Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8306fa7-484c-352a-82b0-e1f1d202f570.roa
File:                     f8306fa7-484c-352a-82b0-e1f1d202f570.roa (raw, json)
Hash identifier:          60IK+N8wX/67gArWHNJWAlb7kr5wD6rV2npm30TGn6Q=
Subject key identifier:   22:26:D2:A2:9C:4E:61:14:2C:61:75:12:86:1A:66:E6:25:1D:CD:38
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837EA5A45EF5A75CBB06BC961C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8306fa7-484c-352a-82b0-e1f1d202f570.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        209.107.96.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:ea:5a:45:ef:5a:75:cb:b0:6b:c9:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=1a09c19b-ca2b-4d39-b7af-8c8850cb51c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f5:34:e0:c9:8a:b0:85:bf:2a:e6:b3:ee:72:
                    b4:60:a4:f2:22:01:c8:ac:b6:1b:8e:b9:56:0d:ad:
                    be:e3:7d:db:da:6b:d8:6d:f9:00:be:a9:0a:c8:98:
                    6e:d4:27:07:4d:d3:a8:17:66:30:32:f5:b7:e6:66:
                    c0:f9:8f:2b:80:6a:85:fd:2b:c5:3c:ad:9d:86:5d:
                    d5:83:2d:92:9c:d6:cc:ec:a0:2f:e9:1a:22:19:88:
                    60:e5:28:8a:38:d2:69:66:2b:c0:d4:7c:6a:a4:ce:
                    16:be:83:e5:ff:a5:9f:27:fa:da:74:2d:54:89:11:
                    88:ec:ed:d0:41:f2:f1:ca:09:af:6c:8a:01:4d:be:
                    e4:1e:40:77:a5:c7:4e:d8:b7:33:dd:a7:f8:70:f9:
                    e7:f6:62:23:55:a5:a4:01:dc:9a:5c:28:0f:59:86:
                    ee:d8:3e:4a:54:6f:0b:d5:e0:89:5d:ee:f9:e8:3f:
                    05:48:e4:b5:fd:22:48:e5:5d:31:78:c5:f4:d3:d3:
                    97:c4:a0:f6:e5:2d:aa:4d:36:0f:f1:31:dd:d6:ab:
                    2c:98:8b:1d:22:c6:5e:39:39:3b:08:54:9b:c2:90:
                    53:38:fd:66:36:ba:bd:7f:4c:59:80:ab:13:3f:54:
                    35:48:95:bf:0a:72:87:e1:e3:79:54:f0:b3:2a:79:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:26:D2:A2:9C:4E:61:14:2C:61:75:12:86:1A:66:E6:25:1D:CD:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8306fa7-484c-352a-82b0-e1f1d202f570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ef:6a:a4:a1:db:82:22:8f:44:ca:0a:1c:13:8a:44:6d:14:30:
         f2:a6:bd:e0:ac:3f:b8:19:24:65:77:41:82:e5:97:f1:0c:bd:
         e3:f5:10:f0:a1:81:0c:72:5f:19:6e:4f:bf:1d:b4:a4:8c:57:
         b1:06:c2:67:13:77:7e:e3:3b:f9:78:a1:9c:34:38:ec:10:ee:
         96:ed:5d:9a:7d:85:2d:cd:9f:3b:3d:5a:21:82:3e:c1:cf:63:
         c5:2f:da:92:1b:1e:3a:6c:5b:b6:bd:0b:3e:05:bc:c2:9a:00:
         a2:23:0f:bb:46:ca:66:0f:d9:ec:b2:7d:98:7c:8d:7e:ef:02:
         b0:e5:d4:50:1c:6a:92:82:92:ca:7c:cc:51:ae:68:90:de:14:
         bc:e8:fb:d1:bd:8a:90:22:68:c9:22:76:e9:42:88:00:be:7c:
         07:7a:51:12:06:1b:4b:2d:e2:9b:ce:3d:88:31:eb:c2:dc:44:
         54:9b:ce:f0:e0:8c:a0:23:0a:c6:05:3f:21:3a:0d:93:aa:53:
         77:51:cd:f5:68:78:8b:f5:fe:28:89:c2:16:5b:6e:2d:88:ef:
         46:69:d2:4e:3f:07:54:dc:ae:d3:56:a1:28:b9:ce:c4:5d:6f:
         e2:60:fb:68:e9:8d:f0:28:a9:22:ee:8b:b1:3f:4f:de:27:41:
         82:24:27:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----