Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/158da08c-29e1-38f0-8ea0-1a94a04a1022.roa
File:                     158da08c-29e1-38f0-8ea0-1a94a04a1022.roa (raw, json)
Hash identifier:          R46HDnsL2XRk7C5oICjOHgcJ8EuZCTVI3K6QahBIbYs=
Subject key identifier:   16:84:65:E3:98:EA:8A:8D:DA:89:93:89:C7:2A:44:F5:56:BE:F8:EE
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1729CE1B3F3
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/158da08c-29e1-38f0-8ea0-1a94a04a1022.roa
Signing time:             Wed 10 Jun 2020 06:18:56 +0000
ROA not before:           Thu 12 Apr 2018 04:00:00 +0000
ROA not after:            Tue 13 Sep 2022 04:00:00 +0000
asID:                     40065
IP address blocks:        161.129.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:9c:e1:b3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Apr 12 04:00:00 2018 GMT
            Not After : Sep 13 04:00:00 2022 GMT
        Subject: CN=021eb062-84e5-43ab-b6cf-c446d1211ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:00:bf:2c:7e:60:d0:55:ca:5b:ca:2a:e7:d0:
                    21:38:7b:6c:3b:a9:2f:f1:6b:a5:81:98:a0:21:c9:
                    14:48:aa:06:5b:92:de:62:8f:86:27:b6:00:d0:1e:
                    f1:ad:12:ee:53:b5:e9:e7:97:2c:db:24:df:4d:c9:
                    64:2d:a6:cc:df:41:67:61:88:4c:e2:37:d7:4f:3b:
                    49:90:7a:48:a0:27:af:79:de:0b:cf:a3:fa:1e:e9:
                    0d:15:84:d3:61:b1:64:da:b9:7b:a8:f3:be:8b:d6:
                    dd:66:eb:23:35:3f:00:22:7c:0f:9b:ab:09:95:c1:
                    63:d1:0e:e1:f3:dc:71:0c:91:0a:fb:d3:2b:f9:71:
                    90:cc:a4:26:14:88:05:8f:60:93:14:c3:ba:64:37:
                    76:a8:24:06:07:98:07:51:15:8f:09:db:30:3b:f8:
                    98:32:14:f3:89:3c:ab:c3:6f:5c:73:48:70:d8:55:
                    ab:7c:3c:30:17:d4:48:0d:ed:c1:a0:31:38:f9:ac:
                    fc:04:d4:4e:d2:08:e1:9c:89:dd:36:6c:27:25:65:
                    74:44:be:7e:79:22:9a:1d:94:1c:21:72:7b:ef:dc:
                    8b:e0:b6:7d:8f:5f:b4:b7:fa:8a:db:65:77:48:e0:
                    42:4e:3e:3c:89:fb:39:ae:c1:de:ac:b5:ed:87:33:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:84:65:E3:98:EA:8A:8D:DA:89:93:89:C7:2A:44:F5:56:BE:F8:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/158da08c-29e1-38f0-8ea0-1a94a04a1022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:30:ee:a2:20:bb:7b:b5:e1:58:99:15:0a:ca:0a:71:20:24:
         46:d6:54:dc:0e:8a:2a:6d:5f:8a:61:34:7e:93:3b:c0:2f:67:
         80:02:dd:86:8a:8c:e3:67:cf:b1:5e:bf:c5:a8:c4:25:73:d9:
         f1:f4:3e:5f:66:bb:cc:ad:1d:be:35:2a:24:25:c5:44:b1:01:
         d2:4f:e5:06:88:b8:b0:34:5c:e0:ef:4d:93:e0:2a:7e:0a:fb:
         6c:e2:72:45:4d:f5:ad:ae:e3:d2:fa:e4:37:eb:e1:d8:22:cc:
         46:32:98:73:54:34:e1:11:f2:ff:1a:e7:fc:1f:b4:5a:ed:da:
         97:e6:e3:27:ce:fd:a8:75:5d:b8:58:dc:c8:62:e1:94:2a:ee:
         54:94:b7:4c:f8:99:d6:02:6c:09:23:73:6e:d7:5b:00:23:99:
         e1:b8:b1:4e:bf:90:cf:67:d7:ad:d8:35:70:a3:8d:9f:ff:be:
         df:74:dc:23:e1:f2:b5:34:a0:0a:d1:e7:54:5f:6c:8f:6a:f9:
         b7:42:7b:a5:03:b0:2a:58:b4:1e:58:dc:70:7c:74:38:f1:26:
         ea:a8:65:e9:6c:a0:2f:91:af:29:d7:a7:eb:5e:16:10:ee:0d:
         f1:90:16:0d:b1:64:63:09:b6:f1:66:c4:db:04:0a:b6:4f:a2:
         d8:29:31:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----