Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cab4030b-3daf-313f-ae02-1b240817e05c.roa
File:                     cab4030b-3daf-313f-ae02-1b240817e05c.roa (raw, json)
Hash identifier:          Rh7TuZ0lwIn65xs7vrbIYVFr7AZrJACmDdPnsPZmcQI=
Subject key identifier:   11:F3:76:31:2F:A8:E4:69:5B:EA:18:7E:C7:67:6D:38:33:A3:12:C3
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328576D51CC73C042CFC173772F9480
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cab4030b-3daf-313f-ae02-1b240817e05c.roa
Signing time:             Wed 22 Jul 2020 15:41:13 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     22773
IP address blocks:        108.165.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:77:2f:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=58cb4367-58ec-4e56-b142-cdf4ea698801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:c2:df:58:14:f8:5f:ba:de:2b:e3:2b:0f:
                    1b:f2:55:f6:eb:bb:19:21:56:5b:96:b6:44:c9:92:
                    c3:a2:2f:8b:04:ee:87:95:c7:54:0d:7c:07:cf:63:
                    bf:a2:e1:1b:03:fc:34:b9:48:48:50:5b:da:0f:b3:
                    7d:a1:92:1e:da:81:e5:59:15:92:57:3e:cf:f4:c5:
                    79:5c:af:4b:16:f5:e4:ad:58:7a:48:e6:41:5d:d7:
                    4e:e4:8a:eb:6e:79:5d:c2:b2:2b:46:11:4e:5e:63:
                    b2:64:db:1a:f2:1d:10:fb:8a:fb:ba:82:ff:ee:13:
                    86:c1:03:fd:a9:5d:9d:6b:eb:6b:21:df:28:c7:19:
                    d4:86:a3:f0:f2:50:29:50:f5:dc:55:8a:e8:8b:0f:
                    ab:f0:7d:97:b5:2b:34:be:9b:07:ed:cc:f2:e6:2f:
                    59:58:ae:91:b5:62:af:f9:0f:cc:d0:6f:d0:ff:3e:
                    fe:2c:64:d4:03:8a:80:07:eb:93:e6:b5:08:3b:09:
                    e9:b4:0a:07:47:40:4c:57:3a:df:54:ba:4d:57:dd:
                    74:91:f6:18:86:db:50:ce:ae:16:fd:00:39:b1:0d:
                    78:9b:d9:77:c7:4d:4e:c6:cf:c3:2b:fd:08:93:aa:
                    07:69:94:5f:d5:b8:05:b9:01:37:95:d7:1a:71:06:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F3:76:31:2F:A8:E4:69:5B:EA:18:7E:C7:67:6D:38:33:A3:12:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cab4030b-3daf-313f-ae02-1b240817e05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1a:4e:ac:9b:65:e9:58:6f:f6:ad:0a:ac:50:da:e7:bc:25:
         f6:66:43:34:d1:db:0a:52:49:0b:48:79:93:11:6a:e8:ca:94:
         5a:56:21:bc:81:98:c3:ce:e1:0b:76:c8:5c:e9:88:6d:b8:ad:
         e4:05:1e:b6:57:50:41:a7:41:51:cd:28:e1:98:27:92:7d:b4:
         72:e1:62:23:56:1f:ea:07:d9:5d:93:be:59:ed:66:b1:48:1c:
         c0:73:dc:b3:ee:c3:ba:e7:f3:2c:95:1e:b8:0c:b3:d1:bd:82:
         96:2b:5a:18:1a:ac:cd:09:36:11:16:ed:bd:62:6e:7f:aa:e1:
         2b:52:54:f8:c1:e9:d9:f3:28:b3:87:7c:8f:92:97:27:9c:42:
         d1:7c:bc:46:0a:91:83:7c:c6:03:c8:8d:f6:9a:28:4d:1b:7a:
         0a:ef:5f:66:c9:ee:b7:67:e8:10:d9:ba:cb:e7:06:64:4e:6d:
         c3:21:4c:cb:7d:8a:6c:09:c4:b3:19:ea:98:77:29:aa:fe:33:
         1e:b3:4f:0f:bf:3b:f9:0b:cf:34:6d:d5:43:cf:56:82:5b:ca:
         22:46:2a:9f:0d:9a:81:c2:9c:10:a7:2a:d2:e7:74:b0:52:b0:
         37:01:1b:7a:de:bf:60:21:dd:9e:60:b8:b3:cd:ac:f8:19:a6:
         48:c0:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----