Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dc0b90e8-fdad-3f85-9da4-d2af7e578559.roa
File:                     dc0b90e8-fdad-3f85-9da4-d2af7e578559.roa (raw, json)
Hash identifier:          7Tz5w7xR+IDP1q/sbTwsEzv2pL+LrVMSC/reL44sie8=
Subject key identifier:   3D:32:59:E9:6D:47:D6:BA:62:15:24:4B:F8:B4:FD:05:FC:A9:F7:E0
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF6C3809
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dc0b90e8-fdad-3f85-9da4-d2af7e578559.roa
Signing time:             Sat 13 Jun 2020 20:43:24 +0000
ROA not before:           Wed 22 Apr 2020 04:00:00 +0000
ROA not after:            Fri 16 Sep 2022 04:00:00 +0000
asID:                     40703
IP address blocks:        157.166.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:6c:38:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Apr 22 04:00:00 2020 GMT
            Not After : Sep 16 04:00:00 2022 GMT
        Subject: CN=ecda71a9-0bd1-4812-8752-0cadd379f544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ee:c7:a8:87:a3:14:1a:4d:9d:b5:e9:2f:cf:
                    fd:36:19:d6:42:8e:e8:cd:43:7c:f6:39:4a:ac:8d:
                    eb:04:c5:0b:3a:16:4e:c7:c2:b2:56:66:9e:7e:4c:
                    3e:8b:fc:58:f9:4d:8c:71:11:20:df:3e:a8:2e:73:
                    78:a1:d4:97:eb:8b:10:5d:eb:b6:f1:f7:b7:1d:d0:
                    a8:cc:96:4b:a3:dc:69:8a:23:57:cf:d8:a2:b3:62:
                    2e:99:19:29:36:17:ac:2d:16:4c:b4:0c:a8:b1:d5:
                    13:e0:1e:1e:e7:d8:5b:ba:f6:a1:a8:3a:66:49:b2:
                    ea:8c:12:e8:aa:04:97:e5:79:97:25:70:dc:1d:62:
                    30:0f:65:73:d6:25:f3:0a:37:9a:2a:0a:e0:bd:fc:
                    c9:9d:13:c3:b8:15:91:3c:00:57:b3:25:42:6f:99:
                    51:6a:85:dd:bb:84:31:c9:c1:d3:5a:31:e0:c8:fb:
                    42:8f:36:c2:38:f3:54:84:80:d3:04:e0:74:28:bd:
                    28:a5:46:4b:a0:5b:01:65:11:57:2a:b6:02:7f:e4:
                    c0:bf:c5:c7:17:3a:d3:f4:82:29:61:67:b5:be:e4:
                    f4:37:f8:29:8c:4b:e2:6f:55:f6:0b:a2:28:20:3f:
                    a3:81:50:a8:ff:27:cd:27:f4:85:4c:ef:2d:52:32:
                    2d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:32:59:E9:6D:47:D6:BA:62:15:24:4B:F8:B4:FD:05:FC:A9:F7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/dc0b90e8-fdad-3f85-9da4-d2af7e578559.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:46:26:4b:b6:4f:41:67:ed:58:aa:75:4a:26:c2:3a:bd:be:
         86:d2:f7:92:40:4a:66:0b:51:7b:7f:07:a5:dc:c4:b6:45:6f:
         bb:b2:0f:cc:7a:f9:13:fb:5e:06:4e:35:20:be:ff:0d:b6:f8:
         30:05:28:1e:48:97:06:11:57:a3:5f:89:d5:64:21:31:e1:39:
         7e:c4:9d:ac:8c:a3:5f:9c:28:f1:38:de:9c:2e:0e:0f:5b:86:
         84:14:e0:c2:ec:0a:7f:cb:a2:e2:5d:be:46:99:e5:00:b0:08:
         5e:48:9f:87:d4:f6:1e:db:d1:97:19:c4:72:02:00:77:9a:02:
         d6:88:8c:73:c1:f3:87:be:c6:71:7f:ef:e2:0d:aa:a3:0c:0b:
         01:a4:96:49:b5:88:99:91:c9:37:34:29:d9:18:8b:22:74:1f:
         4f:63:0d:eb:01:d2:6a:c9:a6:c0:6a:42:5e:2f:14:0e:ac:55:
         c7:f4:f1:47:0d:6e:17:09:cb:16:b7:ea:e4:f7:6e:27:80:c1:
         a1:69:58:c1:59:3c:52:d9:47:eb:7d:00:43:69:27:b8:4f:3b:
         14:fb:99:86:da:78:95:14:d3:2d:b3:ef:ad:57:c5:c8:77:69:
         64:d2:46:fc:cd:ce:c7:ad:04:bf:0c:04:ca:38:bc:2f:b5:26:
         5e:51:46:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----