Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/90f32c40-9246-34b6-a5e6-c3a40acac0cc.roa
File:                     90f32c40-9246-34b6-a5e6-c3a40acac0cc.roa (raw, json)
Hash identifier:          0qx591sUUotxjicGkfxVl8QZIK5vk06Ai1k2zzkYnIQ=
Subject key identifier:   06:F9:C7:F4:23:A7:9C:30:DF:FC:B6:02:5A:09:8D:1D:54:F5:8B:E0
Certificate issuer:       /CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732EAFE061
Authority key identifier: 09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/90f32c40-9246-34b6-a5e6-c3a40acac0cc.roa
Signing time:             Wed 08 Jul 2020 13:49:04 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     14155
IP address blocks:        192.208.160.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2e:af:e0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82e3f50-c42b-4af6-9e20-1e91adc1402f
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=6b909c7b-684b-4b03-939f-f34c36d19584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:46:0f:d1:49:a2:33:24:f7:8c:af:7b:d6:f2:
                    d7:91:b2:35:a0:27:85:2c:ea:8b:64:94:e6:02:bb:
                    39:8d:3e:50:88:36:6b:a4:9b:37:7e:b9:a5:cf:0f:
                    90:c8:33:40:6c:f4:45:7b:55:5c:cc:a4:56:5c:11:
                    4e:c5:af:2e:6b:4b:77:d9:8e:3a:de:40:f3:ff:7c:
                    eb:34:d2:45:f0:f3:6b:15:95:53:74:3b:19:6e:87:
                    64:e8:bb:b4:77:a0:25:99:1c:b1:aa:3a:32:93:31:
                    27:1f:3c:c4:88:e8:f1:e0:47:42:06:96:99:2c:7b:
                    7f:11:92:01:60:95:37:12:44:0e:21:ec:75:b9:17:
                    90:d1:27:1b:31:5f:d6:48:1d:c9:60:a9:0d:5a:28:
                    df:06:7a:32:ce:0f:48:96:ce:ef:cf:d5:dc:53:ef:
                    a9:5d:e1:8c:bd:85:82:bc:73:d0:11:63:1d:ca:2c:
                    f8:ad:12:89:2b:35:0c:75:68:10:a0:f6:10:37:74:
                    30:fd:33:fb:57:96:9b:52:0b:16:12:1f:82:fd:c5:
                    84:3c:1a:9f:4b:97:ce:e4:c1:38:0c:ce:6b:8b:79:
                    1d:db:2b:74:a0:b0:df:09:ac:b6:b9:0d:1c:fa:a7:
                    60:13:05:0f:ed:27:87:08:8e:13:47:64:86:4a:72:
                    92:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F9:C7:F4:23:A7:9C:30:DF:FC:B6:02:5A:09:8D:1D:54:F5:8B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/90f32c40-9246-34b6-a5e6-c3a40acac0cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f/e82e3f50-c42b-4af6-9e20-1e91adc1402f.crl

            X509v3 Authority Key Identifier:
                keyid:09:75:7D:13:70:06:AD:89:7C:73:85:AB:E5:08:33:9D:A8:1F:FF:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e82e3f50-c42b-4af6-9e20-1e91adc1402f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:93:d8:f1:fd:0e:f2:48:41:5d:3a:e9:be:7c:9a:df:ad:b7:
         00:84:ee:e4:26:b9:70:1b:24:02:0c:5d:a5:98:38:ab:60:5c:
         6b:49:19:9f:51:67:6c:b3:f4:29:20:d8:50:0c:9f:a4:e9:74:
         0b:c6:ae:28:90:fb:ac:a8:29:c6:79:51:b9:8e:3b:f7:dd:5c:
         e9:cf:a5:7c:d1:d7:c4:c4:bf:ea:19:f0:e3:46:2a:d4:fb:3e:
         49:f9:0f:4d:0b:f0:31:c8:be:ba:70:8b:14:6d:9c:6a:7b:fa:
         26:f4:49:94:8a:b6:5d:fe:42:4e:b4:3b:04:24:ca:11:c2:fb:
         af:89:04:77:7f:21:97:0f:50:6d:6b:97:e9:85:d6:f3:55:15:
         5e:b5:92:23:dd:d9:fc:4a:a6:d4:f2:30:99:31:0e:57:aa:21:
         83:1c:14:32:58:91:63:86:b5:f5:b2:c4:f8:7d:ab:a5:c7:3a:
         34:4b:bb:dc:2c:d1:e3:34:3b:a7:25:60:94:fe:fa:9b:dc:fd:
         b4:d5:5c:a2:68:78:bb:54:ff:aa:44:19:48:6e:8f:70:df:45:
         a0:85:cc:13:e8:2c:2f:6c:6e:67:54:9e:83:88:44:65:be:6b:
         5a:3f:f3:14:05:c0:d9:cb:51:dd:af:35:20:75:72:ba:40:3e:
         93:68:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----