Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/611e5da3-f1aa-311c-9ebd-49a7dd69a252.roa
File:                     611e5da3-f1aa-311c-9ebd-49a7dd69a252.roa (raw, json)
Hash identifier:          2I0cEfBoM+36tJodd985vR5J/iO75bfVdjaHl9E8pBw=
Subject key identifier:   58:25:8F:F0:91:E8:48:41:12:99:B8:20:1D:17:EB:56:23:1E:E2:FB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D701782109840265CFE5D300
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/611e5da3-f1aa-311c-9ebd-49a7dd69a252.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        205.206.65.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d7:01:78:21:09:84:02:65:cf:e5:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=36f5bb05-d7f4-4255-aea5-d088f16cf9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ef:45:5c:53:79:ff:55:be:09:8e:80:cf:d5:
                    5c:ec:05:d4:a7:7d:68:73:f1:71:17:f2:eb:bc:52:
                    2b:d7:af:b3:46:44:f8:b1:26:17:2e:ed:c7:15:a5:
                    d6:b9:b5:b4:d5:db:6f:52:b0:6a:e3:ae:98:b0:96:
                    29:8b:69:73:84:1a:71:b0:ba:c7:09:ae:ce:f7:aa:
                    fe:49:83:a7:c8:3c:ff:5f:0f:0a:02:49:4e:12:55:
                    27:29:a2:be:b4:0d:a2:67:71:d4:64:af:4c:c8:57:
                    15:c2:6e:dc:90:50:f4:30:87:3f:5f:e5:08:b6:77:
                    e4:ed:26:82:0b:9b:58:35:1f:9a:75:bb:94:68:88:
                    b8:42:5a:38:89:2e:89:5f:01:fb:b6:35:ed:07:e0:
                    ba:d6:3e:4a:ba:60:71:c3:b7:36:87:15:50:34:c1:
                    f3:51:26:e8:f9:e1:f3:10:8f:42:0f:c9:f9:c8:17:
                    e3:83:5a:da:10:a1:14:ec:2a:a7:1d:8f:be:a2:4c:
                    6c:4b:35:1c:13:c7:e2:e7:40:74:f6:63:94:30:ae:
                    fe:26:d0:c7:f0:80:68:41:7d:4c:0c:b1:0e:61:80:
                    07:dc:e9:e9:98:af:c7:fa:c2:40:3d:3e:f5:b0:f5:
                    28:e1:a5:37:4b:0a:f8:c8:23:8a:d2:48:98:8b:b6:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:25:8F:F0:91:E8:48:41:12:99:B8:20:1D:17:EB:56:23:1E:E2:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/611e5da3-f1aa-311c-9ebd-49a7dd69a252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.206.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:85:5b:ff:d9:27:57:82:8a:d8:e2:d0:5e:ac:f4:6e:95:dd:
         09:11:c3:69:f1:00:02:13:b4:e0:6d:85:07:9c:85:e9:7c:2d:
         68:a7:b7:c5:56:3e:5a:4a:e9:fb:5f:b0:74:1c:1c:38:94:66:
         71:12:c8:dc:cb:21:7c:47:87:18:83:3d:5e:37:01:67:d0:2f:
         e5:bf:ea:76:4e:5d:57:13:47:36:48:81:70:1e:b0:56:b4:9d:
         bf:63:06:31:55:7e:fb:f5:df:a4:e7:e0:aa:5c:0c:a7:e1:28:
         ae:3e:1b:07:89:c3:cc:11:34:6f:fa:e2:d7:16:4a:0b:59:27:
         a7:26:ee:99:ea:9a:62:16:93:56:46:13:3b:8f:77:32:58:2b:
         eb:3b:16:5e:29:73:b0:88:50:41:18:8e:43:30:fa:73:14:5a:
         54:a9:42:e6:ff:dc:f1:58:6d:31:6d:51:e3:cd:cd:91:df:07:
         8d:a3:5e:ce:d6:bd:76:c4:bb:e7:38:37:64:9b:2f:c3:e0:24:
         2d:be:9b:5f:4e:27:a5:ac:9f:b1:68:6a:4b:f1:99:08:04:2a:
         d5:06:97:0d:cb:79:fb:74:e0:16:49:43:ef:99:45:ec:18:6d:
         e4:c6:f1:b9:e4:22:d3:92:6d:fe:c9:68:63:73:f8:65:0a:ad:
         8b:81:1e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----