Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/c7172fba-a944-3e73-b70c-c43784ca00a9.roa
File:                     c7172fba-a944-3e73-b70c-c43784ca00a9.roa (raw, json)
Hash identifier:          6uLEIOn1LslrDzZ4SQJHA2XMGBkcEMHhfrn3gHvizfM=
Subject key identifier:   EB:8C:D7:4B:4C:07:62:C7:88:D1:79:98:78:16:EF:97:B1:43:06:54
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F4328583CFF36A60D6E97583C170BA900
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/c7172fba-a944-3e73-b70c-c43784ca00a9.roa
Signing time:             Fri 14 Aug 2020 04:00:00 +0000
ROA not before:           Fri 14 Aug 2020 04:00:00 +0000
ROA not after:            Sat 25 May 2024 04:00:00 +0000
asID:                     54817
IP address blocks:        172.110.188.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ff:36:a6:0d:6e:97:58:3c:17:0b:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Aug 14 04:00:00 2020 GMT
            Not After : May 25 04:00:00 2024 GMT
        Subject: CN=8ad4f044-ebc5-4893-bfbb-d55194bbf353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:00:ce:41:5a:e7:59:56:d3:99:c8:e7:0b:
                    16:ef:d8:98:3b:b6:f4:ce:e4:02:3f:68:d9:f8:21:
                    b8:b0:5c:52:d5:a0:bd:c3:28:4e:25:68:ce:5a:5f:
                    6f:01:63:96:bb:44:cb:9a:fc:bd:cb:1f:08:41:12:
                    6f:37:98:a5:6a:1e:e2:99:45:57:1a:4c:70:60:ef:
                    e6:12:37:dd:7b:0a:16:32:ee:c6:fa:92:25:cc:2b:
                    cf:eb:c7:cc:fb:ea:3d:2a:78:5f:e8:08:aa:28:96:
                    d7:37:2a:ae:e7:2a:31:6a:33:2b:2d:c1:46:11:93:
                    d2:13:f7:c1:7f:0d:25:fe:10:1e:4c:49:13:5c:9b:
                    ed:76:a1:4f:50:49:07:8a:db:8c:e4:fd:a2:06:ad:
                    95:1e:36:b0:ef:98:02:dc:c2:b7:12:d7:90:f4:67:
                    f3:b9:9c:06:9b:5c:a0:72:ad:f2:6e:7d:f7:4f:7f:
                    94:a9:0c:07:3b:1e:e8:6b:6d:27:fa:90:6d:e5:c4:
                    95:4e:5c:9f:36:88:e2:d6:00:b7:18:2c:44:6a:96:
                    6b:72:13:a4:c3:ab:d4:1b:9b:12:0f:65:00:03:ec:
                    e0:56:82:3b:91:22:4e:fb:dd:fe:c6:3f:9f:6c:4e:
                    97:b4:03:1d:cd:68:58:48:73:c8:45:96:50:f7:e7:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8C:D7:4B:4C:07:62:C7:88:D1:79:98:78:16:EF:97:B1:43:06:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/c7172fba-a944-3e73-b70c-c43784ca00a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7d:df:52:8e:c2:03:49:c8:e7:32:18:d1:e3:08:7f:ab:44:
         d5:46:49:90:1f:c5:8f:24:59:d7:83:34:8f:16:49:02:c2:88:
         73:81:cb:05:8d:35:68:8b:f4:ff:04:1b:72:3d:a0:46:21:15:
         14:b3:52:d7:e3:76:0b:04:21:d5:06:7c:a5:70:de:dc:97:64:
         5a:84:60:6d:80:dd:c9:40:f7:86:37:66:db:d4:2e:8f:97:de:
         21:82:d6:f3:17:32:b2:ed:86:55:d4:f7:5d:94:81:d9:e5:8d:
         cc:19:dc:fc:9a:7d:08:47:14:a7:ca:60:6c:49:29:2a:e0:81:
         ac:a4:ff:a3:45:c3:0f:a7:e5:95:3c:24:f9:bf:41:4b:00:80:
         c6:85:05:3e:b5:9f:6e:43:69:ae:0c:de:a3:7a:0f:3d:2f:75:
         33:b7:2c:05:a1:38:18:20:94:95:49:08:35:02:cd:6b:87:cb:
         80:db:cb:44:72:34:a1:e3:2f:70:fc:7e:53:df:bd:a3:c8:8a:
         c1:e1:3d:e5:1c:ae:78:b5:94:f1:6e:f5:90:99:e1:e3:3c:3a:
         56:97:e5:02:cf:3b:d5:db:d4:65:99:0c:07:07:86:bd:7e:2d:
         6d:61:e8:78:f8:8a:ea:9a:7d:de:7e:22:ae:d6:e3:bc:44:37:
         e6:a6:a5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----