Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ece21a03-98e9-3eee-8b04-2de108ab2735.roa
File:                     ece21a03-98e9-3eee-8b04-2de108ab2735.roa (raw, json)
Hash identifier:          zLZCAQ5HNbK8TJW+PXK2F1jjLSx/LvrKn+Zi7WuVXVw=
Subject key identifier:   38:73:42:05:A8:B6:DB:20:67:D3:8A:D8:BC:3E:99:7F:9C:8F:B2:4F
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328576D51CC73C042CFC172ED89D739
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ece21a03-98e9-3eee-8b04-2de108ab2735.roa
Signing time:             Thu 25 Jun 2020 22:12:13 +0000
ROA not before:           Wed 22 Apr 2020 04:00:00 +0000
ROA not after:            Wed 28 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        157.166.132.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:ed:89:d7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Apr 22 04:00:00 2020 GMT
            Not After : Sep 28 04:00:00 2022 GMT
        Subject: CN=f6b791b8-fc52-45a3-94bb-3dbb46ebfb20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:1d:1f:69:12:e5:bb:0c:03:b2:8a:23:12:
                    26:37:c4:64:a6:f9:a6:45:f2:e1:4d:c4:a1:0e:ee:
                    55:9b:c0:5c:12:2f:90:46:fe:f3:39:f4:fa:14:b9:
                    a8:cb:13:48:22:01:10:53:b1:59:df:f2:6e:14:18:
                    66:16:02:61:9e:9c:22:63:78:28:de:84:67:6e:0a:
                    89:00:f2:fd:f1:78:62:71:5a:4d:b6:20:32:f1:ec:
                    d0:3c:93:26:00:31:de:9d:f8:fd:82:ab:11:e3:f5:
                    ee:41:72:10:bd:a2:a6:92:6d:4f:a9:c3:b8:74:96:
                    3c:f6:a4:a5:24:30:37:95:da:c1:c5:94:78:ab:0b:
                    8f:f7:4d:d7:f5:09:75:05:7e:50:7a:be:57:b8:49:
                    e0:6d:b6:79:30:74:c5:78:e0:9c:4d:1c:e6:b6:e8:
                    a7:35:7f:e3:ce:13:ac:b9:3a:98:6b:db:6e:34:32:
                    44:91:50:87:e8:e2:b2:31:81:e8:e8:db:50:e6:07:
                    e2:8f:26:55:81:ab:9d:61:5c:08:64:b9:0a:b2:1b:
                    f2:a0:13:2e:76:7f:9b:57:a1:a7:ba:a1:ba:21:83:
                    ca:af:1a:f2:57:77:85:68:32:c7:29:7b:79:3c:c1:
                    d4:55:99:1c:11:ff:75:13:ad:dc:76:7a:70:ff:24:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:73:42:05:A8:B6:DB:20:67:D3:8A:D8:BC:3E:99:7F:9C:8F:B2:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ece21a03-98e9-3eee-8b04-2de108ab2735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:64:d8:c9:97:99:97:2e:98:56:c9:98:6e:04:c8:b3:f7:
         e3:c5:7f:0c:fe:ba:a5:ea:00:70:58:1b:ca:c0:dd:fe:d7:3c:
         a0:34:4a:95:bb:ef:d1:64:fb:6e:4b:65:8d:2c:ab:30:f5:09:
         31:bd:86:cf:f6:e7:06:70:64:e7:f8:76:d7:f1:c5:49:9e:a1:
         bd:6d:b0:b1:8c:ec:ab:8f:d7:86:64:fd:10:93:a2:f6:b7:1a:
         4c:81:29:57:43:2d:cf:db:8c:a6:de:ba:bf:e1:b0:30:8f:a7:
         99:33:a2:b8:dc:a8:11:0f:dc:cb:e3:2c:e8:b0:b1:b0:b8:26:
         4e:7f:2f:83:d3:4f:bb:e8:78:da:38:17:ef:aa:ef:fe:a7:45:
         96:ba:ca:ba:c8:4f:74:83:0f:79:a5:3c:22:94:d6:87:87:83:
         dc:12:23:36:0e:17:7a:17:34:b7:74:bb:1c:c9:8a:60:ab:4e:
         19:c1:1f:03:6b:10:61:6a:9b:d7:1d:4a:5c:ee:e2:a2:5e:26:
         d4:23:4e:37:08:c4:3f:02:46:fa:71:17:8f:67:47:6f:46:16:
         87:c2:bc:de:05:fd:c7:7f:19:7e:1c:f8:17:8c:3d:47:80:fc:
         90:89:51:50:07:bb:87:c5:2d:db:05:9d:f3:77:8a:7a:36:f9:
         0b:d4:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----