Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17c9bc3d-0c27-33e6-8380-e15c19ffe32f.roa
File:                     17c9bc3d-0c27-33e6-8380-e15c19ffe32f.roa (raw, json)
Hash identifier:          ZIrzb0CAo623rw+ws7Yt/I8JijU0av6urdPyllszbac=
Subject key identifier:   6D:FC:62:A5:9E:2F:2B:2F:A3:F3:75:BA:C3:E0:35:BB:C9:5C:78:49
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837BD9C9DC624406377E30DD100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17c9bc3d-0c27-33e6-8380-e15c19ffe32f.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 29 Jan 2023 05:00:00 +0000
asID:                     36000
IP address blocks:        209.53.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:bd:9c:9d:c6:24:40:63:77:e3:0d:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Jan 29 05:00:00 2023 GMT
        Subject: CN=1b707bcd-be6a-499e-8d8a-6cd882f93806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:f4:d0:59:83:9d:37:85:f8:be:8a:8d:12:
                    10:22:78:46:1d:63:d8:62:d4:cb:8b:c3:f2:e0:51:
                    ea:0f:0d:0d:1a:3b:af:04:d9:06:85:38:1f:c9:aa:
                    3f:dc:7a:0d:c4:43:34:f4:48:99:20:40:f3:fd:08:
                    9d:37:47:2e:40:c4:33:cf:a3:ef:ba:8b:56:fa:a4:
                    a5:2c:31:6c:bb:16:53:d3:1a:01:fd:a3:3e:24:6e:
                    7e:c0:e9:3e:27:b9:1f:14:fb:5e:1b:fb:8c:75:24:
                    7f:86:08:22:d6:24:d9:ff:72:51:8a:b4:44:26:ec:
                    97:82:f4:c2:25:9e:60:fb:c3:30:5a:94:41:ca:fd:
                    42:a6:4f:d6:f4:48:0c:9d:2a:eb:f5:b2:a6:5e:44:
                    8e:69:af:04:26:ca:67:8a:be:cd:4b:e2:da:cd:3e:
                    d0:43:d2:5d:34:91:c2:ed:0a:d8:8e:5f:76:62:37:
                    d8:d7:99:6a:eb:25:a2:0c:18:d9:56:45:69:e4:2d:
                    4a:76:10:9e:39:86:e2:0a:8f:54:68:a0:56:05:18:
                    29:15:fa:fe:09:fd:e5:d7:bb:90:3e:4e:65:91:9a:
                    f9:8c:c7:e1:83:75:46:bf:92:1b:d8:83:51:fa:c2:
                    9d:12:a2:69:19:e4:7a:3d:24:88:d5:b6:33:27:47:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FC:62:A5:9E:2F:2B:2F:A3:F3:75:BA:C3:E0:35:BB:C9:5C:78:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/17c9bc3d-0c27-33e6-8380-e15c19ffe32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c7:d3:08:8e:36:7b:0e:90:d4:33:94:34:4c:f1:52:85:fd:
         42:74:61:df:23:63:40:ef:66:64:22:9e:f9:f0:09:94:ba:3f:
         14:e2:3f:b3:b5:75:9f:f7:f0:bc:3a:20:75:4d:90:09:15:e7:
         a5:eb:b2:1e:d9:88:c5:08:28:e8:31:22:c1:c1:50:41:4a:13:
         87:d0:e2:34:82:6d:12:2f:42:3e:98:a3:77:3e:ff:8f:1a:69:
         08:bb:d2:8c:02:37:ea:6b:c1:b0:84:f5:72:2b:a4:f8:e7:c5:
         c5:60:44:e5:5b:b9:8a:d2:4b:b1:21:23:2e:d7:b8:97:97:43:
         fd:98:e9:63:9f:09:b4:10:1a:45:e5:2e:d5:e4:28:a9:db:9f:
         19:6e:9e:67:2e:55:f7:00:98:80:3f:d1:12:59:91:b7:cb:b7:
         e9:3a:74:41:2d:16:3c:ae:67:c4:15:53:1e:e0:72:53:12:8f:
         97:a5:b1:23:cb:57:ee:ef:8c:d5:60:f8:d8:7e:cc:46:ef:2e:
         e2:36:1c:12:be:38:f8:79:3a:d1:d6:bc:e6:fd:86:27:dd:1f:
         48:36:ae:9f:27:b0:b3:75:d3:a6:5d:7e:d6:3c:df:62:9a:5b:
         13:33:ea:1b:e9:db:ea:b0:ea:fd:fe:0f:ba:a9:bb:70:3e:e9:
         15:e9:e3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----