Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/5a328cf3-ffa4-3168-81b9-4d0603df15c5.roa
File:                     5a328cf3-ffa4-3168-81b9-4d0603df15c5.roa (raw, json)
Hash identifier:          YRaAUxF+5wJ14C/ZLD0yPTnfAOLhzIazG8L8QGNd5X4=
Subject key identifier:   A4:B7:29:E6:3C:07:B4:B6:F1:EF:0F:2B:E5:B8:18:3B:48:1B:DE:31
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285838320C7988059AEB549B060D00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/5a328cf3-ffa4-3168-81b9-4d0603df15c5.roa
Signing time:             Mon 16 Nov 2020 05:00:00 +0000
ROA not before:           Mon 16 Nov 2020 05:00:00 +0000
ROA not after:            Sun 12 Mar 2023 05:00:00 +0000
asID:                     2914
IP address blocks:        64.40.152.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:32:0c:79:88:05:9a:eb:54:9b:06:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov 16 05:00:00 2020 GMT
            Not After : Mar 12 05:00:00 2023 GMT
        Subject: CN=111dd090-5c75-4d01-b26d-ae42409ab0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:69:bd:a2:54:a8:0b:6b:66:96:67:4d:66:15:
                    36:84:d3:b9:c4:32:75:90:c4:3d:c2:cd:9b:e5:ba:
                    a3:0c:2f:b4:a1:11:5e:49:ea:af:34:15:b7:67:ac:
                    46:bd:ab:95:0b:cd:7a:30:23:e7:84:3b:c9:1d:f0:
                    9d:97:ef:f6:21:0c:fa:bd:4b:01:ad:bb:7d:59:7f:
                    c3:16:e4:f8:a6:e5:28:3b:d5:c7:be:3d:b6:34:ed:
                    2d:1a:84:8a:64:7a:68:c8:f2:b4:47:ff:8c:a0:65:
                    5d:3f:92:26:7b:bf:fc:d7:63:ad:51:93:49:c3:de:
                    db:04:ba:c2:3d:52:88:1d:ef:d0:fb:17:6b:92:c6:
                    bb:c3:4a:4c:bf:3a:34:66:2a:c4:bb:19:80:ad:3d:
                    b0:8c:43:ba:6f:32:13:8e:2e:e1:bd:2d:29:94:35:
                    c7:2f:f4:17:71:64:3b:c5:9e:15:b2:d5:25:44:d7:
                    61:ec:49:f1:d0:56:70:6e:fd:35:42:69:7b:8f:55:
                    f5:69:4b:27:d7:3e:cf:aa:32:15:44:0b:49:84:41:
                    91:3e:39:5a:49:57:fc:40:e4:49:62:83:fd:24:28:
                    1b:71:dd:68:5f:b4:2c:46:59:18:c6:8e:fd:89:a7:
                    5b:8a:fc:a6:62:25:30:ce:9a:15:d7:66:75:1e:ef:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B7:29:E6:3C:07:B4:B6:F1:EF:0F:2B:E5:B8:18:3B:48:1B:DE:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/5a328cf3-ffa4-3168-81b9-4d0603df15c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:49:8f:b2:01:f7:d9:8a:57:6d:81:40:74:39:c9:e2:4b:10:
         c3:23:ad:63:4d:d1:5e:3f:52:9c:db:e6:91:70:4a:db:5d:c7:
         f4:d3:8f:8e:d0:75:d9:53:f0:29:33:17:99:8a:92:61:77:12:
         aa:22:bc:cc:3e:60:d3:1f:bd:56:7e:48:21:04:ca:b6:9e:40:
         19:ea:c4:d2:57:a6:9f:4e:c1:73:af:c2:c6:01:de:2f:a2:4c:
         62:13:13:25:9e:1d:c3:10:6a:7b:20:75:a8:04:8c:7d:2f:52:
         14:4d:22:7b:3b:53:33:d9:0d:bd:b0:e1:17:c3:96:2e:a5:00:
         4c:0a:6b:36:88:54:42:d8:7a:ec:d3:29:6c:de:7e:01:d4:ae:
         4b:a7:d6:a1:58:77:1d:f1:5c:00:ca:4e:e3:29:5e:fe:79:15:
         12:10:ea:e1:20:27:5e:78:9a:de:8c:0c:63:a9:f6:91:25:05:
         67:ee:96:f5:34:62:d0:d2:c4:61:fd:20:e0:76:eb:01:7f:d6:
         51:24:a0:d8:2f:04:6f:4b:c0:3b:4d:93:08:0d:f5:1d:6f:ad:
         42:34:57:19:66:9f:d4:e4:36:fe:85:3d:e8:6f:4e:53:c8:d6:
         8f:16:99:42:ef:9c:32:c5:6e:b0:9a:bc:ba:bf:9b:cd:ee:c7:
         9a:4d:33:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----