Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/d8671cf6-cf1f-39d8-ab7e-b4210506cc49.roa
File:                     d8671cf6-cf1f-39d8-ab7e-b4210506cc49.roa (raw, json)
Hash identifier:          gun5gHU+xULZ6do/TS0Y4y+0ktytDS+Q8iUnkefcYdg=
Subject key identifier:   3D:6E:F5:7C:42:C0:55:75:8F:A3:5D:00:E2:4D:B0:91:3E:00:38:F3
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328583801D75F8E9EA8D58021D13500
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/d8671cf6-cf1f-39d8-ab7e-b4210506cc49.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     198949
IP address blocks:        170.133.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:01:d7:5f:8e:9e:a8:d5:80:21:d1:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=b780300f-e440-4801-b78c-a050306d26b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cb:3b:3b:37:17:75:fa:a3:ec:2b:a5:79:79:
                    7d:7e:96:12:5d:d9:8e:e8:a4:fb:9f:f4:2c:4c:c2:
                    52:64:8b:3b:24:2c:f0:1c:0c:ff:e2:6b:89:2c:38:
                    32:b5:2e:b8:17:1f:bd:72:41:e1:ec:07:9a:19:8b:
                    9d:71:2f:9e:6f:dc:9c:5f:a2:2f:5d:92:10:ee:dd:
                    44:9d:a5:42:89:ee:e3:8c:ac:8c:9c:19:90:96:40:
                    78:6d:34:52:a1:65:74:f4:10:12:72:b6:b3:10:f6:
                    0d:f5:07:b9:05:11:78:d3:5a:f3:77:12:12:b3:2c:
                    8b:e6:a5:a9:95:e1:f6:5b:f6:24:cb:16:d5:7c:4a:
                    00:61:da:b8:aa:45:3d:2d:70:4e:7f:33:e4:85:0f:
                    9f:5a:44:3b:5c:20:4d:31:d6:a3:6c:64:4d:eb:41:
                    b7:3e:4d:cf:7f:8a:bf:b4:ac:0e:f0:2a:c8:63:24:
                    e0:36:b6:df:17:22:35:ec:d8:1a:fc:38:cf:7d:e8:
                    66:fa:d3:32:de:85:71:87:e8:0c:19:e2:cf:3f:39:
                    bf:b4:6e:67:58:8a:1a:30:6c:5c:89:e4:8e:6e:eb:
                    dd:4a:fd:a1:b4:f3:d0:59:e0:46:23:92:88:e7:ff:
                    12:76:89:eb:ba:80:d3:5d:c7:7a:7a:09:e2:7c:d3:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6E:F5:7C:42:C0:55:75:8F:A3:5D:00:E2:4D:B0:91:3E:00:38:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/d8671cf6-cf1f-39d8-ab7e-b4210506cc49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.133.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:ca:5a:79:ce:cf:01:12:8e:85:5a:5a:cb:46:d6:06:64:
         ce:99:61:29:43:4f:62:7e:96:8d:ce:d3:0b:fe:18:e7:f7:05:
         c3:20:0d:e9:ae:ee:d3:b9:5e:c8:4f:d2:d7:15:dd:91:bc:5c:
         f6:8e:ab:9b:6c:d1:59:60:9e:a1:bd:6a:43:fb:d0:f9:c3:5f:
         64:e0:37:8c:5a:38:4a:bd:93:d7:ea:5e:b9:fd:0e:db:c6:c8:
         05:01:bc:a5:24:92:5b:4e:2a:a3:6a:0a:24:7d:6b:7d:d8:96:
         f5:25:8a:06:e3:12:c5:72:9b:8b:33:95:ed:84:cb:d6:50:2f:
         83:01:44:91:40:d4:d4:5c:17:f6:12:b5:ff:11:55:06:e1:fe:
         4b:46:a6:52:1a:ec:57:1b:0b:29:29:7e:07:24:bc:8a:f2:6b:
         15:9b:e2:8a:ad:6b:1f:ec:c0:41:e1:b1:a3:4f:dd:4a:46:24:
         48:ed:7b:59:d7:c0:f4:01:2a:2e:bb:e3:f4:00:0f:30:d1:a7:
         67:c0:d7:f8:7f:ab:29:83:14:4f:e8:fa:54:91:88:64:d3:23:
         f9:df:28:97:40:fa:2c:e0:6b:f7:c5:0c:df:44:d9:a0:a5:98:
         5f:d9:80:7e:42:6b:70:c0:76:ef:7d:26:19:aa:ba:8d:d7:34:
         6a:8b:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----