Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/823ee4e9-f323-3217-9011-c4c1d287cfab.roa
File:                     823ee4e9-f323-3217-9011-c4c1d287cfab.roa (raw, json)
Hash identifier:          FgXV0idlCLig8SMiqRUmZPb4n+kXOgqpRiDwtf9cbzI=
Subject key identifier:   F4:7A:9F:21:1E:C6:0F:F2:E4:EC:02:8C:1F:C9:92:28:AB:E8:37:9C
Certificate issuer:       /CN=a91fff12-f74d-4a80-9a5d-f225534bc527
Certificate serial:       010D0C9F4328576D51CC73C042CFC173D9125285
Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/823ee4e9-f323-3217-9011-c4c1d287cfab.roa
Signing time:             Mon 10 Aug 2020 15:52:03 +0000
ROA not before:           Wed 22 Jul 2020 04:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     46595
IP address blocks:        174.137.64.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:d9:12:52:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527
        Validity
            Not Before: Jul 22 04:00:00 2020 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=350ace95-bb3e-4439-9248-d224ad785944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:9b:1f:86:a7:cf:48:78:c2:7d:a8:44:ce:
                    c7:37:a3:a7:7c:a1:ed:55:56:5f:fc:c9:05:43:44:
                    00:66:4b:6a:86:78:81:aa:3f:c3:32:85:a0:5a:bd:
                    e6:6f:38:b3:54:23:b1:df:f6:29:5f:49:3a:42:bd:
                    5b:b2:10:e6:aa:2f:92:b3:f3:83:8e:45:4b:f1:eb:
                    ec:59:ca:84:16:e5:6d:8e:1b:88:f7:ed:4c:1d:74:
                    49:06:e3:28:e4:38:fa:d6:07:52:53:98:b1:0d:24:
                    6c:bb:75:33:f6:64:93:8a:ba:db:17:38:19:1d:0c:
                    5e:70:b8:73:7d:66:46:93:ce:b5:98:30:68:33:25:
                    bc:9e:e9:b0:3f:ab:d4:d6:13:f8:7a:b7:df:1b:8c:
                    0c:1c:d7:6a:e5:cc:8a:31:7d:c0:1d:ee:b8:b6:d0:
                    69:1e:a4:4f:e6:2e:c1:63:9d:b1:71:8c:df:4e:a9:
                    42:b7:b1:43:17:ab:ae:46:66:bb:84:bd:79:44:5f:
                    92:2b:79:16:0b:eb:a8:c2:1e:91:54:c1:54:87:e1:
                    f1:57:a6:6f:f4:65:ae:a3:2c:30:98:61:fa:02:06:
                    90:94:1b:5b:92:8a:2a:9d:75:ac:a2:4f:7f:0c:6e:
                    eb:f9:05:6f:6f:b6:f6:41:0c:88:91:d7:79:1f:e7:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7A:9F:21:1E:C6:0F:F2:E4:EC:02:8C:1F:C9:92:28:AB:E8:37:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/823ee4e9-f323-3217-9011-c4c1d287cfab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl

            X509v3 Authority Key Identifier:
                keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ae:42:ac:7a:b9:17:bc:ed:df:34:a7:ae:6c:32:21:30:cc:
         79:0e:08:6d:f7:d2:59:d7:43:de:55:f6:2b:a5:bc:74:67:fb:
         ee:68:3c:59:71:32:0c:4c:fb:00:29:7c:20:26:ea:4e:91:10:
         bb:58:74:38:8c:f9:99:dc:a3:1d:b9:f3:ad:c0:c0:cc:ed:13:
         90:4e:3f:25:bb:75:8a:09:bf:73:d4:29:17:61:61:5d:60:3c:
         b8:3f:03:dc:e2:53:59:11:6c:a6:34:cb:e5:ff:73:ae:1d:a8:
         12:05:f1:47:4f:02:94:3a:d2:10:18:fe:eb:02:9b:2f:15:fb:
         08:14:d5:c0:16:ae:db:3e:8f:99:52:56:28:76:84:36:12:2b:
         2e:aa:42:d1:ef:72:ab:00:a8:6d:a1:54:2c:a3:ab:57:ad:4d:
         76:79:98:e0:ac:5d:c3:b3:d5:2c:ac:e7:c5:14:37:de:9b:2d:
         5b:32:72:b8:f8:ab:3e:83:e8:46:d2:a1:c4:86:d6:dd:e7:6b:
         0e:c1:d2:86:71:84:ad:4a:07:7d:21:b6:71:5b:c7:c9:65:b6:
         79:7e:8c:82:e0:61:3d:58:56:c8:54:fa:51:44:45:9a:d9:a3:
         18:62:e8:b4:c6:55:a0:02:a6:00:c7:49:06:f2:6d:8c:47:68:
         cd:38:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----