Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/79d264a5-4ec9-3dd8-8b94-ea87338d44be.roa
File:                     79d264a5-4ec9-3dd8-8b94-ea87338d44be.roa (raw, json)
Hash identifier:          JDyRzfiodPqevcIUBTUdNIz126X50D1HNWJaq/A6aHA=
Subject key identifier:   D2:3B:2E:81:4C:75:66:11:25:9D:C3:99:89:73:53:71:3F:A9:30:F5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837F7D412B23CA23E74755BEEA0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/79d264a5-4ec9-3dd8-8b94-ea87338d44be.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 19 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        142.59.0.0/17 maxlen: 17

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:f7:d4:12:b2:3c:a2:3e:74:75:5b:ee:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 19 05:00:00 2023 GMT
        Subject: CN=f71f173f-6b08-4f83-b0c8-312c367b2f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:37:71:06:63:bd:ce:b2:fd:de:6a:91:9d:
                    b7:b1:7d:61:f0:83:ae:20:8a:3c:78:dc:e3:d9:7f:
                    d9:5b:70:34:47:21:a6:d4:46:13:9f:d5:60:02:ce:
                    98:3b:bd:a0:71:90:79:19:da:cf:c5:29:e0:56:cf:
                    81:82:11:53:29:09:5b:92:23:34:1c:9c:3e:15:e4:
                    9d:96:32:a1:91:93:71:98:a5:5b:35:21:79:af:bc:
                    13:e2:10:94:38:02:86:40:ec:50:c8:84:36:c8:e9:
                    de:d4:de:a1:55:b7:0f:e6:c4:92:a0:40:a2:4e:0a:
                    6b:09:dc:98:f0:6c:22:5b:aa:45:d1:eb:59:db:fa:
                    8b:bf:32:74:ed:cd:a7:60:77:57:31:8f:98:91:de:
                    eb:1c:2a:e3:d6:62:f6:74:e2:b4:fb:6e:03:6b:12:
                    56:c0:13:29:ea:46:c4:ba:8e:ef:5d:62:a0:86:0b:
                    df:26:c8:08:03:2a:13:52:e3:24:9b:08:47:d1:4f:
                    f7:c7:59:9d:c4:41:b4:2a:83:87:24:b6:31:49:95:
                    94:ed:27:5b:31:9d:f0:37:83:84:e6:cc:06:47:17:
                    80:1b:b4:5d:85:92:c8:c2:3c:88:66:08:11:7f:a7:
                    ce:55:00:d7:c9:d5:21:1c:71:1e:8e:b7:d9:81:9c:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3B:2E:81:4C:75:66:11:25:9D:C3:99:89:73:53:71:3F:A9:30:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/79d264a5-4ec9-3dd8-8b94-ea87338d44be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.59.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:33:3f:b5:41:b3:da:4c:ea:ef:02:53:ea:28:0c:7d:15:83:
         8b:e3:a5:87:90:12:84:28:c9:c4:1a:6e:5c:af:76:be:6d:b6:
         ac:47:e9:7a:2b:b3:95:86:b3:73:6f:9c:3c:1d:e3:2c:df:1d:
         21:79:ca:58:42:5d:dc:07:6c:c4:d1:e1:99:7e:99:3c:df:51:
         06:2d:96:58:12:18:64:d1:db:6c:20:1a:6f:0f:5e:db:69:cf:
         85:ee:7c:9f:0e:3e:fb:f2:1a:23:3a:ad:af:ef:13:c8:9d:f7:
         62:8d:04:53:02:6e:8e:1a:2a:fd:ff:07:b6:17:b4:f7:a5:76:
         14:ec:8a:09:3e:15:92:fd:4c:1a:4e:a5:a9:ca:4d:ea:1a:9c:
         fb:c8:03:12:16:bd:86:97:12:36:e2:d8:9e:9b:1d:29:2c:f0:
         d0:2b:3a:25:59:5f:bd:80:39:52:c6:0d:9c:63:61:ea:b5:f3:
         83:42:fc:bb:13:69:b8:73:88:58:63:39:03:f6:86:83:75:56:
         88:df:c6:c4:f5:73:d3:b5:df:2d:0b:fe:94:af:4c:42:6f:11:
         01:5a:e8:69:e3:da:81:b2:4a:38:ba:f8:1e:5f:48:94:9f:f3:
         25:0c:b2:04:d1:35:38:80:2c:01:3e:25:9e:40:e4:fc:57:65:
         de:d5:da:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----