Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7ed8f6f2-4d69-3015-8c7a-6cb98560927f.roa
File:                     7ed8f6f2-4d69-3015-8c7a-6cb98560927f.roa (raw, json)
Hash identifier:          qQAXWh6kfxyV6mxPx3WLDvP9uP9cxj2NKawgsCl6cyE=
Subject key identifier:   A5:DD:D6:1A:45:30:54:D4:DD:2C:3C:CA:C2:25:35:23:7C:06:F7:C9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837E459A2FECE6D223E8D119180
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7ed8f6f2-4d69-3015-8c7a-6cb98560927f.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 12 Feb 2023 05:00:00 +0000
asID:                     53987
IP address blocks:        207.34.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:e4:59:a2:fe:ce:6d:22:3e:8d:11:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2023 GMT
        Subject: CN=e63ca572-848e-498f-a0a7-d755de52299b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:d0:5c:c0:50:c9:07:2b:eb:43:30:09:b1:
                    60:7e:64:5d:d7:72:37:90:f8:21:d2:07:e4:33:51:
                    e1:48:c3:c8:ef:0f:9e:b6:b6:50:97:b2:71:c4:9e:
                    09:78:89:e0:73:bf:04:c4:04:80:d5:0a:c3:9c:22:
                    d5:1f:2d:4c:94:d3:4d:94:f6:b7:4e:9a:55:ae:25:
                    c3:47:34:d5:9e:70:8a:33:e4:e4:55:2c:9c:01:7e:
                    32:df:a6:8b:49:59:60:38:d9:34:f6:5b:4b:28:52:
                    af:44:77:a3:e8:8d:73:1e:a2:6b:e9:01:65:4c:80:
                    42:3b:21:ad:a6:f2:ee:9d:c4:00:2a:80:c3:09:3e:
                    d6:06:09:8a:f0:45:28:15:f3:e3:5e:09:57:1d:dc:
                    8e:32:ba:23:d8:ef:8e:51:d9:5a:56:5f:34:2d:49:
                    58:99:8f:44:61:2f:dd:7e:dc:2a:42:b9:6d:64:d7:
                    01:5a:9f:0c:ad:cd:39:7d:d0:cc:7f:f3:64:ce:5f:
                    b5:9c:b4:eb:64:6a:a6:9f:9b:6a:18:5c:40:46:3b:
                    ee:e7:b0:58:7c:5d:51:66:1a:64:2e:90:82:e3:81:
                    17:23:b8:d7:ea:d4:31:e6:69:ee:36:54:b3:1d:f1:
                    52:8a:f9:c3:80:f7:72:e3:98:23:6d:8f:9c:25:1f:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DD:D6:1A:45:30:54:D4:DD:2C:3C:CA:C2:25:35:23:7C:06:F7:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7ed8f6f2-4d69-3015-8c7a-6cb98560927f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c4:b1:e4:27:4f:67:64:bd:6a:b5:6f:8d:8d:18:17:f2:07:
         dc:98:9d:4f:f7:2c:a6:53:0e:38:aa:8c:ad:ad:6b:83:71:ba:
         ac:61:48:5f:1d:71:54:a8:1a:03:5d:e2:f3:44:c1:bc:1b:3f:
         5f:c9:a9:88:f8:b8:83:35:2b:fd:aa:3f:b2:54:48:4e:99:64:
         4b:1e:1a:cd:9e:d8:ef:a2:89:a8:f4:ce:57:10:27:db:d4:fb:
         59:cc:c7:42:4c:87:23:c6:0c:00:82:34:e3:39:51:21:5e:31:
         58:80:f4:9a:91:7c:05:29:b7:cc:54:42:2a:36:b6:84:04:d1:
         91:d3:a6:0c:2b:6c:a0:b7:c0:2b:2c:82:5c:3f:f4:e3:5a:5a:
         09:df:d9:aa:60:d4:ac:4b:c0:37:33:4e:67:59:87:98:67:65:
         05:8a:33:a2:97:d5:6e:0e:2b:ab:92:3b:3d:eb:52:6b:6d:47:
         16:fe:f4:05:4c:cc:d0:19:ee:9f:f4:51:1a:62:06:cd:86:51:
         65:04:6e:c8:2a:d7:b6:88:be:8f:bc:ba:27:07:5a:48:55:3b:
         a5:cd:f8:53:40:c1:7e:dc:07:27:8a:4c:2a:32:fd:d8:7c:d2:
         d2:6d:46:87:9c:12:f9:ad:d8:f0:ad:84:ce:fa:17:53:fd:00:
         3c:d8:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----