Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3dae0b40-0971-3509-8f81-521e8144feea.roa
File:                     3dae0b40-0971-3509-8f81-521e8144feea.roa (raw, json)
Hash identifier:          PBo6n8P9voiAmU1+7sa5GP3Z65oPo2E/86LjiWFagDE=
Subject key identifier:   F2:E9:C7:78:15:87:31:C9:F7:D5:70:E9:ED:EA:48:58:C7:B6:6F:8F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837EF783CB7EB3C473584F4FC00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3dae0b40-0971-3509-8f81-521e8144feea.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Thu 16 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        99.199.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:ef:78:3c:b7:eb:3c:47:35:84:f4:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 16 05:00:00 2023 GMT
        Subject: CN=287b4c55-c15a-4a2f-8086-111582cca911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:3c:b6:c1:36:20:4b:e9:1c:be:ec:c3:d3:
                    da:9d:d0:e9:7f:ed:9e:9c:a9:2c:ab:65:05:11:57:
                    65:83:fd:df:39:1d:fa:28:68:c3:de:4b:0f:05:e3:
                    91:e1:ee:27:aa:d4:fd:2d:2f:fb:70:d0:bc:b5:0d:
                    75:a6:a9:94:41:53:20:cb:87:db:81:3c:cd:dc:7b:
                    f6:ce:74:f1:f7:c7:72:3d:23:ce:b2:66:01:a4:34:
                    2c:52:26:a9:e7:d3:92:1b:98:a6:c8:79:fc:5d:b4:
                    e4:26:49:07:0c:ff:e6:14:0b:3a:23:b5:ac:62:69:
                    a6:61:00:05:79:c0:05:52:46:d5:47:8a:d7:f4:26:
                    5d:d7:35:b3:e0:0c:2e:84:7c:a8:40:37:9f:61:8a:
                    7f:2d:1c:d3:e0:09:12:78:09:16:b8:1d:8c:68:1b:
                    10:b7:0b:14:ff:75:db:ae:44:4e:a0:35:6e:6e:31:
                    47:d9:39:bb:aa:b0:7a:ab:a9:db:50:89:3e:26:78:
                    97:4c:f0:5f:bc:f2:0a:0c:ba:1b:e5:27:7b:50:2b:
                    71:b4:3a:79:0f:65:20:22:7f:16:79:6b:a9:bf:ca:
                    90:dc:cb:d4:f2:a9:ae:36:cf:81:92:10:48:62:14:
                    ac:25:9f:d7:d7:b9:54:d5:7a:52:35:b9:fe:51:e4:
                    9e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E9:C7:78:15:87:31:C9:F7:D5:70:E9:ED:EA:48:58:C7:B6:6F:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3dae0b40-0971-3509-8f81-521e8144feea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.199.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:60:2a:f1:60:b0:96:12:da:c1:5d:07:ff:9f:f1:00:94:56:
         30:4f:bc:b8:48:e3:0a:cb:f4:92:b7:8d:8a:9b:88:21:99:3b:
         97:f6:e5:98:d8:b7:f9:d7:05:2f:42:8e:82:52:1b:27:1f:16:
         fe:b1:d5:38:ff:46:7b:9d:dc:ae:78:bd:48:c8:42:db:84:ea:
         f8:6b:aa:ca:c5:1f:38:93:85:61:56:24:df:f4:2f:6b:27:81:
         7a:c7:11:7c:1c:c3:ac:f1:8b:a2:e0:1d:aa:68:90:2c:a1:eb:
         47:2d:ea:a1:f0:af:08:5a:51:ea:33:06:ca:a2:5f:0e:90:d8:
         af:da:f4:38:e7:79:d0:f4:30:75:08:5e:d3:8e:d3:f5:ae:a7:
         2b:ac:de:d7:c5:e4:10:8a:a0:6d:a2:89:b9:da:c2:74:bd:f1:
         9f:b5:33:6d:1b:c0:fd:bf:30:bd:28:d1:80:3e:e9:5a:a6:4d:
         45:d1:cc:84:0e:a8:14:c9:41:98:68:71:60:0c:58:18:46:77:
         a2:a7:1d:26:07:58:f1:92:29:d3:4e:dc:a2:ab:5f:a3:7a:41:
         b0:47:f8:9c:69:92:9f:ab:22:3a:4f:6e:48:6c:01:bd:c3:bd:
         06:c8:68:8a:82:be:43:18:63:4f:01:fd:07:f1:94:88:20:95:
         52:6b:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----