Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ded817e-5542-3373-8d74-d9c59e91d215.roa
File:                     4ded817e-5542-3373-8d74-d9c59e91d215.roa (raw, json)
Hash identifier:          tA+Sv2I/FSb/KdkHpO/qWunfJIlkNxOIIMJobMFkFPw=
Subject key identifier:   FF:DF:6E:A6:A8:27:72:CA:21:43:89:6D:BA:B2:68:F7:8F:C3:C1:F5
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328576D51CC73C042CFC172F21A173C
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ded817e-5542-3373-8d74-d9c59e91d215.roa
Signing time:             Fri 26 Jun 2020 19:28:15 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Thu 29 Sep 2022 04:00:00 +0000
asID:                     61317
IP address blocks:        108.165.160.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:f2:1a:17:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Sep 29 04:00:00 2022 GMT
        Subject: CN=5e444d0d-e57d-4023-9fb4-af2e6d0259b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:65:07:71:18:dd:bc:93:a1:56:fd:3f:db:
                    ec:fe:7e:60:4a:78:e5:d4:8d:24:be:63:e8:c8:c5:
                    36:9c:2d:fd:61:44:cd:6f:f5:a4:ae:9d:34:bf:c2:
                    f8:6c:46:51:f9:13:f4:5b:33:fd:28:3d:f7:b6:9f:
                    c3:a3:7f:bd:7e:9c:25:be:e6:c1:65:1a:71:76:37:
                    30:00:f7:47:e7:88:b2:58:87:2e:4b:78:64:ac:68:
                    aa:2d:a4:a3:89:8c:ad:23:6d:e3:23:69:03:d4:3d:
                    3d:a6:fc:87:09:6f:1a:32:d6:8a:7d:a9:38:81:f3:
                    c3:8c:36:ed:68:18:38:f8:87:a3:fd:77:d2:3e:47:
                    f1:66:35:46:8f:db:dd:c7:89:2a:74:49:f0:df:87:
                    3f:64:cf:9b:c6:d3:ec:47:5c:fa:12:a9:e9:9c:7b:
                    18:26:c2:93:f4:04:66:1c:67:38:ce:ee:b3:1a:01:
                    e4:63:ae:24:2a:bc:56:1e:6e:2b:61:a3:b6:f7:b4:
                    68:72:61:cf:38:d8:89:02:9c:69:9b:47:83:47:28:
                    eb:71:25:0b:33:00:42:e1:da:d7:83:52:af:e3:d2:
                    8e:d3:e8:08:fd:d3:78:f1:8c:18:f6:51:60:d2:93:
                    2f:2e:88:13:ac:0d:cc:2e:0d:6a:29:d1:48:98:2c:
                    64:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DF:6E:A6:A8:27:72:CA:21:43:89:6D:BA:B2:68:F7:8F:C3:C1:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4ded817e-5542-3373-8d74-d9c59e91d215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:32:dc:38:7f:3e:73:81:f0:63:3b:3a:3c:94:fa:5d:52:
         ab:13:72:7d:51:5b:7c:81:4a:b4:b5:6a:bd:77:9c:87:e3:24:
         f9:92:95:18:54:3a:c5:98:d7:fa:1c:53:e0:48:38:ec:98:73:
         e0:6b:35:10:c1:26:18:09:af:2e:8a:82:9c:d3:fc:21:c2:d6:
         f3:66:37:04:c1:bc:f8:27:98:08:d6:04:ba:53:2f:0c:9c:65:
         f8:d5:ab:d0:ba:fb:dc:dd:2a:c2:61:11:a8:62:a0:a3:8b:b5:
         dc:28:d5:b8:18:7b:41:5e:49:bd:de:63:b5:f5:5c:de:71:9f:
         1e:58:d9:50:cf:17:94:63:39:3a:0c:5c:0e:08:08:38:5c:09:
         28:e5:13:47:5a:13:f9:e1:d0:c2:d2:41:cc:20:4b:32:a7:f1:
         d6:92:1b:d8:2f:62:d9:03:5b:80:fd:bd:e2:81:ae:bd:a7:5b:
         8f:52:d9:52:57:8c:3f:8a:8a:e1:5c:43:51:66:b0:af:bb:4d:
         9d:e6:7f:8b:e2:5a:e2:10:7d:38:13:04:26:e9:62:85:17:3e:
         fb:6c:d2:ff:2f:05:6f:9e:6c:7a:da:de:fd:a1:5f:1d:5b:51:
         7a:1c:52:24:83:1b:90:8e:a1:fd:1f:57:67:a4:9e:93:d8:fe:
         ff:1a:a2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----