Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/844b5834-3a4e-36cb-934e-84132f44ffda.roa
File:                     844b5834-3a4e-36cb-934e-84132f44ffda.roa (raw, json)
Hash identifier:          ayFTmIre98l8ibERTxTHcwsCVY4/N0uCds2vXjcLSEc=
Subject key identifier:   EC:CF:A1:53:C2:B3:4C:37:C4:E4:7A:FC:D3:5A:F4:14:1B:CE:60:B2
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328583EEB5418500BB680BCC0CD3DB0
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/844b5834-3a4e-36cb-934e-84132f44ffda.roa
Signing time:             Mon 29 Jun 2020 14:23:11 +0000
ROA not before:           Mon 29 Jun 2020 14:23:11 +0000
ROA not after:            Thu 18 Aug 2022 04:00:00 +0000
asID:                     131233
IP address blocks:        47.76.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:eb:54:18:50:0b:b6:80:bc:c0:cd:3d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Jun 29 14:23:11 2020 GMT
            Not After : Aug 18 04:00:00 2022 GMT
        Subject: CN=e7056a8a-a052-4fa9-807b-bcec4f19b816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:88:8b:4d:f2:1e:ae:a6:66:3a:df:36:a1:ef:
                    8e:a0:28:1c:bd:d2:2c:23:2b:7a:7f:78:7b:82:9b:
                    6a:8a:32:df:a5:c7:ce:e7:b5:15:b4:b9:90:e1:bb:
                    00:c2:e8:46:0a:21:1f:f9:9e:30:2a:c0:ff:75:ac:
                    72:9b:b8:fe:34:fb:fd:40:07:17:f5:4a:f7:6e:5c:
                    ec:2f:c3:29:bd:57:e2:18:69:09:d0:16:68:9f:42:
                    55:63:74:f6:f8:ca:79:23:da:c3:b5:2e:ea:28:f9:
                    23:3c:6f:f1:9f:2b:4c:86:00:6f:ac:24:d2:dc:c9:
                    31:24:80:ef:18:05:1b:1e:62:52:ab:e8:c5:76:a0:
                    05:aa:e9:c8:46:41:65:01:ae:b4:45:98:8e:20:4a:
                    1e:81:6a:61:02:72:a5:40:6e:42:4b:a3:72:3b:e7:
                    05:16:ef:2e:48:2c:df:51:68:49:9e:2d:35:c4:6c:
                    dd:ce:23:e9:f6:b0:de:8d:c1:5e:bc:ff:67:bb:7b:
                    97:0a:66:e9:8b:8b:29:c0:1b:64:fe:5c:cf:73:99:
                    6f:3b:c4:30:9d:9b:2d:5b:d9:8d:9c:7a:79:aa:35:
                    db:6a:e6:0c:0a:bb:82:1e:da:3a:32:e9:a1:0c:b8:
                    79:d9:5a:69:fe:5e:77:34:31:ff:ab:c5:56:14:9a:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CF:A1:53:C2:B3:4C:37:C4:E4:7A:FC:D3:5A:F4:14:1B:CE:60:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/844b5834-3a4e-36cb-934e-84132f44ffda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.76.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:33:e8:5a:7a:bb:97:ef:be:32:67:f4:4b:cc:c9:f7:af:a3:
         1d:09:88:d9:7d:ee:82:d1:73:57:21:fc:e3:9c:10:3e:50:3e:
         d8:e2:26:c9:15:b2:91:84:34:78:7a:ef:38:2b:68:1f:68:c1:
         4a:5b:14:56:66:89:6a:d0:00:e6:8c:9f:54:eb:1a:b5:e1:ab:
         ec:19:0b:13:33:8f:d7:bd:d9:04:6a:53:5a:0b:24:93:1c:ad:
         ed:9e:df:ae:69:5c:43:bc:db:e7:2e:03:a6:a9:a4:1e:fa:c4:
         a8:9b:ee:b1:b0:c2:62:d6:7f:23:26:1c:eb:e9:e3:ee:6b:c4:
         02:28:dd:94:e1:fb:ad:a8:1d:69:2f:77:61:97:45:9c:48:60:
         26:1d:1a:b9:0f:46:13:1d:8f:95:0a:ac:be:c3:18:2a:12:47:
         f4:e8:67:9f:25:de:63:d3:c9:ca:ad:21:7b:42:c0:3d:66:0b:
         df:6a:99:df:bc:1a:10:0c:07:e9:21:d3:de:34:dc:87:86:21:
         44:3a:7d:e9:df:43:fa:78:0c:1f:19:03:06:3e:23:ff:3e:41:
         a2:0a:32:91:04:85:55:7e:e9:bc:a7:a6:34:09:54:6f:ec:54:
         6d:5e:22:c1:93:98:9f:2d:68:0e:f7:26:4a:54:59:9c:a0:8b:
         29:57:09:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----