Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/1be62789-bde4-3bed-b230-9d2bd594dd9f.roa
File:                     1be62789-bde4-3bed-b230-9d2bd594dd9f.roa (raw, json)
Hash identifier:          5ILdS/R/hrieKSagdvoZB+OqGPJEUPlqUucqwF4PvWo=
Subject key identifier:   2F:6B:52:29:47:27:B0:5B:7A:55:A6:2C:AA:03:DB:5B:BC:A1:E5:A4
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328583C6EBF7E9F569E204F0AD61480
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/1be62789-bde4-3bed-b230-9d2bd594dd9f.roa
Signing time:             Mon 29 Jun 2020 04:00:00 +0000
ROA not before:           Mon 29 Jun 2020 04:00:00 +0000
ROA not after:            Mon 04 Apr 2022 04:00:00 +0000
asID:                     1239
IP address blocks:        47.79.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6e:bf:7e:9f:56:9e:20:4f:0a:d6:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Jun 29 04:00:00 2020 GMT
            Not After : Apr  4 04:00:00 2022 GMT
        Subject: CN=b2adb990-d241-4159-84d9-c246d68cc238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:24:31:27:2a:ec:5c:cf:8f:e6:9e:c6:4f:02:
                    a1:26:3f:a4:92:82:86:04:a3:bd:cb:0c:59:fb:09:
                    57:1b:83:34:82:2c:ef:37:d5:fb:14:51:9f:96:e7:
                    5e:0c:d3:60:48:05:df:60:eb:8a:8e:0a:6d:71:18:
                    ad:48:50:1f:bf:d2:f7:eb:b6:5f:76:f7:8b:01:67:
                    36:70:2b:44:b7:aa:35:9e:0f:eb:7a:cd:ad:dd:0d:
                    1e:d8:d7:23:ff:18:04:4f:ef:1d:b9:66:33:2b:e6:
                    1f:a4:95:9d:65:e7:53:75:3f:ef:34:a2:90:76:b1:
                    0b:97:e5:2e:69:5f:79:ba:93:8d:2e:fa:92:8d:49:
                    33:f0:d8:74:b8:8b:b3:70:af:a8:fe:53:15:38:2d:
                    f5:23:52:60:e9:16:4a:94:2f:3c:bf:0f:0c:4b:74:
                    83:b5:3e:b1:65:60:a0:63:5e:e1:8d:c9:00:b4:2b:
                    46:ee:6e:13:74:12:7d:6a:aa:ba:6d:cc:1e:28:25:
                    68:26:74:cb:d9:51:cc:7d:ee:90:af:fc:4a:3e:bc:
                    5d:9a:b8:d3:33:18:09:32:2b:39:e4:c5:f0:45:1f:
                    37:ea:22:ec:54:25:44:d7:63:d8:27:fe:61:35:e1:
                    2c:08:59:0e:82:e0:8a:3d:8a:db:5e:94:88:29:08:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6B:52:29:47:27:B0:5B:7A:55:A6:2C:AA:03:DB:5B:BC:A1:E5:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/1be62789-bde4-3bed-b230-9d2bd594dd9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:7a:2f:16:d3:bb:e5:d4:65:d0:62:d6:4f:67:11:1b:a1:28:
         88:77:8e:ff:78:39:f5:3b:fe:07:97:a5:e1:22:8e:7f:e1:0d:
         fc:66:60:8f:b6:99:ea:9c:0a:b7:c0:16:10:17:e4:e7:3a:95:
         a4:38:fb:2c:d5:e4:86:60:2b:b1:30:0c:ef:67:4f:85:db:fa:
         d1:94:3d:a3:c7:27:20:98:7d:ca:44:97:76:4a:b9:54:a5:ff:
         43:6f:9e:78:8e:4c:02:ab:28:0d:7a:f5:95:85:ad:17:cf:d4:
         c2:a2:6c:ca:9b:8a:fb:12:43:c1:ee:46:5e:87:82:83:be:dc:
         aa:c7:07:91:2b:d3:41:e8:f9:40:ee:1c:a7:c8:54:9d:9b:aa:
         88:a4:53:de:e0:57:4e:91:f8:7b:e3:1a:94:c7:f4:ac:62:09:
         53:51:bd:57:43:1f:5b:19:82:a7:37:c9:33:a8:71:52:19:b9:
         df:d3:1e:a5:8e:af:79:17:53:68:af:28:25:47:bf:1f:4d:64:
         53:aa:17:57:d2:a6:2f:d6:f8:9d:20:8e:f0:f3:ac:27:8a:1f:
         14:4a:0c:c0:66:67:de:eb:4c:fd:a4:fe:01:5e:62:0f:88:cc:
         78:54:3f:f2:81:c8:74:3b:7f:27:d9:aa:5b:c9:18:a8:d6:41:
         5f:c4:7b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----