Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/bdfd6323-3e62-3163-9320-17dc408bed03.roa
File:                     bdfd6323-3e62-3163-9320-17dc408bed03.roa (raw, json)
Hash identifier:          Vu9RXO2lG16Ufu+XRiDIEyS3dYXsSbjqojT3R7g/TyA=
Subject key identifier:   25:11:B5:EA:A2:14:9D:2E:36:F4:0A:F9:64:DB:1D:4D:8E:40:80:A7
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1740A169D37
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/bdfd6323-3e62-3163-9320-17dc408bed03.roa
Signing time:             Mon 10 Aug 2020 04:00:00 +0000
ROA not before:           Mon 10 Aug 2020 04:00:00 +0000
ROA not after:            Wed 23 Nov 2022 05:00:00 +0000
asID:                     36352
IP address blocks:        192.210.128.0/17 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:0a:16:9d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Aug 10 04:00:00 2020 GMT
            Not After : Nov 23 05:00:00 2022 GMT
        Subject: CN=ec2c8a01-cb64-40b0-a4c5-93c5a35bdbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:47:1f:e4:87:5b:90:77:f7:49:c2:04:51:
                    5c:aa:a5:3b:d9:4c:04:dd:9b:43:e1:15:1e:47:b5:
                    c8:70:0d:df:df:eb:fe:e5:74:3e:47:a6:db:3a:78:
                    ea:89:5d:1f:66:30:4c:16:9b:81:22:79:a4:c9:29:
                    5e:fa:0b:a4:62:b3:39:c0:7f:eb:df:a7:2b:db:0b:
                    ed:9e:c6:c2:9b:c0:26:28:9b:cd:26:67:0e:79:eb:
                    5a:6c:93:e9:e7:de:63:bb:e1:42:e6:cb:f1:c6:6f:
                    1e:84:80:dc:bc:56:37:5c:0b:60:e5:34:9e:95:af:
                    3b:aa:34:b3:34:7c:da:a7:e6:98:88:74:ec:7b:06:
                    d6:10:83:9b:ac:08:44:3d:ad:16:10:76:88:33:b2:
                    fa:83:8a:3f:a1:a1:36:69:ac:9f:fd:89:0e:07:2b:
                    8f:f6:39:b6:3f:92:e8:1e:48:9b:db:2a:87:22:76:
                    ed:17:1a:99:15:03:39:73:69:fa:0b:af:13:6e:63:
                    87:42:64:3c:00:61:ae:12:f5:d7:db:22:19:b7:f5:
                    75:15:de:69:62:08:ca:80:97:d9:0d:f0:13:73:f4:
                    6e:0d:3b:d2:a9:8f:64:17:e0:ec:83:1b:43:6a:0b:
                    d3:15:ae:bb:e0:d7:1c:4a:8d:d1:b0:b2:46:64:03:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:11:B5:EA:A2:14:9D:2E:36:F4:0A:F9:64:DB:1D:4D:8E:40:80:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/bdfd6323-3e62-3163-9320-17dc408bed03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:1a:3e:79:23:07:f9:5f:c7:8b:ba:62:98:57:55:50:c3:c7:
         84:8d:0c:c9:45:ef:59:30:c5:f6:40:3a:37:9e:24:a1:0f:93:
         e5:9c:9f:b6:78:96:d7:d8:d2:4d:c9:32:05:17:d4:b3:5b:d2:
         92:ca:a4:2e:50:2d:7c:2c:bb:5e:22:df:60:6f:56:bc:e1:da:
         af:a4:27:57:56:c8:2c:cd:d4:d2:13:1e:ff:13:6e:e4:48:7e:
         86:a5:a1:8f:d0:70:f6:43:42:eb:d0:31:2a:78:60:09:61:0e:
         b1:45:4b:88:67:e3:a3:8c:52:3b:e7:97:e4:9c:f3:6a:09:ff:
         e0:63:07:dc:d2:07:50:21:54:8c:64:96:f9:1f:4c:2f:ee:29:
         90:38:c9:f7:86:e8:d2:aa:d7:32:61:b8:89:ea:aa:8c:a6:0e:
         00:5a:2b:53:21:57:8c:5e:10:67:ad:c2:a5:00:39:ab:1d:c8:
         03:9b:59:a8:76:86:a3:99:b8:16:b6:8d:ef:2a:e3:75:81:56:
         8d:b7:0a:d8:1a:5d:71:37:94:f3:14:26:f2:ef:cf:9f:53:92:
         f0:2a:34:68:51:d0:43:e1:9c:20:9a:9f:d1:4a:ca:95:6c:9e:
         20:71:c0:72:8c:e0:55:c9:7e:ea:37:ea:35:70:99:da:b0:ee:
         cd:d3:20:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----