Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/5d1e4739-e289-3c5b-9fec-09004679dadf.roa
File:                     5d1e4739-e289-3c5b-9fec-09004679dadf.roa (raw, json)
Hash identifier:          xcP75cqTgEQu86RSiZxQQt8nEG40jP5f9SkB4CP61Yg=
Subject key identifier:   7F:40:68:A9:43:27:4B:DF:F7:80:55:47:06:43:DE:70:B2:78:7D:5F
Certificate issuer:       /CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
Certificate serial:       010D0C9F432858373CEDE371908C1611511EEF80
Authority key identifier: A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/5d1e4739-e289-3c5b-9fec-09004679dadf.roa
Signing time:             Thu 10 Sep 2020 04:00:00 +0000
ROA not before:           Thu 10 Sep 2020 04:00:00 +0000
ROA not after:            Sat 10 Sep 2022 04:00:00 +0000
asID:                     4501
IP address blocks:        199.181.158.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:3c:ed:e3:71:90:8c:16:11:51:1e:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
        Validity
            Not Before: Sep 10 04:00:00 2020 GMT
            Not After : Sep 10 04:00:00 2022 GMT
        Subject: CN=d75eab55-41d6-4237-90ef-b790cdf9f895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:94:cd:cc:4e:a4:b3:07:91:6f:e5:d0:79:
                    d0:15:a2:de:a6:71:50:50:ed:ff:ae:ab:7c:2a:70:
                    1b:b7:88:11:24:cd:5d:41:55:53:79:93:a9:17:bb:
                    62:80:e7:df:4a:f2:a4:c7:87:1b:de:c1:41:9f:28:
                    a4:17:8a:db:33:ab:36:cb:9c:45:c0:f4:d4:3a:e7:
                    e3:a8:81:36:32:5a:b7:b0:86:12:76:a1:ea:50:0a:
                    6b:b4:9a:b6:0e:18:3a:12:64:e5:44:e8:fe:2d:18:
                    e6:15:df:6f:51:05:80:3f:22:2d:75:8b:42:35:bd:
                    79:da:6a:3c:4f:86:57:ec:94:ef:9e:29:d9:2f:4e:
                    9c:00:b3:d8:51:30:1f:40:46:2e:03:61:16:06:e9:
                    de:eb:29:59:d2:94:b2:cb:a8:94:e9:d4:06:56:2e:
                    06:5a:a6:e8:1f:fb:8e:75:93:91:a9:25:21:f0:ce:
                    36:96:90:4f:9f:77:26:ef:57:98:4a:f1:fa:7a:3b:
                    14:e3:2b:18:f3:ae:52:de:ac:21:13:63:19:90:65:
                    e7:3d:00:99:ee:8c:0e:b5:45:14:25:74:7a:0f:24:
                    e3:27:c1:4d:14:91:af:7f:a1:6e:f0:d3:0b:7f:7d:
                    49:9f:78:f9:d8:0c:aa:3a:50:c5:00:08:b2:2a:71:
                    6e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:40:68:A9:43:27:4B:DF:F7:80:55:47:06:43:DE:70:B2:78:7D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/5d1e4739-e289-3c5b-9fec-09004679dadf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.crl

            X509v3 Authority Key Identifier:
                keyid:A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:db:55:e2:0d:ed:75:55:1c:02:68:b2:96:d8:f1:ec:9e:50:
         d0:b3:c3:85:38:54:de:ad:29:28:7d:d5:d3:fa:07:98:6c:64:
         57:89:6d:2e:b3:62:88:db:97:df:ce:37:75:a6:08:df:7f:07:
         65:02:0d:31:1e:8e:3f:bb:01:a1:6e:15:52:bb:15:c5:8a:80:
         66:ec:37:c0:f9:96:e4:d0:0c:d2:b5:d4:c9:e0:5c:ec:2d:c5:
         ef:cf:3f:15:c1:f6:64:c6:df:55:88:fa:ce:d1:5d:29:4c:c2:
         11:37:a3:7d:08:86:88:8d:57:6c:8d:f0:91:01:42:d9:94:4c:
         49:37:20:75:ed:e7:59:60:41:c8:43:18:d9:36:02:5c:36:a7:
         a7:60:bb:b7:30:2c:6f:9e:c5:dc:40:b2:28:87:e0:5a:4b:22:
         a0:8c:12:08:45:9b:aa:78:1c:5b:e0:49:08:23:9a:8d:40:00:
         b5:ce:89:04:f4:92:b4:3b:09:07:c3:1c:c5:4a:47:9c:54:e1:
         2a:a3:6c:2f:91:60:ef:af:ef:f0:7e:70:13:0b:8a:3f:94:c9:
         46:4c:71:ab:eb:87:c3:51:66:9e:1e:90:27:f6:27:a8:54:5c:
         e8:e8:46:13:18:bf:79:5c:d8:e3:39:20:ce:af:73:d2:c7:42:
         60:be:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----