Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/3e8ba6cd-b4bb-367b-9f8a-1f3daeaf9463.roa
File:                     3e8ba6cd-b4bb-367b-9f8a-1f3daeaf9463.roa (raw, json)
Hash identifier:          DstKrJNhXnYs+WkfJfRRE0ixcsm3iAMGJF79f+JObGQ=
Subject key identifier:   41:4E:AC:A2:8C:50:7A:05:97:E5:CA:DB:5C:1D:44:86:7E:BC:50:D7
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328583D027D67566BC7301A1E616840
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/3e8ba6cd-b4bb-367b-9f8a-1f3daeaf9463.roa
Signing time:             Fri 13 Nov 2020 05:00:00 +0000
ROA not before:           Fri 13 Nov 2020 05:00:00 +0000
ROA not after:            Sun 26 May 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        163.123.200.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:02:7d:67:56:6b:c7:30:1a:1e:61:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Nov 13 05:00:00 2020 GMT
            Not After : May 26 04:00:00 2024 GMT
        Subject: CN=a8d2e307-67b6-4923-804a-6d373314b342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:46:56:e2:cb:61:5e:08:47:8a:18:53:c9:29:
                    ad:31:f9:1f:9e:87:d7:3d:91:24:51:ed:e1:17:e8:
                    d8:81:d3:bf:51:b4:7c:44:29:7a:0f:2e:20:de:3f:
                    14:4d:26:e8:e5:83:85:df:2e:7d:11:5a:a9:1b:6e:
                    fb:e8:ab:3f:19:16:cb:c9:ad:fa:60:68:ab:f0:36:
                    df:de:02:82:0e:9a:52:b6:b7:e2:fa:12:0c:f5:ab:
                    30:41:68:88:d3:59:bf:a6:8e:e8:bb:2c:61:1a:b6:
                    6a:ca:8a:66:8a:a5:64:b6:86:19:e3:9e:ce:bf:ac:
                    60:7e:3e:d3:df:9d:01:cf:2e:4b:0b:85:69:50:5e:
                    06:d8:09:2d:6c:73:0d:0a:0c:99:09:52:8d:47:d8:
                    36:22:1d:67:90:38:62:c0:07:4f:b2:5b:6e:a6:52:
                    81:be:4b:0e:8c:82:26:37:c4:e3:b5:e7:03:8e:31:
                    e8:70:12:ad:8a:b6:b9:18:2c:a3:01:0e:c2:0b:05:
                    b7:c2:6b:84:60:55:24:52:56:40:c8:56:f8:3e:da:
                    6d:79:aa:d5:f1:3c:96:11:2c:c3:b8:2a:f2:75:21:
                    69:15:f8:31:f5:76:95:b7:03:24:85:1a:f7:8c:95:
                    84:91:aa:b2:03:ac:56:d7:77:d9:0a:62:95:0f:86:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4E:AC:A2:8C:50:7A:05:97:E5:CA:DB:5C:1D:44:86:7E:BC:50:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/3e8ba6cd-b4bb-367b-9f8a-1f3daeaf9463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:79:63:a9:a3:fa:d1:5a:ea:b6:66:86:61:03:0e:44:84:d5:
         c8:91:3f:3a:5d:c5:43:75:82:95:c3:d4:78:8d:b1:8f:2d:4e:
         af:36:7d:a3:89:2e:2f:07:23:16:b7:47:87:25:ff:8b:64:4c:
         1d:ee:24:b4:7a:6b:cc:8b:d5:67:9c:a9:5a:e0:f7:7e:77:cd:
         b2:c9:b0:28:8a:e7:8f:d9:26:ba:1d:4d:4e:90:73:ad:26:df:
         57:f3:aa:2b:26:3b:5b:6d:0e:c3:bd:b4:b0:f2:32:7e:5b:3e:
         1b:54:2f:3f:da:20:b3:69:27:3b:64:22:7f:c2:00:12:22:9f:
         f0:47:75:8c:05:71:48:61:eb:45:34:d3:7e:8d:9c:9b:b1:e8:
         d0:7b:8c:06:da:6c:4a:e8:b5:63:0d:85:d2:ce:a0:c7:0c:ba:
         bf:30:74:10:5e:96:e0:2f:b4:88:5b:31:19:b3:d2:7c:fe:e5:
         7a:48:9b:a4:ef:7d:f5:a2:bd:84:53:26:e9:d6:90:53:94:1a:
         ec:62:fe:92:a0:3b:58:b5:81:ed:e6:e7:13:5a:16:08:c8:6e:
         66:82:cc:7b:18:11:79:60:a0:bf:52:eb:95:9f:35:95:9b:74:
         e0:11:6b:73:72:02:1e:b8:f6:3a:30:1e:de:77:03:fd:f7:c4:
         11:b8:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----