Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/719a63dc-ccd0-30ce-a8dc-c58184a229ea.roa
File:                     719a63dc-ccd0-30ce-a8dc-c58184a229ea.roa (raw, json)
Hash identifier:          4DUXb0jMjcA4D+N81qp+tIXXSp307D/jwUXrm08gNEw=
Subject key identifier:   CB:22:10:6D:79:79:8E:50:53:A7:CE:0D:CE:06:38:D5:41:84:53:F5
Certificate issuer:       /CN=625741fb-b66a-49be-918d-1b4752e68175
Certificate serial:       010D0C9F4328576D51CC73C042CFC17390C8200A
Authority key identifier: 02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/719a63dc-ccd0-30ce-a8dc-c58184a229ea.roa
Signing time:             Mon 27 Jul 2020 14:58:21 +0000
ROA not before:           Mon 27 Jul 2020 04:00:00 +0000
ROA not after:            Sun 30 Oct 2022 04:00:00 +0000
asID:                     15038
IP address blocks:        204.9.220.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:90:c8:20:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625741fb-b66a-49be-918d-1b4752e68175
        Validity
            Not Before: Jul 27 04:00:00 2020 GMT
            Not After : Oct 30 04:00:00 2022 GMT
        Subject: CN=3f0448e3-4ae9-4769-a105-1ed0fa047061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:49:80:eb:4b:f6:c0:60:df:6b:b3:44:a0:
                    f5:37:ec:e8:c4:04:bd:39:35:dc:4c:c9:36:c4:7a:
                    9c:09:8e:41:ef:c8:04:46:7c:51:7a:b6:e5:ff:f0:
                    4f:25:a8:ca:3e:0b:c4:de:13:ad:cb:ac:64:7f:80:
                    62:bd:5a:8a:fa:05:1e:fc:9f:29:c3:4f:8d:67:9b:
                    71:ff:47:9c:c0:b6:bf:2e:c8:94:95:87:08:f8:c4:
                    6b:5e:13:ae:3e:58:55:b9:a7:e8:b3:81:45:84:e4:
                    d3:93:b6:d9:d4:52:29:db:3a:0b:00:b1:af:bc:7b:
                    9a:34:2a:ff:e0:dd:a7:43:13:7a:98:ae:99:1e:29:
                    e8:1b:1b:b8:1b:f8:13:56:36:68:60:c1:d1:63:4f:
                    4d:c5:a9:51:32:1d:38:53:22:70:ff:52:2d:37:f9:
                    8b:3f:b0:66:a7:22:42:b1:e9:92:7f:ac:9f:a2:d7:
                    e2:61:9f:bf:f7:c4:15:1d:f7:86:e4:ea:2c:fb:ae:
                    12:3f:48:06:de:36:ca:d6:39:09:57:f6:d0:94:84:
                    d9:57:93:e6:b1:2a:db:66:32:63:26:77:1f:a5:3d:
                    64:98:e2:48:aa:34:e6:6c:85:85:0b:42:1b:6b:11:
                    3e:bc:54:12:ba:46:3d:5b:ca:7c:0d:47:7a:ab:17:
                    4f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:22:10:6D:79:79:8E:50:53:A7:CE:0D:CE:06:38:D5:41:84:53:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/719a63dc-ccd0-30ce-a8dc-c58184a229ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175/625741fb-b66a-49be-918d-1b4752e68175.crl

            X509v3 Authority Key Identifier:
                keyid:02:52:B4:22:B0:85:94:9B:00:FD:96:6A:0A:FC:1D:33:FA:B4:14:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/625741fb-b66a-49be-918d-1b4752e68175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:36:e0:ac:54:30:19:d3:cc:28:c7:a0:44:06:08:9a:0e:e8:
         b7:01:fb:f1:bc:61:e4:ad:04:83:5e:22:e3:77:a9:9c:2a:14:
         f7:b6:6a:11:71:f9:1a:c9:99:ac:59:a2:4f:14:6f:26:12:5b:
         a6:9b:5e:8e:7d:ac:7c:a4:0f:07:d7:d4:54:d1:0e:ae:22:d6:
         99:e9:c4:65:01:59:16:c6:ad:19:18:8b:70:2c:37:f2:bf:6c:
         2b:41:58:57:a5:bb:23:f2:64:7c:dd:df:ad:f1:69:3f:20:a8:
         af:6a:cc:72:bd:f9:9e:3d:a8:64:5a:df:fd:15:16:da:c5:2b:
         80:a5:cb:86:00:4a:0b:5e:82:64:31:d8:5c:55:06:83:db:39:
         00:c5:67:11:3f:e8:cf:9c:70:29:02:de:3a:35:ff:70:01:ff:
         82:78:b9:79:40:57:c8:f4:ee:1d:21:e2:b1:5e:af:66:1f:40:
         9a:92:3a:5a:04:72:de:21:a7:e1:dd:64:b9:ea:64:c5:d9:4b:
         35:1d:3e:ba:21:cb:91:3e:82:e1:86:b8:43:39:b5:93:61:ce:
         54:a6:64:ea:46:f0:ca:4f:74:94:0a:83:ff:4a:ab:6d:61:70:
         b9:e3:69:d0:44:27:4f:a2:14:2e:d0:b0:c0:4e:50:7c:5d:4b:
         fe:02:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----