Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/969e79a0-361f-3774-b146-9e7850c1493e.roa
File:                     969e79a0-361f-3774-b146-9e7850c1493e.roa (raw, json)
Hash identifier:          7avM+dy64oPrNNvIkLLRNTAcE8ENcIhaRf6L0NY/fh0=
Subject key identifier:   1D:88:BF:1E:00:6B:59:CE:2B:08:1B:8A:BA:8C:AD:6D:FB:23:0C:BF
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E7E60FBA
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/969e79a0-361f-3774-b146-9e7850c1493e.roa
Signing time:             Wed 24 Jun 2020 19:55:13 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Tue 27 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        69.7.138.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e7:e6:0f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : Sep 27 04:00:00 2022 GMT
        Subject: CN=184422b7-66e6-4fa8-8725-a364b5444f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:b1:c6:cb:60:a8:a7:f4:45:b6:07:96:d8:
                    f9:43:c8:04:91:47:44:b9:e5:c4:fe:c8:37:48:9a:
                    2b:88:bf:c1:b1:6e:00:ad:ac:38:3a:a6:f2:2a:e9:
                    d1:88:7c:a1:70:2b:e6:55:44:05:cb:fc:a9:98:f3:
                    67:b9:c0:de:a1:74:e5:2a:12:81:bb:20:1b:7e:fa:
                    52:01:2b:15:ac:16:80:fb:81:ff:4d:d9:97:f4:71:
                    c3:b9:36:f4:9a:c5:cb:2f:3d:75:f1:dd:32:bb:84:
                    09:78:6f:48:dd:b7:69:ee:75:7b:41:63:ab:76:d9:
                    b8:a5:f5:1e:4e:32:8d:52:0e:23:01:32:ff:43:09:
                    0a:c7:d8:3f:79:f1:b9:9f:3a:06:c5:b9:e1:2c:cf:
                    30:95:ac:d9:7c:cf:4c:ec:cb:6d:d9:73:cd:90:93:
                    1e:dd:e7:e6:ec:ee:a0:f1:24:df:3e:1a:58:f4:d0:
                    1e:d8:b3:ee:6c:77:54:48:9a:86:7c:9b:75:57:64:
                    c1:c1:9c:6d:8d:74:45:fe:dc:ec:87:60:92:40:4b:
                    3a:11:f8:6b:f4:9f:2a:a4:3c:02:d6:9d:04:ee:d9:
                    62:ca:3d:a9:e5:cc:f2:35:7a:b4:e4:ed:09:5a:8e:
                    06:b9:ac:eb:03:42:c2:8e:31:42:67:d6:c3:03:ee:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:88:BF:1E:00:6B:59:CE:2B:08:1B:8A:BA:8C:AD:6D:FB:23:0C:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/969e79a0-361f-3774-b146-9e7850c1493e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:3d:c2:bf:c0:04:7a:93:ba:a2:3b:34:3d:34:5b:96:41:0b:
         e4:a6:93:c5:ed:64:59:f4:1a:c1:a1:81:3e:f2:35:68:f7:0b:
         1c:fa:a4:29:17:51:b2:0a:ba:25:a6:62:12:eb:98:3d:6e:b7:
         41:3c:72:20:df:00:7d:1e:1e:6d:05:2b:3f:40:f8:c3:df:7d:
         8e:ae:fa:f0:c2:3d:d6:67:d7:a0:5e:e0:ea:59:0e:57:ba:d2:
         6e:c3:45:fc:c1:4e:ca:c6:40:27:74:e4:99:11:5a:35:71:cf:
         ed:8f:e7:fb:7c:2e:f5:ee:14:e5:d6:71:0e:74:70:80:8d:b4:
         c6:1b:11:ad:62:7b:ca:22:3d:06:f7:b3:91:99:2a:be:79:51:
         1d:e7:43:fa:71:48:e1:f9:0d:a1:e6:49:87:6d:fa:73:25:e3:
         5c:36:f6:8f:6a:50:f4:ea:c5:8f:28:a7:84:a5:40:bd:03:64:
         32:05:06:2f:d5:9f:ff:15:b8:50:92:95:60:44:c6:bb:7d:ea:
         78:12:00:a3:34:9e:e7:15:54:d0:e3:aa:5e:7f:e4:4e:4e:44:
         e7:c1:0f:46:ca:6c:c7:d8:e6:1d:13:b7:47:29:8d:3c:98:29:
         53:63:eb:74:f0:c3:fe:e9:a3:ae:ac:72:43:c7:f0:58:29:52:
         a2:37:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----