Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/4aa93ed8-36d1-3bd6-959b-6eaa61840189.roa
File:                     4aa93ed8-36d1-3bd6-959b-6eaa61840189.roa (raw, json)
Hash identifier:          ph4giVyr4eK8J64cdS9LBm1xxfkOAU5AcTmm/FVmBsM=
Subject key identifier:   17:61:A2:9F:C4:77:F6:ED:AD:F2:A2:FE:3E:06:48:90:77:B9:96:92
Certificate issuer:       /CN=7746dca1-2236-41ce-ab1a-952e06f4769c
Certificate serial:       010D0C9F4328576D51CC73C042CFC1723F805530
Authority key identifier: 0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/4aa93ed8-36d1-3bd6-959b-6eaa61840189.roa
Signing time:             Sat 23 May 2020 03:07:54 +0000
ROA not before:           Tue 11 Feb 2020 05:00:00 +0000
ROA not after:            Thu 25 Aug 2022 04:00:00 +0000
asID:                     36040
IP address blocks:        66.248.254.32/27 maxlen: 27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:3f:80:55:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7746dca1-2236-41ce-ab1a-952e06f4769c
        Validity
            Not Before: Feb 11 05:00:00 2020 GMT
            Not After : Aug 25 04:00:00 2022 GMT
        Subject: CN=1afbcede-e56f-465b-a567-52386ba379cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:04:3c:a9:65:45:0d:e6:59:8f:ad:a9:1c:0b:
                    72:95:7d:8d:8c:54:72:54:d6:5f:79:13:c6:f5:ad:
                    de:2b:32:3b:61:6a:4a:85:75:c3:b9:2a:0f:a8:e9:
                    46:42:3a:08:cd:82:f3:57:d9:27:37:14:9a:6f:d0:
                    ee:e0:9b:95:49:9a:2d:24:62:a7:3c:d0:d6:ab:3d:
                    7c:ce:8a:86:75:19:50:e2:6c:23:16:07:d6:77:21:
                    64:bd:44:e3:9d:72:7e:83:9b:8d:58:7f:a9:74:3c:
                    0a:79:3e:e5:bd:23:bf:20:a8:5e:66:8c:df:dc:f8:
                    61:b7:4b:cf:71:d6:fa:21:e0:78:65:a3:14:02:ce:
                    f9:a9:64:bd:f6:75:4c:0f:dd:fb:d0:ec:02:36:2c:
                    ea:fe:6e:fb:e8:4b:f4:16:b3:5f:e8:c8:21:92:0f:
                    89:c2:81:ea:e4:7f:59:17:0b:81:d2:62:bf:c1:bb:
                    5d:27:9e:08:2e:47:b1:93:34:fa:0d:b5:e5:9c:a6:
                    0a:ee:a8:43:33:b5:61:9a:69:e5:58:0c:55:9c:df:
                    5b:5d:0c:20:3d:1c:2a:e9:01:6e:a6:1a:ed:7b:ab:
                    ab:f1:ff:b1:0f:6b:46:3b:0a:b2:37:13:a5:e8:83:
                    ba:c7:71:33:f1:86:25:49:1f:f7:48:71:a7:d6:21:
                    63:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:61:A2:9F:C4:77:F6:ED:AD:F2:A2:FE:3E:06:48:90:77:B9:96:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/4aa93ed8-36d1-3bd6-959b-6eaa61840189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c/7746dca1-2236-41ce-ab1a-952e06f4769c.crl

            X509v3 Authority Key Identifier:
                keyid:0A:E6:84:83:00:60:D5:76:67:3F:01:3B:83:A3:7B:45:F1:C2:1B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7746dca1-2236-41ce-ab1a-952e06f4769c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.254.32/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:11:d8:21:2d:8c:d2:5e:8f:39:61:ca:f4:be:e9:5b:36:f1:
         77:32:3f:69:d5:b8:e4:bd:e6:81:94:04:68:bd:4d:3f:65:d8:
         66:2b:3c:ca:0e:62:a4:35:79:ec:51:af:2b:77:6d:52:5a:af:
         22:77:bc:80:ad:02:05:55:32:29:cc:05:12:c3:ab:49:7a:fc:
         c7:2c:17:5d:76:c4:cd:07:d9:3a:74:45:dc:2e:d8:e1:6a:56:
         8b:b8:f5:71:fd:07:3a:35:97:59:c2:94:d8:20:92:ac:b7:86:
         f9:9a:31:90:68:ed:01:3b:c6:9d:c2:90:63:68:c3:a4:bf:fc:
         bd:a0:7f:f9:23:c6:ac:13:99:e7:81:28:0f:68:91:07:e0:09:
         f0:dd:52:e6:a0:5b:88:dd:d5:f4:48:89:04:6a:71:d8:7b:87:
         32:f5:3e:f9:cd:2c:1c:6d:62:ad:0f:04:07:ab:96:bf:30:d9:
         28:a8:92:59:ef:52:c4:2d:38:a2:95:42:02:da:4e:26:71:43:
         46:94:d8:9e:a5:ff:f2:e5:a5:3f:70:aa:23:0a:de:d9:d1:63:
         37:21:19:70:81:4c:6f:67:74:13:ef:db:9e:23:77:47:c9:58:
         df:b6:04:ca:aa:f2:ed:26:02:6f:3a:27:77:b4:f2:1c:ae:64:
         91:39:70:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----