Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/353ed190-caed-3d2d-b387-0d5f8bcbf3e0.roa
File:                     353ed190-caed-3d2d-b387-0d5f8bcbf3e0.roa (raw, json)
Hash identifier:          lRWcZmhNudUihF0Y/U65O9viBAD6reLIeLWF6xwEWlQ=
Subject key identifier:   2D:33:7F:DE:51:A8:18:D4:9F:15:45:82:50:3D:38:09:FB:7E:C1:55
Certificate issuer:       /CN=a91fff12-f74d-4a80-9a5d-f225534bc527
Certificate serial:       010D0C9F4328576D51CC73C042CFC173D90E794B
Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/353ed190-caed-3d2d-b387-0d5f8bcbf3e0.roa
Signing time:             Mon 10 Aug 2020 15:47:51 +0000
ROA not before:           Wed 22 Jul 2020 04:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     46595
IP address blocks:        64.35.144.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:d9:0e:79:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527
        Validity
            Not Before: Jul 22 04:00:00 2020 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=3799145b-8de9-4995-a5ed-1d4881616408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:2c:dd:dc:29:4a:7c:ce:b8:1d:be:17:26:
                    0d:bd:64:1e:43:60:63:f6:c1:a8:54:e9:ee:86:2c:
                    69:49:4b:07:94:74:e7:7e:6a:28:0f:a2:a9:cc:d0:
                    a8:df:59:d3:32:41:40:38:c6:b5:bf:40:57:5d:bf:
                    b6:b0:95:23:80:f7:09:bf:ed:1e:89:88:de:c1:87:
                    fa:50:a9:ce:4d:e9:78:fd:ef:b9:8d:cd:f7:aa:fb:
                    02:c6:69:24:51:8a:fc:12:3c:ea:87:3b:f2:98:b8:
                    e5:03:d6:52:6b:bc:7f:df:27:67:a5:30:68:08:89:
                    91:5d:39:39:fe:1e:dd:f9:bd:65:ce:5c:82:0a:a0:
                    43:76:61:9e:40:06:72:cd:4e:fc:77:bc:c3:e4:a4:
                    61:af:2a:0f:d7:1b:d9:b9:1f:36:d3:a0:46:2e:fd:
                    2d:44:e6:58:a4:5a:f5:7c:ef:1e:d0:ed:b5:e1:a4:
                    c3:22:76:2e:60:03:d9:f8:88:56:fe:17:9f:1a:92:
                    62:6d:6d:c3:a6:e1:60:6b:bb:a2:7a:5a:61:93:e1:
                    17:54:e1:b7:6e:2d:62:0d:c5:5f:65:6f:8b:39:0e:
                    33:4c:f3:58:c7:bb:d3:63:f8:2f:9a:db:19:90:86:
                    84:38:eb:13:36:76:a8:98:7d:bf:71:de:1d:c5:fe:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:33:7F:DE:51:A8:18:D4:9F:15:45:82:50:3D:38:09:FB:7E:C1:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/353ed190-caed-3d2d-b387-0d5f8bcbf3e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl

            X509v3 Authority Key Identifier:
                keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:76:53:ea:66:2a:9f:98:6f:78:79:04:36:41:6e:16:cf:6d:
         aa:32:49:45:82:33:ee:2a:33:f9:03:46:f0:c9:15:9c:37:77:
         99:d0:18:82:61:d5:58:60:cd:19:35:f2:e8:e1:f8:87:88:95:
         b9:f4:e0:4f:45:3f:00:46:07:a4:e5:2f:7d:c7:3a:6f:07:df:
         05:66:2c:e8:0d:22:e5:1d:8a:25:ca:79:19:06:99:1d:af:0b:
         df:73:a9:b3:a0:a5:62:ef:ac:a6:25:5e:5c:11:96:7b:fe:63:
         a5:bb:66:15:0c:8a:5f:d9:a0:19:b2:c2:9c:44:55:1d:5b:d2:
         de:eb:89:7f:8b:a6:dc:57:6e:62:a7:c1:49:79:12:0e:7d:e7:
         b3:67:dd:19:31:74:3e:97:9d:f1:41:40:14:1c:e9:01:cd:4c:
         0c:5f:50:68:c2:0c:dc:c4:57:e0:ba:2e:1b:76:78:8c:bc:4b:
         fd:9f:14:ad:8a:b3:cf:5d:fd:f1:28:fa:04:ec:77:66:6d:43:
         4e:17:7f:d7:db:ce:1a:5a:10:7a:24:2f:f8:14:bf:a6:53:cb:
         d5:30:fb:b2:6a:25:19:b2:9f:f6:78:6e:57:08:65:06:28:0f:
         dd:3b:83:c5:e4:f1:35:34:bd:07:51:88:26:e6:1e:f2:20:de:
         11:16:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----