Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/b0553f6f-95a7-3315-aa24-9075715c1d42.roa
File:                     b0553f6f-95a7-3315-aa24-9075715c1d42.roa (raw, json)
Hash identifier:          b2pvGmK6sQWqEBXDf2wG/PsC2bfIAqT8DO0Tj/UqB90=
Subject key identifier:   2C:D9:3B:25:D5:19:AD:04:01:EF:A7:69:2E:FB:61:FB:FC:44:8E:0C
Certificate issuer:       /CN=a4994aff-79e3-4800-875a-f4a951d7af28
Certificate serial:       010D0C9F43285837FA26874EDBC9E57A21946F00
Authority key identifier: 4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/b0553f6f-95a7-3315-aa24-9075715c1d42.roa
Signing time:             Thu 14 May 2020 04:00:00 +0000
ROA not before:           Thu 14 May 2020 04:00:00 +0000
ROA not after:            Mon 20 Feb 2023 05:00:00 +0000
asID:                     61317
IP address blocks:        199.68.216.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:fa:26:87:4e:db:c9:e5:7a:21:94:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4994aff-79e3-4800-875a-f4a951d7af28
        Validity
            Not Before: May 14 04:00:00 2020 GMT
            Not After : Feb 20 05:00:00 2023 GMT
        Subject: CN=d3ed6cd0-04a1-4eb5-8b9d-53e516a22223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5e:b6:cd:f4:ce:04:48:e3:9a:58:69:78:df:
                    03:9f:78:a2:1e:40:18:fc:73:1e:de:c1:da:8b:f2:
                    3d:22:38:af:39:12:4d:76:37:b5:b6:e6:41:57:7c:
                    e6:17:bd:3f:da:30:d3:f5:2f:ac:37:3a:89:46:25:
                    a6:da:51:37:72:bf:e4:0b:8d:00:66:8f:09:c2:40:
                    ea:1e:e6:e6:3f:75:7a:51:bb:29:0c:1f:3a:47:ed:
                    0d:1e:2b:05:21:49:0d:f6:0b:95:b5:2c:b9:a9:ae:
                    49:08:c2:96:8e:92:17:5e:e9:7b:51:68:97:14:7a:
                    a4:8d:c9:37:e4:13:fe:58:1e:ba:c8:df:12:d7:52:
                    fa:fb:ae:1b:7b:b5:42:d1:fa:64:70:31:e7:0b:da:
                    8a:99:79:8d:2b:1c:7c:15:18:6c:c7:fd:a6:ae:c9:
                    81:5a:23:2f:b8:a9:63:c9:63:0e:86:38:14:c0:ef:
                    4d:b7:55:87:26:9a:2c:94:fc:7a:73:be:40:3e:2d:
                    ef:35:88:61:c4:aa:99:8c:9b:1d:0b:cc:87:2f:71:
                    9e:07:f9:a8:3f:01:48:44:0f:d6:59:04:b7:98:4d:
                    23:83:ed:d5:d1:44:8f:ed:e8:b6:6d:3d:6e:36:98:
                    bd:e5:a9:8c:bd:85:f4:a3:c7:e9:19:22:47:7c:e8:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D9:3B:25:D5:19:AD:04:01:EF:A7:69:2E:FB:61:FB:FC:44:8E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/b0553f6f-95a7-3315-aa24-9075715c1d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.crl

            X509v3 Authority Key Identifier:
                keyid:4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:91:f1:bb:5d:81:3f:80:57:72:86:cc:54:3b:10:b0:22:a3:
         d0:48:85:84:d0:eb:1f:8f:c6:58:00:7c:c0:c7:8f:a9:49:9f:
         c9:5b:0a:35:2b:d7:6f:a5:dd:c1:69:ab:a2:17:ef:ce:c8:8c:
         c7:cd:63:56:30:35:e2:1b:14:51:76:75:e9:20:b6:56:39:6d:
         16:1b:5d:e8:cb:c3:7d:cd:ff:ed:0f:78:51:5d:fd:b3:34:86:
         dd:01:c3:57:a8:f3:b3:7d:7b:85:c2:a1:ed:6f:ca:09:14:1f:
         34:de:7a:a6:85:fd:75:f9:99:c6:a7:3a:ce:54:9e:23:cf:ae:
         cd:17:59:39:f6:db:80:5e:e4:51:fb:ad:16:c9:36:d6:65:10:
         7d:6e:0a:ad:98:82:ab:f8:1b:16:c7:b9:9e:dd:60:d1:94:8b:
         05:39:7b:21:d6:d8:e4:3f:41:8b:b2:be:dc:ee:1a:21:cc:7a:
         40:6d:ae:83:1c:24:bc:9e:c3:fd:68:68:f8:94:a8:22:23:66:
         20:42:36:b6:49:d2:2d:2b:93:15:9f:ab:85:d7:55:71:28:d0:
         cb:02:3c:a0:c1:9c:4f:d1:69:93:3b:07:84:02:6d:8d:57:bb:
         78:23:7d:6b:ce:d7:57:4f:c7:73:0c:41:8c:f0:31:85:37:a8:
         a5:48:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----