Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/158fd9e8-b12d-3087-a5e9-97e4ea7dd051.roa
File:                     158fd9e8-b12d-3087-a5e9-97e4ea7dd051.roa (raw, json)
Hash identifier:          qu6FE7VsBjzznHBhhnZPn++IB6I3Ie2Tq5eKUBMXL8M=
Subject key identifier:   C2:35:38:D6:49:1D:B1:29:A5:E8:14:0B:45:12:67:C1:2D:02:1B:34
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837BDA8BCD97BA0E558DF3A2480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/158fd9e8-b12d-3087-a5e9-97e4ea7dd051.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 29 Jan 2023 05:00:00 +0000
asID:                     25668
IP address blocks:        207.194.212.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:bd:a8:bc:d9:7b:a0:e5:58:df:3a:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Jan 29 05:00:00 2023 GMT
        Subject: CN=7a2bbb50-5dae-460d-80aa-25764dd10043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:d6:d5:da:b6:f5:16:a7:90:89:f7:c4:c8:
                    62:85:1c:f8:e5:2f:b6:a5:e5:ca:79:b3:9a:97:f1:
                    dd:69:d7:55:a3:b1:33:d7:9e:fa:b3:e2:4e:35:3d:
                    fd:ac:49:20:90:81:1e:21:b6:be:8d:ba:33:3b:c0:
                    67:b3:df:fa:72:fd:5c:56:25:cd:11:3e:aa:24:71:
                    01:f3:b7:db:ec:4c:58:04:71:99:0a:a6:1c:ca:42:
                    1c:21:f9:26:43:46:73:19:ca:92:d1:46:bd:41:fd:
                    68:47:d2:1c:4d:8d:42:75:fd:ea:ce:ef:2d:0d:94:
                    c7:64:63:5a:82:32:2e:88:b1:cb:1c:89:c3:8f:cc:
                    b6:e8:b6:18:19:e7:5c:e1:44:0d:ba:55:3c:e7:8e:
                    94:fd:76:59:d7:6b:b2:5b:11:69:7c:88:9c:e3:ee:
                    ed:11:1a:28:79:72:64:bc:df:c9:5a:f7:07:de:bb:
                    aa:fa:8d:84:b9:30:1b:65:96:ea:74:eb:07:ed:6f:
                    8e:34:8e:b2:32:d2:be:a2:a1:00:7e:a2:a2:6e:5c:
                    98:00:6c:e5:dc:68:13:c2:72:bc:2c:be:65:75:8d:
                    f1:46:51:5a:c5:97:2a:b8:1c:f1:f2:e0:4f:fa:b7:
                    47:79:f8:af:9d:c7:ab:d5:dd:b5:c7:89:fb:fa:a9:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:35:38:D6:49:1D:B1:29:A5:E8:14:0B:45:12:67:C1:2D:02:1B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/158fd9e8-b12d-3087-a5e9-97e4ea7dd051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:d0:07:08:f2:3b:f0:7a:46:48:83:34:3d:56:ad:e2:be:
         c2:c5:9f:6d:3c:02:4f:5f:91:8c:bc:3a:a9:9c:26:97:d8:e6:
         75:09:1f:51:c2:ab:4b:a0:1a:c1:93:3a:1e:98:29:21:da:94:
         de:52:35:20:09:2f:be:f1:85:ee:83:8c:05:f3:62:31:2c:22:
         cd:7b:60:ab:56:9a:d9:ed:03:d5:78:ae:a5:ab:c2:e1:f2:02:
         e1:d7:f4:9c:47:85:4d:48:3b:e4:49:41:3b:91:e8:e4:2d:33:
         8b:bd:0f:02:16:7e:af:af:29:a3:20:09:2b:2e:2e:01:e1:f4:
         91:54:bc:8f:6b:9c:ab:83:b8:ed:de:e8:5b:44:9b:8c:5d:5c:
         5a:a1:c2:d0:4d:87:db:2c:cb:75:c3:9d:c6:19:73:89:7f:d1:
         53:22:25:ed:17:76:73:ff:d8:55:a5:42:97:96:99:7e:77:84:
         a3:de:5c:a9:62:c7:3c:89:16:b6:29:50:6b:2f:76:89:90:72:
         dd:4c:eb:e1:62:8f:e6:b8:e4:4d:1a:58:69:5c:57:e9:86:e7:
         99:77:9c:4d:b2:fd:a0:f0:2a:06:b3:8a:df:91:8a:b0:71:eb:
         5a:4c:28:b2:17:c0:12:42:62:13:94:6b:99:f9:b9:a5:47:78:
         a2:be:a7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----