Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6a31d1ea-5fbe-33de-a292-0c330a259efb.roa
File:                     6a31d1ea-5fbe-33de-a292-0c330a259efb.roa (raw, json)
Hash identifier:          yZL37Hbc++XwiEhvoaQgwrfxkt5YIRpDwKUdwRDjPT0=
Subject key identifier:   8C:28:7A:64:56:A8:04:99:9A:A5:47:64:D4:DE:95:75:13:E5:54:7A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7D3C000B1BA4C065C440F00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6a31d1ea-5fbe-33de-a292-0c330a259efb.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        96.1.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:d3:c0:00:b1:ba:4c:06:5c:44:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=bc49b67f-9652-4d3b-b94b-35a2aad02955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:93:28:b9:ac:1a:f5:71:62:60:25:f1:ef:
                    4b:65:c0:6c:15:b5:75:27:cf:51:40:4e:74:da:f9:
                    2d:10:60:6b:39:94:b4:89:b2:bc:2e:6a:21:bd:2b:
                    08:55:9d:a6:af:bf:a2:ea:5e:20:53:3d:6e:17:64:
                    ed:25:f7:1c:ea:55:bb:9e:e8:5c:b9:b0:3b:7b:a1:
                    97:19:d5:c1:14:1f:db:c4:eb:05:34:7a:e1:03:01:
                    27:d4:d4:4b:85:e3:7d:29:15:81:97:53:8d:6a:7b:
                    30:8e:1d:01:cf:0b:53:a3:66:50:d2:c4:4c:85:d8:
                    19:65:5e:7c:f6:8e:d6:61:3d:ca:8e:7b:b7:36:a3:
                    ca:0c:81:58:82:a1:b4:45:3c:e6:77:e1:54:e9:3d:
                    7e:a8:c6:c9:04:2c:b3:a8:d0:a1:8f:56:52:51:c4:
                    a3:28:6a:b6:6b:63:f7:6f:c6:4d:48:8b:b3:87:88:
                    f4:56:07:b3:99:61:2f:96:42:ef:13:e4:c8:67:d0:
                    2d:08:2d:c1:ab:be:fe:00:aa:61:51:c7:25:d3:ae:
                    a6:aa:0d:d3:65:06:55:e1:e8:6a:55:86:94:5f:d9:
                    98:05:2c:34:8e:2b:13:3c:e0:20:d4:8a:e9:78:c6:
                    9a:d4:01:d5:81:52:c5:5e:35:6e:9b:f1:52:20:31:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:28:7A:64:56:A8:04:99:9A:A5:47:64:D4:DE:95:75:13:E5:54:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6a31d1ea-5fbe-33de-a292-0c330a259efb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.1.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:08:2d:9e:52:8f:4c:83:b0:52:57:00:10:6a:dd:ea:17:
         aa:8b:86:a2:1c:93:6c:37:db:cd:a7:43:f6:2f:29:b1:83:61:
         3b:f9:95:e8:f8:4b:c2:e9:b4:6f:aa:56:d9:38:af:45:b4:de:
         74:02:3a:80:12:51:a3:25:46:87:1f:dd:63:09:91:58:d6:21:
         cd:0d:98:07:88:f0:f2:6c:cc:56:de:07:73:c1:f6:c3:de:86:
         75:cc:e2:0b:7b:5d:3e:fc:50:65:6c:2d:49:7e:e0:64:d3:e3:
         16:8d:f6:83:b3:26:98:84:6f:bc:b3:8b:ec:6d:e7:df:cf:5f:
         cf:81:bc:7d:72:dc:47:72:bb:cf:8f:da:f3:64:16:cd:5e:40:
         90:d3:f4:c5:4d:80:99:dc:a2:ba:ed:2f:34:ba:23:50:d8:6f:
         b6:6d:07:17:ab:83:ba:7f:b4:d1:8a:4d:97:05:3e:13:6b:ee:
         4b:f7:42:71:8c:55:27:a8:76:d2:72:07:64:fd:d9:9b:fa:97:
         38:0d:73:89:0d:a1:01:3c:58:62:28:9f:3b:6d:0f:f1:ec:5f:
         f4:c2:7a:d1:2d:c0:c2:d6:5c:94:14:1e:ee:10:8e:c4:e3:95:
         e6:9b:97:31:5e:f5:b1:64:40:e9:71:01:19:4e:19:56:a7:04:
         34:59:f4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----