Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff/3823dc10-3bfc-3a04-875e-14ca07e12159.roa
File:                     3823dc10-3bfc-3a04-875e-14ca07e12159.roa (raw, json)
Hash identifier:          zb5XOCPdM2UqIqh+GhREi460/tUuTWanI9M2IChoBdg=
Subject key identifier:   62:28:BD:CA:76:34:32:DD:87:42:06:3A:6A:4E:E0:30:31:D3:97:2D
Certificate issuer:       /CN=01c03400-d94e-401c-8fcf-fa8dd7d18bff
Certificate serial:       010D0C9F4328576D51CC73C042CFC172C2EC34E0
Authority key identifier: 42:F3:38:EA:9E:0D:07:43:5C:A6:75:22:41:17:95:F2:F1:CC:7E:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff/3823dc10-3bfc-3a04-875e-14ca07e12159.roa
Signing time:             Wed 17 Jun 2020 15:35:59 +0000
ROA not before:           Fri 29 May 2020 04:00:00 +0000
ROA not after:            Tue 20 Sep 2022 04:00:00 +0000
asID:                     36330
IP address blocks:        66.39.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:c2:ec:34:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c03400-d94e-401c-8fcf-fa8dd7d18bff
        Validity
            Not Before: May 29 04:00:00 2020 GMT
            Not After : Sep 20 04:00:00 2022 GMT
        Subject: CN=fd774b8e-70ad-4e9c-9039-84d137442220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:ac:cc:ba:ce:7a:0b:2b:3d:9e:8b:64:ce:
                    53:92:2d:4e:be:2b:5b:0a:59:24:73:e2:de:af:a6:
                    7b:98:5f:05:00:61:eb:70:40:c9:7c:4f:90:9d:a1:
                    cf:5c:d2:73:ee:0b:bc:ef:b6:7e:0c:66:2e:c1:10:
                    9e:a9:58:f4:2b:17:be:84:83:12:92:40:24:99:6b:
                    e9:aa:24:dd:14:f8:81:80:c4:a5:54:ce:b3:ce:a9:
                    5e:2e:97:c4:8b:25:84:c3:7a:c7:c9:d5:af:10:0e:
                    26:55:02:2e:57:f4:ac:86:fe:f4:35:37:d2:b7:aa:
                    a5:38:81:1f:69:90:7c:bd:7b:cc:f5:6f:8b:ab:52:
                    0d:0d:f8:57:fd:2a:7e:6f:2c:4a:f2:c1:4e:9b:1f:
                    35:3f:d0:c2:da:5b:7e:3e:81:71:ca:1a:1f:93:95:
                    8d:a0:74:84:4f:fb:e4:2b:18:6b:30:93:44:0a:b8:
                    bb:94:d8:ca:a6:8e:5c:c1:b1:82:6f:dd:4f:44:d8:
                    f0:f8:d9:8f:b2:de:d1:45:a7:42:b2:0f:cf:db:97:
                    1e:4a:cc:17:15:86:c6:43:a4:e5:d4:7d:8e:ad:3a:
                    80:bd:d3:45:b7:71:88:91:b4:00:06:b9:b3:9b:2f:
                    16:a0:44:d3:85:43:3d:c5:7e:72:fd:28:1e:e9:b5:
                    2a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:28:BD:CA:76:34:32:DD:87:42:06:3A:6A:4E:E0:30:31:D3:97:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff/3823dc10-3bfc-3a04-875e-14ca07e12159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff/01c03400-d94e-401c-8fcf-fa8dd7d18bff.crl

            X509v3 Authority Key Identifier:
                keyid:42:F3:38:EA:9E:0D:07:43:5C:A6:75:22:41:17:95:F2:F1:CC:7E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/01c03400-d94e-401c-8fcf-fa8dd7d18bff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.39.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:ae:29:f7:65:22:d9:f5:aa:1e:89:34:b5:d1:e3:3a:21:
         ef:2c:87:32:51:9e:c1:69:35:ea:76:0a:df:f5:ca:bb:53:5b:
         5e:99:43:ca:4e:28:6c:90:4d:6f:3b:10:15:b0:f0:5f:ee:b4:
         c5:91:6b:7b:d7:4d:e5:f3:48:58:c6:79:da:0c:b2:2e:ca:f5:
         58:b4:5b:c0:aa:1f:84:d3:a6:59:1a:67:13:36:00:47:2c:88:
         e3:ad:18:7a:c6:5e:2e:da:41:84:66:79:df:6b:2e:1a:f0:b2:
         c6:93:64:5a:3a:55:29:ff:1d:d1:d5:be:c8:6b:25:2a:7a:96:
         1d:44:83:45:0d:af:03:cf:5f:ee:07:8e:c8:78:7e:56:cb:e7:
         df:dd:1b:3b:6d:e4:38:93:de:91:4b:08:ab:26:53:63:da:15:
         a4:6d:ed:0e:81:82:7b:05:ca:c6:6f:68:2c:b8:c8:99:e1:09:
         1a:14:85:9b:6a:69:fb:90:75:b0:ac:7b:2b:ea:cb:03:4a:39:
         e4:1f:ab:1d:3e:9c:bd:32:bb:99:1a:f2:44:ed:a3:a9:d7:d4:
         12:1c:db:f9:f2:fc:9a:63:b7:18:36:40:94:53:3f:a2:21:3a:
         b4:5d:f3:5e:40:8d:50:31:fe:30:6a:7f:e9:a1:fb:68:d8:5b:
         a1:fd:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----