Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/6caed464-56d2-3376-91c9-c75b9ea22ab2.roa
File:                     6caed464-56d2-3376-91c9-c75b9ea22ab2.roa (raw, json)
Hash identifier:          +9MBa4kTj/Wp+m1rgd25yy4KnuxvtMGlvw94imOgs/c=
Subject key identifier:   C6:60:BC:95:A1:3D:54:2F:0E:56:29:E7:64:00:61:13:06:E6:53:87
Certificate issuer:       /CN=ef4796fd-6bef-4a60-aeea-580d00ee4335
Certificate serial:       010D0C9F4328576D51CC73C042CFC172C8B755CA
Authority key identifier: 86:AD:5E:34:50:E6:09:22:8D:AC:4E:97:03:60:0F:4B:11:6C:3B:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/6caed464-56d2-3376-91c9-c75b9ea22ab2.roa
Signing time:             Thu 18 Jun 2020 18:35:57 +0000
ROA not before:           Thu 18 Jun 2020 04:00:00 +0000
ROA not after:            Wed 21 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        199.165.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:c8:b7:55:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4796fd-6bef-4a60-aeea-580d00ee4335
        Validity
            Not Before: Jun 18 04:00:00 2020 GMT
            Not After : Sep 21 04:00:00 2022 GMT
        Subject: CN=a291cec4-bfd0-4b98-be4d-0dd18db36fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:14:f8:78:d3:6f:fa:c9:a5:0f:7a:b5:d5:
                    63:f7:12:6e:33:eb:09:15:c4:93:b9:fe:11:08:5b:
                    21:5b:a2:b0:79:37:66:4f:4e:3f:40:f6:b9:dd:35:
                    b9:12:60:fc:3c:cc:af:3e:85:ef:e1:a2:c0:57:a4:
                    d9:4a:55:f5:c4:3d:36:1c:96:7b:68:05:d9:74:8b:
                    62:9c:8f:24:b7:5c:e6:db:d9:13:13:63:e2:8a:e8:
                    b1:df:e4:9b:45:42:4e:77:a3:5e:4f:db:94:a8:04:
                    dc:11:98:89:e6:ef:a2:3e:67:0a:66:d9:c9:54:bf:
                    7b:58:bf:29:44:fc:cc:a1:ff:7c:40:21:ff:0d:da:
                    29:27:ca:65:66:d5:dc:3b:0d:61:3f:24:e3:f2:03:
                    cb:95:50:f3:1d:6f:e8:59:17:4e:73:77:0c:18:77:
                    a6:b4:55:cc:89:9b:00:fa:a8:e3:6c:34:73:b2:a8:
                    23:1f:c7:d0:76:81:9f:40:0f:35:bc:f7:14:5a:bd:
                    d7:5b:07:de:05:dc:bd:7f:e6:c2:29:c3:5a:31:31:
                    3d:21:3c:5f:68:69:38:d6:23:33:72:01:09:53:65:
                    f5:73:1c:ba:e2:25:1e:e4:b9:aa:91:5a:aa:c1:89:
                    94:80:e0:e9:c3:69:48:13:9b:ab:ce:38:86:fd:51:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:60:BC:95:A1:3D:54:2F:0E:56:29:E7:64:00:61:13:06:E6:53:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/6caed464-56d2-3376-91c9-c75b9ea22ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335/ef4796fd-6bef-4a60-aeea-580d00ee4335.crl

            X509v3 Authority Key Identifier:
                keyid:86:AD:5E:34:50:E6:09:22:8D:AC:4E:97:03:60:0F:4B:11:6C:3B:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef4796fd-6bef-4a60-aeea-580d00ee4335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.165.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:df:94:dc:8a:b4:df:3d:68:60:b9:2c:bf:4d:c5:19:33:61:
         53:21:f7:1e:25:96:a3:43:43:05:2d:e6:b0:1a:e5:a7:78:68:
         fc:a7:9f:01:20:38:06:55:25:71:e0:16:5a:ae:f7:99:c7:e9:
         db:e8:c9:8d:50:8e:fd:de:8f:06:95:51:ec:b3:c4:48:c3:65:
         03:de:48:f1:cd:89:40:d5:03:8f:6a:96:50:97:7c:ff:dd:b8:
         33:cb:0a:b7:0d:75:fa:ee:52:f2:ec:60:d2:f0:60:91:c3:0b:
         68:db:d3:4d:86:00:b4:0e:3a:63:03:55:79:c3:cf:7a:4c:dd:
         3e:16:61:f1:1a:b4:b8:06:a1:94:2f:a8:8c:b0:81:4c:52:be:
         6d:4d:0e:62:59:9d:f0:37:db:06:de:a7:70:2f:7a:6d:3c:a9:
         19:1c:f0:47:57:ad:46:38:e1:5f:0c:e9:dd:13:10:e3:c6:b5:
         b9:fe:c8:a2:0d:17:84:9d:19:10:dd:0e:85:9d:c9:b6:35:58:
         0f:72:29:50:0e:88:37:57:0f:60:41:f3:f9:33:19:01:b1:24:
         60:d1:7f:17:cc:ac:fa:49:27:ed:ae:6c:1f:b3:23:ac:7a:f1:
         27:da:dd:ba:19:9d:85:51:07:05:d2:c3:d4:fd:ef:75:47:46:
         e7:84:29:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----