Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/a0d7024d-e16e-3f74-a586-6a89c0073af7.roa
File:                     a0d7024d-e16e-3f74-a586-6a89c0073af7.roa (raw, json)
Hash identifier:          OyQ4Gts5UFL9j5C0x3hY2f4BqhYgGoRQNyPl03sN+I4=
Subject key identifier:   0B:0D:FF:5B:F7:60:58:11:E7:1C:5B:48:F2:FD:45:A0:79:FB:1C:0C
Certificate issuer:       /CN=829d195a-d541-4371-970d-5be56cd489a8
Certificate serial:       010D0C9F4328583710731CBC84D2792069339000
Authority key identifier: C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/a0d7024d-e16e-3f74-a586-6a89c0073af7.roa
Signing time:             Mon 24 Aug 2020 04:00:00 +0000
ROA not before:           Mon 24 Aug 2020 04:00:00 +0000
ROA not after:            Mon 28 Nov 2022 05:00:00 +0000
asID:                     46892
IP address blocks:        104.145.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:10:73:1c:bc:84:d2:79:20:69:33:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829d195a-d541-4371-970d-5be56cd489a8
        Validity
            Not Before: Aug 24 04:00:00 2020 GMT
            Not After : Nov 28 05:00:00 2022 GMT
        Subject: CN=b0461533-f5bc-4025-8bc7-445f3891c1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:2a:5b:17:0a:8a:74:83:9b:6a:7e:54:37:
                    9e:89:a3:29:0e:86:16:ae:1c:91:ff:37:03:e9:5c:
                    78:27:e2:3d:0d:b6:18:4e:88:92:da:6b:fe:b2:62:
                    23:c9:10:77:28:58:77:0f:09:b7:7b:43:d2:76:62:
                    d6:45:ef:ad:5e:f1:fb:9d:26:17:21:56:b4:cc:71:
                    5c:66:cf:b9:c1:12:2b:ef:10:bb:ae:ce:1a:a0:56:
                    76:f0:19:81:cf:50:85:db:4e:eb:8d:91:25:f8:8c:
                    72:11:99:a3:0e:c0:e3:fb:37:1e:d7:e2:72:8e:5f:
                    06:06:3c:8e:6e:08:6a:01:18:af:98:ba:fa:42:83:
                    da:5c:43:d6:9e:cd:0a:6a:4d:b1:7e:f4:1e:ea:50:
                    2d:b1:71:fd:65:6d:0a:c4:af:38:0f:7c:d5:b2:08:
                    5a:26:c7:3d:e3:a1:37:b3:01:22:06:c0:8d:6b:8a:
                    85:f4:65:16:11:29:c4:f1:19:c9:8f:ee:3f:25:cc:
                    56:a6:67:a1:db:0f:c8:51:c8:52:0d:fa:00:0b:1f:
                    1d:3f:dd:6e:be:a7:9a:40:49:7a:c5:a1:10:3c:65:
                    82:10:21:d9:9d:ac:fa:ab:6d:05:88:76:42:32:92:
                    37:fc:0f:21:1b:4a:0f:76:8f:96:a6:5a:a3:7a:c7:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0D:FF:5B:F7:60:58:11:E7:1C:5B:48:F2:FD:45:A0:79:FB:1C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/a0d7024d-e16e-3f74-a586-6a89c0073af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8/829d195a-d541-4371-970d-5be56cd489a8.crl

            X509v3 Authority Key Identifier:
                keyid:C7:71:2A:18:24:84:EF:6E:8E:F0:83:87:1C:48:6E:34:B1:E9:98:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/829d195a-d541-4371-970d-5be56cd489a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c9:ae:52:11:ea:0b:e6:40:d1:36:33:7c:5f:51:df:f9:da:
         3a:38:a0:b8:24:1e:0d:74:20:63:2c:10:a3:50:84:2a:f9:0d:
         d7:3b:1c:3e:8d:d5:ad:40:9c:17:a3:09:a9:e1:46:d6:4f:7e:
         cb:70:8f:b0:41:6b:48:c8:85:f5:71:ca:f5:87:0d:f2:6b:a2:
         12:f7:fa:1b:df:60:b7:a0:3f:95:05:3a:1b:cd:a1:1b:4d:37:
         18:07:c7:59:83:a7:8b:c3:4a:35:c4:69:b7:ba:4c:74:9c:b8:
         f5:cb:44:e3:f1:41:9d:59:c8:45:3c:87:1b:af:4b:c8:22:84:
         72:14:cf:93:c2:e9:e5:54:98:59:12:2b:a1:f6:20:4a:bb:ab:
         45:6a:c8:13:41:b3:75:58:82:06:39:f1:7d:5f:5a:02:c1:e2:
         72:f2:9b:80:49:95:20:23:ad:64:28:c0:b2:f2:1e:d8:79:b5:
         b5:f8:31:3f:e7:8e:27:ee:58:e2:b4:3a:fd:fd:2d:98:f6:a5:
         50:5d:06:a0:24:61:bc:5a:9d:91:11:29:c1:e5:07:97:30:25:
         0e:8a:66:c4:18:d4:6c:cf:28:28:9f:88:51:d2:b1:46:a2:2f:
         fc:16:0b:2f:86:76:a0:67:6b:df:cb:5d:86:1f:32:48:29:0c:
         76:98:fa:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----