Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/db8b7ca1-0acc-3a15-8e89-0f183a4c56ae.roa
File:                     db8b7ca1-0acc-3a15-8e89-0f183a4c56ae.roa (raw, json)
Hash identifier:          ZrQdvSfYoe7WMVHQSXKG6qGdKEj3H72kYSZdccMQz9w=
Subject key identifier:   66:2B:90:09:46:23:15:E8:99:69:76:96:4E:5A:41:92:0A:16:96:18
Certificate issuer:       /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial:       010D0C9F432858393C8A1B286F2D8788BD362700
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/db8b7ca1-0acc-3a15-8e89-0f183a4c56ae.roa
Signing time:             Fri 18 Dec 2020 05:00:00 +0000
ROA not before:           Fri 18 Dec 2020 05:00:00 +0000
ROA not after:            Thu 15 Jun 2023 04:00:00 +0000
asID:                     20249
IP address blocks:        169.196.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:3c:8a:1b:28:6f:2d:87:88:bd:36:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
        Validity
            Not Before: Dec 18 05:00:00 2020 GMT
            Not After : Jun 15 04:00:00 2023 GMT
        Subject: CN=30cb629f-6383-46bb-96d8-6c77cff3e400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:fa:ff:11:fe:6b:7b:1d:dc:54:84:a3:f4:
                    08:65:49:e0:b6:d4:bb:23:63:72:66:6d:16:cd:c1:
                    15:12:31:0b:f3:e3:e5:01:e4:3e:f0:75:5d:b3:d1:
                    19:ce:a8:5c:da:53:0e:6d:cf:dc:e7:f7:44:5b:cf:
                    88:cc:c7:24:8e:7c:9c:73:43:34:ec:0d:63:03:da:
                    6f:a2:0b:cd:f5:6b:d6:5c:a5:af:a4:61:ed:f8:4e:
                    3d:71:5b:73:e8:0a:12:21:3f:27:69:d1:02:1c:18:
                    74:36:80:02:21:1d:df:51:4b:a6:46:1d:6e:bb:9c:
                    e4:0e:cf:94:43:fc:63:6d:80:39:77:b4:cb:9a:54:
                    10:8c:3d:92:c6:52:64:5d:8d:49:0a:b7:6a:be:82:
                    dc:c3:9e:41:57:5f:7d:b6:7c:3b:1c:00:22:55:00:
                    87:d4:5f:84:c4:a7:aa:fb:40:57:c3:5f:2b:d8:e6:
                    ff:65:61:8d:14:96:12:e9:79:17:bd:c4:db:5e:b4:
                    20:3d:de:cc:86:62:da:55:f4:42:36:e0:a8:9f:dd:
                    7a:73:fc:4e:ee:d4:be:a4:31:46:6a:5e:4c:a0:64:
                    c6:e7:74:7a:af:dc:10:13:8b:17:88:db:4c:b3:3a:
                    43:3d:dd:09:51:09:e7:61:b2:84:5c:d3:a5:0b:78:
                    a8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2B:90:09:46:23:15:E8:99:69:76:96:4E:5A:41:92:0A:16:96:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/db8b7ca1-0acc-3a15-8e89-0f183a4c56ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl

            X509v3 Authority Key Identifier:
                keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.196.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f0:1b:51:cc:3a:6f:3f:b7:2b:04:4e:3b:a3:94:36:03:d0:
         1c:dd:93:3b:a9:40:db:62:8f:ad:de:12:96:da:13:4f:c3:c5:
         e9:7c:e3:74:45:4d:a7:fd:12:ed:50:01:3e:7d:36:f0:e7:57:
         99:58:f1:64:49:20:b3:1d:64:b0:0d:1b:7a:87:a9:0c:50:f4:
         e5:c1:6c:33:60:31:00:3e:7b:bc:83:f0:95:43:80:57:7c:1a:
         3f:fa:36:3f:9b:94:e8:5f:7c:c4:f5:5d:fd:75:cf:ac:71:52:
         9b:34:b4:72:aa:42:56:69:63:e8:a0:32:ea:f4:cc:f5:b9:9a:
         ba:5c:7e:23:91:08:2a:82:04:1c:68:bc:47:88:75:ce:28:7b:
         d9:c1:55:74:11:97:20:78:f0:1f:49:42:28:7f:7c:9e:aa:a0:
         69:05:1a:33:a7:0a:e9:48:e0:36:8d:09:59:62:e7:f1:30:27:
         5a:1a:de:b3:f2:c5:df:73:b7:a4:9e:b4:76:d8:38:85:37:3f:
         7b:49:ed:ba:eb:d2:2b:fa:86:e1:1b:80:ba:7d:08:e7:4a:8a:
         f1:cd:20:2d:95:52:f2:df:71:92:38:a0:23:8f:d3:e3:0a:4a:
         9b:af:90:31:3e:46:eb:57:7a:9e:64:7b:17:4f:f8:33:a1:59:
         6a:f9:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----