Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/06e8b1c2-1c86-318e-9066-226f2c7b89e1.roa
File:                     06e8b1c2-1c86-318e-9066-226f2c7b89e1.roa (raw, json)
Hash identifier:          XWG7WOVLfSGQVHSjHE8i2e4rSnDWH9gE+tPiydy6Onc=
Subject key identifier:   F1:02:6B:B7:64:1A:3F:53:43:25:61:B1:FB:94:5D:23:38:23:25:82
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285837DA9D30C4E67A2003C83289C0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/06e8b1c2-1c86-318e-9066-226f2c7b89e1.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     393841
IP address blocks:        170.133.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:da:9d:30:c4:e6:7a:20:03:c8:32:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=fd6966d6-e5c4-4f6d-b8a3-c1ebc57a48ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:b2:6e:52:60:40:9a:fd:ed:b1:89:a9:45:
                    38:83:b3:51:32:65:a2:67:61:6b:7f:9c:f1:ed:c4:
                    bc:75:eb:69:bd:10:6a:f5:39:5d:10:85:c2:35:de:
                    78:ea:00:b7:85:62:df:08:e0:0d:2d:b1:7d:12:20:
                    b9:94:c5:48:5f:08:7d:ff:4a:e9:8e:14:33:f7:30:
                    37:de:79:dd:b7:9e:0e:27:7e:f1:06:c4:4b:2e:d1:
                    9e:cc:0d:4c:1b:85:33:db:36:e9:b3:31:50:06:d0:
                    73:c8:92:8c:5b:30:8a:6e:19:7b:aa:fb:6e:ac:b8:
                    41:00:a4:a0:9e:55:54:57:45:1c:a6:00:95:a5:95:
                    cd:c9:72:b9:24:7e:da:74:c0:73:6a:46:82:90:7a:
                    47:f3:4b:ef:f1:f8:e8:d9:ff:ca:5f:5e:e6:05:2d:
                    15:3e:0b:b2:24:94:91:8c:ef:8e:35:75:d5:04:f8:
                    0c:b6:57:d8:c9:58:68:ca:20:f9:c2:64:22:6d:d5:
                    ad:43:19:fe:47:c4:31:49:02:70:96:89:51:df:fd:
                    8b:f3:1e:53:84:4d:e7:63:67:8c:7f:87:41:b5:a0:
                    ce:d1:a7:cc:58:26:c0:71:a2:02:5e:3f:5f:63:d8:
                    fc:1e:2f:ea:95:33:3f:4d:71:60:b0:d9:04:06:05:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:02:6B:B7:64:1A:3F:53:43:25:61:B1:FB:94:5D:23:38:23:25:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/06e8b1c2-1c86-318e-9066-226f2c7b89e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.133.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:59:38:c4:d9:88:b0:b5:c4:0c:25:47:00:55:c4:5a:b1:
         1a:94:40:84:22:a9:af:69:fc:91:f0:45:21:c5:cd:28:17:41:
         44:a1:4d:20:bd:70:95:92:10:b3:06:b7:f7:d0:1e:d4:00:f2:
         5b:dd:99:a0:f3:0d:0d:de:ee:6c:46:4d:dd:b8:16:3b:b3:10:
         79:19:ca:90:5b:d0:79:73:8e:89:29:ed:82:c4:8b:b2:31:0a:
         53:22:bf:74:ee:b3:a7:cf:4d:0a:3a:b5:5f:5e:f7:f6:c4:c8:
         d7:88:b5:45:bd:28:8f:e7:7a:fd:52:5b:2c:eb:42:e7:61:01:
         1d:a8:bc:96:ee:d1:b8:42:32:16:fa:6a:b4:43:75:ba:37:a2:
         26:56:ae:af:d2:03:2a:3a:4d:72:cd:ec:ae:8a:39:1f:7d:42:
         ed:f4:14:3a:30:00:8d:1b:46:09:a5:7e:83:85:40:8f:d6:15:
         4b:6a:89:b9:25:03:96:f2:29:76:b9:dc:33:b8:91:49:ee:94:
         1e:8a:e0:5a:fa:a7:4e:df:bd:a1:1e:89:db:16:01:46:7e:f5:
         18:ad:32:75:c4:59:2d:6b:08:fb:c0:3c:bb:68:45:c0:2b:ba:
         70:2c:df:a4:10:68:67:b6:46:70:01:87:a9:73:59:30:60:e2:
         f0:6f:71:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----