Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/244282f4-8b37-3382-8f16-c029386df4b2.roa
File:                     244282f4-8b37-3382-8f16-c029386df4b2.roa (raw, json)
Hash identifier:          UVgBsK22mggaFlw8V+Q3ryzz612Q86ieK4qU4n1Dyz0=
Subject key identifier:   5D:4F:AF:CA:6E:DF:C6:C2:31:D6:2B:32:47:3E:B3:6E:10:B4:07:6F
Certificate issuer:       /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Certificate serial:       010D0C9F4328576D51CC73C042CFC16C10D85329
Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/244282f4-8b37-3382-8f16-c029386df4b2.roa
Signing time:             Sat 20 Jul 2019 19:25:08 +0000
ROA not before:           Mon 08 Apr 2013 04:00:00 +0000
ROA not after:            Sat 08 Apr 2023 04:00:00 +0000
asID:                     55079
IP address blocks:        162.208.110.0/24 maxlen: 24
                          2604:ab80:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6c:10:d8:53:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
        Validity
            Not Before: Apr  8 04:00:00 2013 GMT
            Not After : Apr  8 04:00:00 2023 GMT
        Subject: CN=240b1b3d-3bf4-4e95-80aa-a9724ce698b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:68:f7:8a:0f:97:5a:22:c8:1b:47:35:e5:76:
                    d9:22:81:41:03:a6:46:43:a5:0e:8b:88:5b:bf:01:
                    d9:85:94:4c:68:b2:e0:52:d5:02:d4:2e:d0:0d:0e:
                    56:89:eb:76:02:f1:ba:1f:e6:be:68:8d:16:1f:6c:
                    2b:e3:57:1a:0a:6b:c0:b2:a3:f9:49:e8:87:bc:3a:
                    d3:89:5d:31:18:0e:7d:f2:3d:f1:f6:65:d6:12:16:
                    05:8a:2c:4a:49:4f:5a:60:fd:54:88:72:ac:e0:88:
                    06:17:f9:95:d2:ba:f7:5f:42:20:50:f9:71:2d:d5:
                    31:ba:a2:7a:af:6e:ad:4c:1d:f2:a4:a3:35:2c:cf:
                    63:07:a0:54:57:84:73:47:c4:e5:d5:27:52:6c:e8:
                    a3:68:96:bb:1d:de:be:e6:d3:9f:ad:2f:90:a9:c7:
                    3b:8f:a5:cc:96:2d:1d:4d:5e:66:0b:40:4e:d1:29:
                    f5:7d:d9:8b:b6:c9:8b:94:9b:39:02:02:0d:56:e2:
                    75:16:b3:7d:0a:03:8c:c5:32:3c:06:6a:43:2e:73:
                    fd:31:95:4b:46:bf:d1:bc:46:c7:fe:ed:81:83:a6:
                    83:13:1e:49:31:bb:25:5c:8e:3a:9e:f6:5e:71:0d:
                    04:d8:a7:da:8c:80:a2:f4:d5:52:d5:af:5c:96:e1:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4F:AF:CA:6E:DF:C6:C2:31:D6:2B:32:47:3E:B3:6E:10:B4:07:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/244282f4-8b37-3382-8f16-c029386df4b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl

            X509v3 Authority Key Identifier:
                keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.110.0/24
                IPv6:
                  2604:ab80:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:3d:24:36:fc:46:a7:6d:8b:05:86:a7:2b:f8:10:d9:b9:3b:
         8b:6a:df:3e:ba:0e:25:9e:d7:52:e3:ab:a8:d1:72:93:ba:c9:
         a7:c9:85:c6:09:1a:89:33:ad:90:a3:d7:0d:8d:49:cc:e2:6c:
         db:db:55:7e:63:1c:a3:75:89:16:f6:a9:6d:79:07:ca:d5:19:
         ee:f3:ce:5a:3d:2e:b2:6b:9d:4c:01:d4:05:52:ac:0a:b3:e5:
         ff:90:44:82:d5:1a:d1:56:84:7a:f0:16:c6:e2:ee:86:1d:f8:
         e6:c1:d3:ec:22:b5:a2:68:58:68:6a:3a:9b:82:5c:c4:b7:40:
         50:45:7f:f7:61:e4:d5:41:1a:7d:a3:ff:e7:05:c4:c1:74:03:
         62:70:89:08:c0:1c:af:a3:b1:5c:8d:71:e5:9e:d8:ea:3c:4c:
         50:3a:73:02:a4:f2:af:4e:36:48:7b:a4:c7:7c:75:74:e7:d7:
         52:40:63:dc:3f:26:4f:2a:b8:98:9f:09:ab:69:9c:13:4b:9b:
         6f:0a:4d:2f:4a:9e:0e:1e:4c:06:9e:9a:b7:6e:9c:b5:e6:30:
         ba:33:b4:23:06:ec:35:22:e8:f4:18:46:1e:b2:bf:49:f5:fc:
         a1:4d:88:0c:c6:ca:be:c7:3b:50:53:3c:ad:79:73:65:1a:de:
         76:aa:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----