Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2de080cf-10bf-358f-b5fb-1fe6dc8b2042.roa
File:                     2de080cf-10bf-358f-b5fb-1fe6dc8b2042.roa (raw, json)
Hash identifier:          tU9ybjvI6fyrpAh/ussjovd/4AgXhpK1iDCP4JJV+1s=
Subject key identifier:   A4:D6:60:16:05:F7:7C:3B:06:A1:FC:0E:D3:6D:8E:BB:8F:9E:FC:6E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7DF46F62A9A6FEF6AB17540
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2de080cf-10bf-358f-b5fb-1fe6dc8b2042.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        208.181.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:df:46:f6:2a:9a:6f:ef:6a:b1:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=2606de7c-3a15-4ebe-aac9-5ed9685ad453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:26:a6:3c:d4:f3:28:21:69:e6:34:0f:9e:9c:
                    46:5d:7a:e4:d6:b5:99:3b:91:f9:bb:b2:8e:d7:4e:
                    92:3f:03:38:03:52:d7:6d:e0:a6:45:8a:7e:41:c9:
                    09:43:cb:cd:7d:11:83:eb:51:0d:69:6c:a2:58:26:
                    6a:34:c7:c0:ad:dd:c8:ce:17:03:4b:fc:c7:18:48:
                    58:7d:25:cc:75:58:d8:39:73:14:e4:45:42:24:98:
                    81:da:6c:1d:80:93:1f:e4:1a:6a:04:fb:58:d6:b4:
                    78:1b:7a:de:4f:c0:4f:4b:0c:42:53:ba:b9:1f:ab:
                    1c:d9:24:8f:c2:d8:a9:b9:74:f3:db:01:ba:b9:6b:
                    a4:83:90:e2:f9:7b:11:ff:d5:8d:8d:bb:e7:15:9f:
                    97:0b:0c:10:e4:6c:74:45:d3:99:e3:a4:0c:1e:d2:
                    ae:62:cd:07:5f:54:27:72:10:ef:d0:29:02:97:31:
                    f9:49:68:ac:92:07:6c:2b:32:03:e2:79:f2:9f:cf:
                    3b:28:3b:0d:fe:af:e9:24:1a:b3:64:d4:ae:70:6d:
                    d2:30:6f:81:22:46:da:08:18:86:d2:06:f5:33:a7:
                    c9:26:b2:c7:4c:84:ff:df:0a:86:9f:e5:5b:c6:95:
                    ef:f8:a4:eb:70:6a:a3:75:a5:b1:c1:6f:a7:d3:1b:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D6:60:16:05:F7:7C:3B:06:A1:FC:0E:D3:6D:8E:BB:8F:9E:FC:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2de080cf-10bf-358f-b5fb-1fe6dc8b2042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d1:62:e1:28:b2:20:18:ae:0d:87:a5:74:10:91:66:f1:de:
         d4:2b:f1:ae:1b:46:b9:e3:d2:74:0e:61:88:66:e6:ad:26:ff:
         c7:66:18:bd:bd:98:c4:b4:32:5d:84:66:61:94:e0:0b:4d:57:
         34:f7:c2:6e:41:a3:d0:6a:cb:30:6f:85:d9:25:c5:32:3b:5c:
         cb:c2:29:b7:1c:17:ee:7c:ac:e2:78:2c:8b:9a:2d:da:94:da:
         74:59:7c:50:29:2e:5d:0d:72:89:82:5e:67:a4:eb:f7:a4:2c:
         f3:63:43:21:b7:da:1a:c2:bc:9f:0f:f6:db:21:0c:fa:e3:ff:
         13:c4:ea:cb:c1:85:95:59:21:5a:b6:28:85:18:66:d8:27:86:
         39:60:64:ff:18:c3:2e:d1:68:c6:13:89:b0:f5:88:18:50:48:
         f3:ef:d3:8d:ef:72:24:8c:fb:0a:31:bb:b2:d9:a1:7a:9f:cf:
         43:b5:ba:89:67:b2:aa:12:eb:aa:85:9c:7e:32:ca:46:04:79:
         8d:ce:2d:48:e6:4b:00:92:45:2d:c7:24:c8:08:75:82:24:12:
         7d:ce:bf:60:1a:ba:3c:fb:f8:93:b2:70:68:b5:de:c9:42:b4:
         b1:be:69:68:35:d6:7d:f7:ac:22:58:96:20:9b:d2:7a:35:9e:
         b6:07:99:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----