Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/89e82d73-70c2-343f-b36b-7827e68b3dff.roa
File:                     89e82d73-70c2-343f-b36b-7827e68b3dff.roa (raw, json)
Hash identifier:          EyJ3pAG1+IBmOF7R01/ZDB3VX0wpMAG46DgraCYo908=
Subject key identifier:   B4:B4:F2:5C:41:10:20:77:10:B8:11:7D:E4:5D:8B:C8:21:B2:E2:A1
Certificate issuer:       /CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
Certificate serial:       010D0C9F43285838258A0A4C3D520DA6E40CB580
Authority key identifier: 63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/89e82d73-70c2-343f-b36b-7827e68b3dff.roa
Signing time:             Tue 01 Dec 2020 05:00:00 +0000
ROA not before:           Tue 01 Dec 2020 05:00:00 +0000
ROA not after:            Wed 08 Mar 2023 05:00:00 +0000
asID:                     22552
IP address blocks:        104.171.226.0/23 maxlen: 32
                          104.171.228.0/22 maxlen: 32
                          104.171.232.0/21 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:25:8a:0a:4c:3d:52:0d:a6:e4:0c:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c520d4-cb8b-424e-862a-3abdfbedcfc8
        Validity
            Not Before: Dec  1 05:00:00 2020 GMT
            Not After : Mar  8 05:00:00 2023 GMT
        Subject: CN=c926d001-cdeb-4ac3-9131-fcf79fa58fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:b2:a0:a3:93:c4:14:bd:5e:8d:69:fa:7b:
                    45:87:f8:1e:2a:0f:27:82:1a:40:16:d5:8e:1b:63:
                    34:29:7d:e7:f3:7b:4d:8c:29:ec:fe:85:9a:c3:8a:
                    26:5c:52:b2:22:55:01:44:54:33:24:a3:37:fe:90:
                    c5:5e:20:2e:0f:c4:75:a9:51:2a:f4:c8:5a:a0:3f:
                    b8:ab:a3:1c:c9:58:1f:c2:bf:0a:c4:88:83:b7:7d:
                    ca:76:d9:97:7e:15:10:3e:5c:8f:e8:91:fa:e4:0f:
                    07:42:98:b0:42:c9:11:b5:92:b4:d1:ee:08:dd:01:
                    f0:72:2a:f3:96:24:5a:2d:c4:53:27:5f:6f:df:fd:
                    8f:57:e9:7e:db:0e:ac:18:77:a7:d6:f2:63:1e:1e:
                    8c:2a:3d:d4:e3:0a:0f:57:f8:74:13:61:9e:13:aa:
                    a2:96:4e:a3:ed:b9:6d:ea:00:f3:b6:c4:74:2d:ba:
                    4a:6b:df:38:7d:0d:6c:14:be:67:de:4b:11:04:5b:
                    5b:e7:b0:28:05:8a:0b:81:9a:0a:f5:0b:e5:02:b4:
                    44:34:39:4e:9a:0e:11:92:26:df:57:46:7a:9a:9c:
                    34:8c:1e:1f:98:99:4a:3c:eb:34:df:48:8a:b8:42:
                    09:ab:a8:c5:0e:e7:67:bc:34:74:b2:07:89:6e:6d:
                    0b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B4:F2:5C:41:10:20:77:10:B8:11:7D:E4:5D:8B:C8:21:B2:E2:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/89e82d73-70c2-343f-b36b-7827e68b3dff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.crl

            X509v3 Authority Key Identifier:
                keyid:63:9C:48:1E:63:4D:5F:2E:0C:4C:D6:C5:D7:30:04:1C:12:E1:9C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a3c520d4-cb8b-424e-862a-3abdfbedcfc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.226.0-104.171.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:a4:1c:fb:60:b6:fb:13:b6:9e:7f:56:a4:93:bf:70:e1:22:
         08:7c:7c:47:35:10:da:45:18:2f:86:3f:68:fc:1a:62:41:2f:
         18:36:ea:a1:81:01:c6:ec:c2:00:92:23:62:95:30:fc:23:60:
         1b:fa:d9:e6:c1:d2:61:7c:b3:79:19:af:53:96:09:ce:53:c5:
         ff:3e:15:52:a5:76:69:37:34:e5:06:f2:63:cd:06:14:c4:14:
         dd:fa:34:5d:2f:71:ad:8f:e5:13:c9:ec:63:db:11:a6:aa:7a:
         07:36:bd:60:59:cb:eb:56:0b:75:cf:ae:b2:c1:17:72:f6:b3:
         82:a6:b6:49:84:bb:4c:cb:a8:ac:23:91:38:c3:6d:06:28:d5:
         33:49:6a:4b:cb:7e:a0:8d:4f:82:bd:2a:9d:19:55:7b:33:a4:
         b3:67:7c:8e:68:9a:ca:86:27:8a:9f:85:24:3f:98:95:f5:76:
         be:a8:c9:a5:f5:02:e3:82:7f:48:54:a6:ad:d5:8d:c1:8c:8c:
         72:83:ae:89:43:8a:16:b4:96:d6:2c:11:6f:27:3d:20:39:76:
         f9:18:34:74:15:3b:dc:d3:e1:2f:e8:e8:be:f4:61:b1:f1:6d:
         b7:db:80:89:22:6f:71:95:b9:df:48:25:ee:7d:36:d8:ad:16:
         f3:71:7e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----