Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/32722c45-afca-34bf-861e-77581ef3b161.roa
File:                     32722c45-afca-34bf-861e-77581ef3b161.roa (raw, json)
Hash identifier:          zMyM9prnpPvf3zr+PxZHH3V8HvnzXAvsFDzFsYaD3Uw=
Subject key identifier:   54:F8:18:F2:1C:EF:6F:0E:A5:18:A9:BD:AB:95:C5:09:7E:F6:53:E3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7DCFDE50FDE4EC9752AEEC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/32722c45-afca-34bf-861e-77581ef3b161.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        172.219.0.0/16 maxlen: 16

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:dc:fd:e5:0f:de:4e:c9:75:2a:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=7df9e665-b30e-47fe-83e9-31e52f69ac56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ae:5f:67:72:03:28:7b:b7:6e:00:54:47:74:
                    6c:8f:c0:b6:4e:1d:60:b9:af:f3:13:e5:43:0f:d5:
                    4c:39:0c:90:75:21:41:83:72:87:f4:a2:b2:7b:3d:
                    20:88:4f:80:6c:b2:ed:6c:4b:16:75:40:a2:71:dc:
                    95:57:3e:4c:9b:d3:9e:da:ba:35:82:f4:5a:f7:a6:
                    c6:a4:a3:13:72:40:a2:ff:4b:c6:0e:0f:1d:7e:94:
                    1d:17:11:7a:90:13:43:df:17:8b:e8:4e:62:99:a8:
                    eb:71:1b:2e:19:e9:6b:36:50:b5:a2:3b:a7:b9:b9:
                    c3:f8:2f:96:e4:57:93:b8:a6:20:41:1f:43:6c:7c:
                    cd:eb:c9:80:0b:ee:61:20:51:30:77:e7:3f:bf:1e:
                    a1:a1:f5:3b:54:aa:4b:1c:03:e4:4b:b1:22:c2:8b:
                    ce:2a:54:d1:bf:d1:5a:fb:ef:e8:fe:0a:9c:56:7f:
                    7a:35:ea:b2:dc:e8:4c:7c:a5:f5:bf:c9:4e:36:ec:
                    5f:c9:80:62:d3:62:76:5d:33:47:c4:3d:d8:19:7e:
                    a0:08:84:11:d9:1d:50:80:3b:7c:20:be:83:86:c4:
                    83:7d:df:3f:2a:08:37:45:bd:40:43:56:56:1e:62:
                    09:dd:b7:2b:a5:c6:e0:3c:ad:bb:a1:b4:33:d2:b2:
                    b5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F8:18:F2:1C:EF:6F:0E:A5:18:A9:BD:AB:95:C5:09:7E:F6:53:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/32722c45-afca-34bf-861e-77581ef3b161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:9a:5d:6e:cf:23:58:cc:99:e1:45:7e:95:cb:48:39:b5:
         96:84:c9:90:31:2d:67:c9:3f:55:e0:13:4e:90:32:00:4f:e5:
         0d:57:a0:5b:87:ab:2c:70:f0:fe:77:0e:da:06:66:59:e5:39:
         e8:81:46:a0:b9:ce:f4:9b:8b:ea:d7:bd:63:93:f9:0f:b4:e0:
         f1:b5:85:15:ee:b5:e5:7d:58:db:cc:01:2c:21:c9:9e:c6:ac:
         48:c1:5b:30:51:03:ce:f0:6e:df:4c:f4:fb:0b:16:02:24:76:
         68:6f:31:b5:85:f5:c4:f9:80:6d:c2:e8:3c:cc:58:1f:5a:33:
         e8:58:bc:0c:8c:7d:f2:a7:7e:c7:5e:66:c2:2a:1e:53:07:45:
         e2:ba:95:78:a4:60:a1:68:65:03:72:56:a1:0c:1e:be:3e:e7:
         4c:55:18:c9:28:b6:31:97:8a:4f:da:c0:cd:d7:fa:0a:67:79:
         67:d5:43:8d:66:a2:5f:f2:a3:aa:c5:d6:01:48:54:14:0a:76:
         bb:73:b4:64:8f:35:cd:f6:f1:24:c6:ff:ee:58:c9:48:cb:31:
         b6:f7:d9:29:29:b7:ef:38:88:57:47:2d:8e:dc:1f:b2:b1:a1:
         43:42:af:5b:ea:44:01:67:01:fd:bf:a0:25:99:f9:31:89:14:
         4b:f6:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----