw, json)
Hash identifier:          Stbh43+8yzdQuo4MkzPE7m6ij9ZOIkcC4Jkn15xg7+4=
Subject key identifier:   A8:52:BD:CF:07:6A:A2:79:BF:FD:23:49:3D:2B:DB:74:D2:8A:16:A2
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328576D51CC73C042CFC17372247979
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/3b2b0d0f-4f45-3669-9861-1e7bd0a5397b.roa
Signing time:             Tue 21 Jul 2020 16:10:59 +0000
ROA not before:           Tue 21 Jul 2020 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     30682
IP address blocks:        168.146.66.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:72:24:79:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 21 04:00:00 2020 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=c6cf563e-b0ee-4967-bb06-19c02055e395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:59:40:35:02:a1:08:35:bb:87:86:34:d2:
                    36:f8:76:8a:55:c4:43:fc:90:80:ab:1c:1c:b6:82:
                    ed:5f:df:85:cf:f5:17:7d:b4:5d:86:ff:d4:3e:21:
                    12:c3:a4:d4:dd:d0:2e:2f:76:ce:6d:a0:59:12:f0:
                    97:56:95:47:b9:0e:6d:b2:eb:3d:c9:f3:61:34:e3:
                    e2:d0:48:68:24:20:1d:b8:71:3d:33:d3:df:54:77:
                    f0:6f:2b:ea:63:27:13:25:b5:e2:2a:94:3f:5b:73:
                    9f:ea:aa:29:1a:9b:61:cd:35:b5:48:5c:44:b3:a2:
                    bd:b6:8b:7d:5b:4c:85:fd:de:70:03:98:e6:29:e0:
                    c1:a0:98:b7:0c:a8:de:91:3e:8f:5e:7e:4d:20:f7:
                    4f:40:c5:7e:40:57:8f:58:cf:e3:df:28:af:20:4b:
                    52:ef:ab:2e:4e:e7:8c:47:2d:38:ce:3c:e5:56:25:
                    d5:59:ea:c4:70:ba:d5:e8:f2:8b:af:92:1c:b3:bd:
                    38:ac:97:81:98:d7:c8:4c:fa:c5:cc:59:14:47:4b:
                    38:8a:47:30:84:8d:e6:48:1b:4d:98:34:ac:90:11:
                    ee:8e:db:fc:c7:89:fd:df:58:eb:6e:b6:f4:d2:66:
                    c3:b7:60:9b:ec:b5:93:55:3e:6a:e6:a2:a3:17:04:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:52:BD:CF:07:6A:A2:79:BF:FD:23:49:3D:2B:DB:74:D2:8A:16:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/3b2b0d0f-4f45-3669-9861-1e7bd0a5397b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.146.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b4:55:70:e0:4b:3b:f1:61:64:1d:06:09:6f:cc:2a:e3:ab:
         cd:f2:e0:9e:97:c0:52:07:d9:3d:b5:f8:f5:e4:77:f0:03:8b:
         2c:99:a6:7d:42:3a:6f:4d:dc:fd:7e:d2:d0:9d:31:7d:8b:88:
         fb:06:92:bd:33:af:65:79:af:46:a8:28:e7:ef:f7:46:c2:48:
         bc:5a:72:1c:61:c4:98:28:5d:ab:e7:92:6e:cc:9c:c1:71:a1:
         0a:de:8a:dd:25:ea:d7:43:2f:dc:dd:a6:d0:5b:49:b2:aa:6e:
         77:ad:15:41:bc:12:6e:13:61:50:af:8e:63:4a:61:a1:d9:ef:
         e7:7f:50:0c:0c:af:fc:11:0f:9f:c5:13:6c:9a:be:df:46:52:
         e9:81:68:c1:36:0f:1f:9a:f2:70:f7:81:e4:2f:89:fb:e5:a4:
         2d:c8:fa:a2:78:ff:3d:f1:37:49:17:2c:6e:64:35:26:be:50:
         c0:d7:22:47:aa:57:ca:90:81:00:70:1c:57:84:ca:a5:b6:98:
         fe:a8:d9:e4:9a:fb:77:cf:03:9d:0d:7a:3a:2c:fa:3b:11:df:
         88:e4:33:db:dd:96:87:12:02:8e:c1:6b:29:41:26:93:fa:03:
         e7:db:b8:a9:a5:c3:85:de:20:a8:b2:49:96:f2:10:3f:27:b7:
         45:36:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----