Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/02724c64-0ba5-36cb-a676-decc113fdcb0.roa
File:                     02724c64-0ba5-36cb-a676-decc113fdcb0.roa (raw, json)
Hash identifier:          SdAay2q/OfsJx6ocplTJt9TZT2Ibu9oRR8RRnu6x0SA=
Subject key identifier:   74:33:C5:1E:0D:4F:0E:BD:A0:41:0C:3A:21:20:E4:92:2B:FB:07:55
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328583809105B98D4517B04197EF380
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/02724c64-0ba5-36cb-a676-decc113fdcb0.roa
Signing time:             Mon 16 Nov 2020 05:00:00 +0000
ROA not before:           Mon 16 Nov 2020 05:00:00 +0000
ROA not after:            Sat 25 Feb 2023 05:00:00 +0000
asID:                     61317
IP address blocks:        204.19.238.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:09:10:5b:98:d4:51:7b:04:19:7e:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov 16 05:00:00 2020 GMT
            Not After : Feb 25 05:00:00 2023 GMT
        Subject: CN=536a0b22-143f-4da6-87a5-89e530ed340e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:3e:7b:4d:aa:87:b5:9e:a1:d0:fe:79:1b:
                    fc:a3:14:35:28:9a:57:33:05:df:17:00:a8:2f:be:
                    3d:55:a0:28:08:3b:bc:f9:1a:2d:7d:5d:bf:9c:80:
                    96:83:e4:ca:b4:21:a4:c8:a7:c8:67:db:d3:82:b1:
                    a1:61:d6:3e:2a:95:fa:40:49:18:25:5c:21:87:51:
                    b4:24:6f:a0:33:8e:a1:71:c5:9b:e3:44:8d:97:54:
                    c8:96:49:83:7a:a6:cf:ce:2f:28:c2:eb:4e:8f:85:
                    35:54:7b:05:0d:6d:c2:8e:02:cb:69:91:3e:6f:bf:
                    b6:02:f2:69:02:12:99:64:d0:e3:bb:22:35:41:7e:
                    89:b7:00:a6:05:ac:66:e7:d3:67:c9:93:da:1b:2f:
                    00:8f:fd:a2:59:63:16:ca:d9:5f:d9:13:f9:5f:44:
                    fe:fc:b4:4c:04:85:ba:13:f9:79:9b:7d:2e:50:e2:
                    3d:40:eb:e6:c1:63:a8:3c:d8:4b:00:15:4f:e2:49:
                    42:08:83:27:a8:00:0e:19:d8:b5:4b:29:ca:9a:fa:
                    cc:9e:bc:6d:ec:39:1e:4c:e3:68:68:36:79:85:18:
                    a8:82:00:a5:61:95:ae:ea:c1:e4:30:64:5b:ee:a0:
                    c7:f4:d6:fb:50:6c:d9:c1:42:30:ed:59:e9:c1:3e:
                    63:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:33:C5:1E:0D:4F:0E:BD:A0:41:0C:3A:21:20:E4:92:2B:FB:07:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/02724c64-0ba5-36cb-a676-decc113fdcb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ac:e9:7d:87:bb:cd:88:12:65:c0:f0:8f:da:f9:18:30:41:
         05:1b:80:82:09:03:bf:0e:f0:28:36:7e:7d:8e:86:5c:c7:0c:
         b6:c0:36:ee:4c:c6:de:17:53:ab:30:1f:2b:e6:d5:6d:b8:25:
         ae:9c:6f:be:f5:0e:62:c8:c9:0f:a9:48:b7:23:a2:52:27:ae:
         c0:f6:7b:58:cb:e6:dc:bc:2e:ef:22:6a:26:a9:47:db:37:72:
         50:2f:04:36:51:28:2d:03:47:c8:5b:6d:7a:4d:39:f7:82:71:
         4a:58:4c:95:13:f3:a5:d1:74:01:ec:dc:a6:9d:a9:b6:51:f5:
         3c:54:ee:ff:46:2a:9a:9d:5e:e6:74:a2:c6:75:54:e3:fb:5b:
         07:be:2e:34:b2:1e:d3:e6:ba:78:dd:c8:99:13:0a:f5:2c:bd:
         b7:ea:af:a9:d1:ef:a5:41:5c:fa:43:e1:a4:3d:b2:43:3c:d9:
         bb:40:c7:66:0d:41:98:9b:c7:e3:41:75:bc:41:89:9b:c3:94:
         6f:74:ef:8a:d7:7d:44:34:34:1f:b1:b9:12:e3:b4:61:f1:72:
         d7:ba:b2:e0:4a:48:44:74:17:20:42:2b:8a:48:3f:0e:ee:a8:
         05:35:73:46:82:6c:95:67:a0:f0:27:65:d5:25:ed:02:eb:40:
         ee:37:d5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----