Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2111fd57-9073-37cd-b46d-e326f690f3fd.roa
File:                     2111fd57-9073-37cd-b46d-e326f690f3fd.roa (raw, json)
Hash identifier:          Gt8TFCXf0Mt5ZM+jSFvbWFr92nLHXSdk1BQnlbAzCoE=
Subject key identifier:   E5:6F:79:4D:B8:DF:D0:B9:A1:FD:DA:6A:83:20:14:BB:F1:F3:4B:E9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7DD705F14E1B89718BDD500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2111fd57-9073-37cd-b46d-e326f690f3fd.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        199.126.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:dd:70:5f:14:e1:b8:97:18:bd:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=dc6c7261-5994-4ba2-8352-1ad8ff11bda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:92:3b:88:ce:3b:ca:a1:98:4d:c1:d1:a5:85:
                    3d:a2:d9:11:8c:aa:a4:e9:53:5f:6c:f9:ce:c1:d5:
                    a1:14:ac:09:2d:8d:17:03:56:16:41:54:7e:78:87:
                    7d:03:ce:80:24:b0:58:b1:5c:59:05:39:e8:83:f1:
                    84:44:49:2a:6d:b3:27:43:b9:23:e4:ee:fa:c3:8d:
                    82:6b:af:95:16:5d:26:ed:13:3e:8a:0f:07:dc:58:
                    3a:63:61:9f:28:73:3b:4f:51:d6:90:30:1e:e1:de:
                    a8:2a:6c:9f:c7:76:8f:e5:e0:1b:7f:a5:60:0c:0e:
                    85:0c:1e:92:05:cc:6e:9e:e1:6a:40:d3:25:db:b6:
                    02:e7:69:69:4c:89:e2:eb:40:60:42:d5:34:aa:1d:
                    10:64:62:93:75:30:d4:a6:00:89:85:01:5b:78:30:
                    56:64:79:b1:11:22:64:8e:9b:19:f0:af:06:f2:ee:
                    3f:85:74:1a:1e:9e:1b:a8:ff:5a:58:17:14:8b:b7:
                    cb:23:fb:f8:31:98:71:3d:c0:4f:02:96:38:51:7e:
                    a7:6d:1a:21:44:d8:f9:5f:ca:bd:5b:43:39:f5:da:
                    60:ca:c4:63:ae:97:40:cd:0b:02:9b:c5:29:19:9d:
                    c5:7a:c2:16:c2:d4:a0:95:ce:c3:cf:11:50:ed:b4:
                    fb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6F:79:4D:B8:DF:D0:B9:A1:FD:DA:6A:83:20:14:BB:F1:F3:4B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2111fd57-9073-37cd-b46d-e326f690f3fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.126.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:f3:7b:fe:69:00:78:eb:78:12:79:67:ae:06:a0:32:9d:5d:
         b9:23:18:99:5e:12:b7:57:a8:af:f7:7c:d0:e8:4c:77:36:ab:
         08:46:3b:95:c6:6e:a9:5d:9b:15:10:85:d8:a9:40:a3:70:77:
         0a:2b:9d:01:85:84:4b:32:ea:f3:70:0f:09:6c:48:f3:2a:a7:
         8e:9f:e8:e3:bf:b5:b9:95:82:0b:ad:03:a6:35:71:4e:0f:fb:
         43:d6:62:e7:be:d2:5b:e9:21:56:c3:c5:c3:5d:8a:0f:21:95:
         27:a6:64:22:80:98:da:d2:82:e7:52:58:a3:10:7a:e0:b1:94:
         53:5d:99:94:e5:ef:7f:ba:c0:42:8a:e1:34:37:cf:e5:23:5e:
         2e:63:72:ed:c4:73:a3:54:bc:37:bd:19:ba:98:b2:5b:d3:50:
         15:f6:eb:43:15:f0:d3:9a:c9:76:82:6d:98:07:56:ff:6e:af:
         de:8d:cc:04:87:70:6b:61:86:ac:65:26:46:b8:46:30:5e:0a:
         0b:da:04:40:67:fa:d2:bf:3a:23:9e:93:64:88:a0:1d:05:fb:
         9a:ba:aa:7a:ab:bf:f6:45:50:fa:e8:3c:0e:41:e4:e6:48:02:
         8a:4b:55:d0:73:5c:c8:da:8d:10:94:20:d4:d1:8c:73:99:78:
         ab:e1:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----