Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9f6eb873-db63-3b81-9890-a5bf684dce21.roa
File:                     9f6eb873-db63-3b81-9890-a5bf684dce21.roa (raw, json)
Hash identifier:          uxBKTqalKe+HKHWdzPK1vEvAbtzAJsR/2AFk1gW2hq8=
Subject key identifier:   27:6A:3F:4C:D2:70:17:C2:C0:9A:18:B4:06:D1:62:AD:DF:A4:DB:50
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328576D51CC73C042CFC170F289E19F
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9f6eb873-db63-3b81-9890-a5bf684dce21.roa
Signing time:             Thu 19 Mar 2020 11:24:47 +0000
ROA not before:           Tue 20 Nov 2012 05:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        165.225.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:f2:89:e1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Nov 20 05:00:00 2012 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=2428fad3-58a9-4e1b-99e4-9dcb8228e51e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a6:fa:6d:e1:ff:d5:5d:5d:78:86:1f:ab:6b:
                    f9:51:aa:2a:6a:10:6c:4b:01:52:bf:32:4c:b8:cd:
                    08:05:51:38:5b:93:11:57:58:2f:54:0d:0f:37:52:
                    54:54:b4:dc:a2:2b:fb:46:4b:6c:84:65:71:ab:7f:
                    fd:3f:36:01:ae:45:8e:1b:66:c4:b5:5f:77:68:95:
                    32:b9:08:d7:32:55:62:bb:da:53:b4:c7:57:ff:71:
                    6b:24:de:a2:f6:60:db:8d:a3:f6:b2:73:dd:7e:cf:
                    28:bb:b3:fd:8e:95:01:5d:ab:fc:a8:a3:ae:c8:7c:
                    f9:47:ad:68:4d:8f:13:a6:c8:2b:dc:8f:26:8c:e1:
                    c7:fa:d1:e4:0a:03:88:98:15:dc:b1:d8:d3:b3:a2:
                    67:1e:93:d5:48:ef:4b:ab:cd:89:1c:3d:de:8e:bc:
                    68:9e:ee:ec:f0:d9:99:96:6b:03:2b:c0:17:da:e7:
                    c8:a9:fb:2a:34:6b:57:4b:1b:03:9e:40:1e:31:03:
                    a9:f2:c9:ab:68:58:84:0b:dd:00:92:ec:7e:a3:bb:
                    b4:8e:68:80:3c:6a:a5:4a:64:12:10:ee:44:0c:c0:
                    f5:09:e3:33:d0:e0:da:3e:1a:5f:bf:e8:52:9e:43:
                    9c:4d:cd:a3:cc:b3:1c:c2:55:11:04:e7:1b:6b:d5:
                    b2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6A:3F:4C:D2:70:17:C2:C0:9A:18:B4:06:D1:62:AD:DF:A4:DB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/9f6eb873-db63-3b81-9890-a5bf684dce21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.225.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5b:82:c9:9b:c0:d3:a0:96:12:f8:7e:88:ba:2f:f2:7d:a4:
         3b:6d:f0:c1:20:14:b7:f3:71:fe:ba:1a:04:63:97:ac:33:6a:
         a1:46:9a:ed:69:5e:8b:a7:5b:cf:12:62:81:69:5e:c3:e2:af:
         ba:ca:ca:4c:57:32:50:03:96:d0:96:96:05:a4:47:22:53:eb:
         52:0b:63:33:15:70:d5:ab:fe:a9:35:71:22:42:c6:e8:f3:75:
         7c:f9:70:70:9b:58:af:95:73:af:ce:0b:41:3b:13:22:73:31:
         3b:9f:b8:c2:0b:fc:f0:e8:51:cc:af:f8:2d:74:e4:4b:a0:ba:
         de:43:27:84:1c:cf:22:60:56:9f:8f:56:2a:c5:da:c8:6a:9b:
         f5:84:c5:2a:ac:b7:2e:83:e8:94:3d:e0:27:dc:7c:38:cd:5c:
         b1:63:df:81:9b:18:df:ba:43:72:d8:10:38:ec:3b:6a:7d:e9:
         d3:06:42:bf:cd:7b:bd:5f:5a:61:b1:c3:70:4a:b1:e2:65:23:
         bc:a9:0e:b7:73:d2:e8:ef:30:7f:ea:da:e8:c2:8e:97:11:2d:
         4d:06:a9:2a:db:be:bc:1e:38:24:0c:81:97:be:d8:27:bb:a0:
         d7:1e:7a:74:3c:d9:35:72:cb:a4:41:43:a9:74:67:76:ce:54:
         a9:42:1d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----