Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/564baa9d-928a-38e9-b452-4936bf580cad.roa
File:                     564baa9d-928a-38e9-b452-4936bf580cad.roa (raw, json)
Hash identifier:          rI3r/QhxU6b2uUHWiJ6T5V0D0srHVF7lqFeNU8zo8oc=
Subject key identifier:   16:37:84:1F:65:9F:4F:E5:76:41:A1:0D:F9:43:6D:A9:BA:7A:F7:88
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F43285839114A3E70150DCDFD2C5A97C0
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/564baa9d-928a-38e9-b452-4936bf580cad.roa
Signing time:             Wed 24 Feb 2021 05:00:00 +0000
ROA not before:           Wed 24 Feb 2021 05:00:00 +0000
ROA not after:            Fri 24 Feb 2023 05:00:00 +0000
asID:                     395413
IP address blocks:        206.180.43.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:11:4a:3e:70:15:0d:cd:fd:2c:5a:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Feb 24 05:00:00 2021 GMT
            Not After : Feb 24 05:00:00 2023 GMT
        Subject: CN=74e21051-3932-4352-be9b-b964971dc12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5f:62:8a:05:e9:dc:ca:63:df:15:fd:12:92:
                    45:e3:7f:ea:8c:e4:12:86:77:24:73:f3:bb:ec:4f:
                    a6:86:f5:12:f1:6e:c7:cb:74:a4:db:b6:fb:80:f7:
                    15:76:9b:10:01:4a:5f:54:72:be:ca:4b:27:90:e3:
                    c7:fe:65:18:3c:06:e1:e8:37:32:8f:6e:07:73:61:
                    d4:3a:71:66:20:ac:44:15:1d:91:01:af:dc:d7:d7:
                    d4:5b:56:0a:03:f4:e2:26:f0:5d:f4:7f:c1:85:a3:
                    f5:94:36:5d:62:47:fb:1d:68:6f:74:fa:f6:b9:32:
                    75:82:1c:4e:c6:5e:32:17:d9:71:f0:cc:21:03:8b:
                    ef:d1:fe:3b:31:f7:db:47:20:79:91:71:2c:05:d4:
                    aa:da:13:2c:40:01:35:5c:b9:a6:81:49:ff:97:ff:
                    52:6e:32:8a:b7:42:a0:41:70:da:10:3f:b9:b7:2c:
                    f9:54:d6:b4:2f:8b:c6:aa:10:e1:5b:26:4c:4a:c7:
                    b3:3d:3a:e6:a6:4a:ed:25:5d:6c:0a:cf:93:47:41:
                    f0:cd:0a:22:92:b2:d4:c7:05:46:51:b5:c7:ad:62:
                    60:1e:f4:c4:b5:11:32:c1:a9:bf:f2:a8:1f:de:a3:
                    11:0b:ca:a6:76:40:8a:fa:59:46:b9:86:1a:6c:ab:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:37:84:1F:65:9F:4F:E5:76:41:A1:0D:F9:43:6D:A9:BA:7A:F7:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/564baa9d-928a-38e9-b452-4936bf580cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:38:e5:be:f8:df:97:31:a9:a4:7e:72:fe:5c:19:66:89:69:
         f8:26:c6:79:e6:7c:0e:68:1c:50:26:62:20:16:cc:40:7a:c1:
         bb:e1:cc:4a:00:d8:4d:fb:7f:5b:45:6a:9c:11:e6:fe:5e:bd:
         f8:60:1c:20:ac:a3:da:69:b5:8b:0b:3e:df:43:9c:95:e8:02:
         bf:2c:84:97:fe:e6:e6:9f:31:6e:0e:27:0b:87:0d:6e:c8:34:
         e7:ab:ec:1b:d4:8e:99:40:6b:ce:57:ac:a8:13:d7:e3:8b:2a:
         67:08:49:87:5d:2e:a0:3d:24:18:bd:6c:32:6c:32:77:13:43:
         d7:a5:26:05:87:49:04:76:fa:c3:6f:19:6f:64:4d:15:ee:5a:
         75:fb:f0:45:1b:ba:47:71:fe:1e:59:60:67:49:d4:3e:b5:6d:
         e8:34:4a:78:3c:aa:c4:81:e3:0f:06:ce:de:b0:24:3a:57:5a:
         f0:b4:fd:7e:82:79:1d:73:94:e1:fe:99:d5:c3:d2:67:d0:0e:
         46:42:62:97:59:5d:45:10:b2:5b:14:66:81:86:ce:c6:0e:c0:
         b2:c6:b1:bc:72:c1:04:71:6f:42:d6:a1:69:21:dd:fa:cd:4a:
         67:3d:6d:77:1f:f4:15:85:b4:c7:7f:31:00:9c:34:c0:ed:c8:
         18:49:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----