Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/acbdd23b-958f-3465-b542-c67633516722.roa
File:                     acbdd23b-958f-3465-b542-c67633516722.roa (raw, json)
Hash identifier:          2sVesyAqgsnGMXZAZQj0DsyBrGv5idKltrjPRFDdSPM=
Subject key identifier:   D4:DE:93:06:5D:B0:BF:74:EB:28:5C:17:E6:E2:21:26:6A:23:23:07
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328583A6FAC594DDD0FFCDE2AEF7100
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/acbdd23b-958f-3465-b542-c67633516722.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Fri 06 Jan 2023 05:00:00 +0000
asID:                     198949
IP address blocks:        170.133.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:6f:ac:59:4d:dd:0f:fc:de:2a:ef:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Jan  6 05:00:00 2023 GMT
        Subject: CN=27fdd176-8158-492e-af95-b1de32940755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:13:45:2f:d1:13:3c:6b:e5:95:a5:39:6b:f4:
                    2f:68:fb:2b:36:44:d1:c9:a1:65:76:1e:50:d9:da:
                    2b:2c:76:00:b8:e1:8b:26:b5:18:85:d3:69:9d:7c:
                    55:9f:d9:e7:5b:20:8f:9a:2e:76:04:94:7a:71:25:
                    36:85:ed:ee:d8:b4:e9:57:e4:6c:7b:d0:89:4e:48:
                    01:45:16:02:8d:88:8b:00:47:1d:10:ec:81:80:9b:
                    97:02:dd:43:77:42:7a:06:0e:49:74:c4:73:89:c6:
                    08:df:04:2a:b4:d5:e6:c1:47:d2:ab:e0:a3:14:b6:
                    f0:0e:20:64:db:bf:d9:54:5b:4d:89:32:13:bd:e6:
                    fc:fe:ac:58:40:df:b5:43:f8:0a:20:3c:ce:ae:f1:
                    8c:43:bf:27:53:62:24:da:78:f1:48:56:07:eb:5a:
                    3d:c2:52:86:75:b1:2b:a3:2b:fc:f4:4f:ff:5e:53:
                    a7:3f:8c:16:e7:46:91:5d:97:bb:ab:7c:37:63:94:
                    2d:3a:41:d6:3f:5b:5d:89:37:2c:c3:61:e9:a5:0a:
                    d0:76:75:97:cb:16:7c:65:43:28:68:e0:6d:e6:df:
                    94:77:47:58:0b:98:81:a3:e3:c4:ce:2b:6c:69:1a:
                    b1:99:0d:8e:51:17:e8:92:ad:24:c6:a5:52:a6:73:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DE:93:06:5D:B0:BF:74:EB:28:5C:17:E6:E2:21:26:6A:23:23:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/acbdd23b-958f-3465-b542-c67633516722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.133.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:73:e8:a3:1f:3f:1b:38:07:10:da:5e:3f:15:4b:b6:02:52:
         0f:02:e2:f6:9e:20:89:79:2a:11:13:fc:3b:a8:52:ec:58:22:
         b4:be:a9:c0:5e:09:fb:88:cd:be:1d:d5:56:83:5b:00:86:af:
         be:12:ea:ab:c1:86:63:68:89:4f:a4:39:06:cf:e6:de:eb:32:
         73:dc:b9:dc:3f:0d:b1:bd:0c:79:0e:96:3a:e4:ec:f2:60:3f:
         a4:97:53:b9:28:cd:64:25:fc:93:30:1b:03:42:cb:9f:f1:0e:
         cf:c6:e9:d5:30:30:6a:93:94:3b:c7:42:6c:de:3e:8f:78:ff:
         61:2b:a0:79:88:69:3b:54:a8:11:ef:e8:41:03:04:7f:b2:6b:
         52:3f:a4:3d:e3:93:38:bc:ad:82:2a:91:9b:d8:e1:fe:6b:ed:
         4f:63:9d:3f:f6:b8:65:e0:96:d8:21:65:ea:1c:e8:d0:6e:15:
         97:51:b3:7d:73:fc:01:fb:88:9b:fc:22:34:bc:83:3d:6b:8b:
         76:f0:83:7b:9d:7d:5c:67:50:34:5e:70:7e:d4:c4:97:b7:df:
         7a:a5:f6:49:3f:c4:15:33:c1:c0:5b:ac:94:9e:02:a3:fe:9f:
         1c:13:fc:14:b7:bb:5d:14:91:1f:5f:74:91:f2:df:7e:56:a0:
         be:87:3d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----