Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/aa2ae2c7-32cd-3807-a420-700da3e160b8.roa
File:                     aa2ae2c7-32cd-3807-a420-700da3e160b8.roa (raw, json)
Hash identifier:          84QR8/wJD+EVivppNGvmotGtCsnqs5XJLpZXOhDlRiU=
Subject key identifier:   21:61:E8:6F:CD:65:72:F5:27:30:60:F3:F1:3D:A6:05:76:21:D5:90
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328576D51CC73C042CFC173DDFC89AD
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/aa2ae2c7-32cd-3807-a420-700da3e160b8.roa
Signing time:             Tue 11 Aug 2020 14:46:21 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Mon 14 Nov 2022 05:00:00 +0000
asID:                     812
IP address blocks:        173.32.0.0/14 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:dd:fc:89:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Nov 14 05:00:00 2022 GMT
        Subject: CN=d7db7692-6ced-490e-89e4-fa6c431ba087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:8e:ab:05:42:97:a4:c3:a0:ac:7a:0c:bc:
                    93:a8:86:7e:00:22:44:1e:2c:ee:2f:28:b0:cc:b1:
                    bb:51:d4:56:2e:45:e3:ca:6a:ce:68:2f:9a:e6:1d:
                    81:0f:4d:d9:76:43:2c:49:41:67:a9:42:cb:f0:63:
                    51:2d:2d:43:dc:99:34:7e:ea:7e:10:bd:35:40:51:
                    48:0d:7c:e7:05:43:ba:1c:49:7f:85:0e:95:e1:ad:
                    46:32:82:36:fc:d3:34:38:02:fd:34:54:84:42:6e:
                    d0:3c:72:ee:22:aa:dc:0c:d1:7e:c4:ad:95:67:65:
                    61:22:2b:b1:5a:62:5d:f4:13:b0:12:b3:52:6f:54:
                    57:cc:aa:9f:cb:6c:f6:a0:a4:83:a7:47:1e:c3:b5:
                    c8:5a:0a:39:30:cc:ab:69:a3:48:af:51:4a:b9:22:
                    4a:c6:55:ed:d0:e1:11:f8:38:f4:8f:7b:78:e1:16:
                    96:36:74:9a:99:8a:1b:58:ec:88:08:88:d1:cb:51:
                    80:58:f7:dc:cc:8b:77:f9:7a:70:0f:06:ea:de:ee:
                    5d:c1:41:f2:5a:af:c3:d3:44:e8:41:37:1e:8e:08:
                    24:f1:00:6d:09:d8:04:d6:05:36:ac:f1:cc:6a:02:
                    fa:5c:35:c0:93:c7:b4:6c:2a:a4:4e:52:19:2f:6a:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:61:E8:6F:CD:65:72:F5:27:30:60:F3:F1:3D:A6:05:76:21:D5:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/aa2ae2c7-32cd-3807-a420-700da3e160b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.32.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:a1:72:eb:7a:e9:3c:14:0f:72:84:ec:23:a9:d1:ea:95:df:
         3b:2a:d5:61:98:15:94:cb:50:36:2a:1f:8f:fa:2c:ff:fb:66:
         19:7b:01:70:48:b9:50:26:37:5c:8c:e5:ed:65:e4:d5:c4:ce:
         66:8d:a3:f9:43:30:12:ce:35:75:02:a2:90:84:2a:7d:02:71:
         96:f4:8d:f9:f1:6e:82:3e:93:b0:d7:21:86:8d:b8:39:ad:42:
         53:89:b9:bd:4d:64:b4:e7:54:ba:f6:43:30:fd:5b:89:a9:5c:
         12:71:81:35:6a:08:e4:4e:09:ef:4c:04:86:28:f3:2f:57:b7:
         1f:10:39:d0:12:f0:68:cd:14:c6:e8:dc:e9:a3:6a:6d:88:88:
         2a:f7:1b:3a:32:4b:80:42:45:39:08:19:9e:d9:45:b5:3d:de:
         14:38:26:80:08:9d:18:02:0e:da:17:d2:8d:56:d1:d6:d0:71:
         ae:ca:19:cd:89:ae:a9:71:07:74:ba:c2:ba:05:26:27:d3:a1:
         cd:87:b9:35:28:62:06:5a:90:b5:92:d3:df:0d:29:fa:b5:fb:
         71:85:ce:82:9f:13:4e:e9:94:ef:cd:cc:9e:f4:8b:11:81:c2:
         43:f1:1f:2e:95:77:f0:e8:50:65:f8:4d:fe:35:a9:00:5d:f8:
         87:d3:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----