Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/e86c3275-9d1b-3237-837c-c73c9652bbab.roa
File:                     e86c3275-9d1b-3237-837c-c73c9652bbab.roa (raw, json)
Hash identifier:          S8M5lXUJqb5ge9xKjN+u1SyObojmB+fUo9jseK3wiG0=
Subject key identifier:   94:0C:B0:38:E4:7A:D5:28:5F:BE:35:CF:0A:C8:50:DA:16:22:9C:AC
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328576D51CC73C042CFC171D0881F14
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/e86c3275-9d1b-3237-837c-c73c9652bbab.roa
Signing time:             Fri 01 May 2020 13:58:34 +0000
ROA not before:           Fri 01 May 2020 04:00:00 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     47050
IP address blocks:        173.224.84.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:d0:88:1f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: May  1 04:00:00 2020 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=e4bf9710-e91c-427c-a6ed-999b01fbe88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ed:e2:8c:a7:39:35:23:32:cd:c9:af:22:e1:
                    f1:eb:a9:ba:fd:e3:6c:e9:ba:09:c4:42:b7:e8:bf:
                    ba:03:db:8c:34:fb:42:31:03:47:f4:ee:10:9c:96:
                    b6:3e:b4:7d:57:64:68:ea:74:64:8f:6f:1f:ea:89:
                    bb:1a:f2:c9:d9:f2:3a:c9:13:2c:68:fb:de:99:9e:
                    15:fe:c4:5b:f6:e5:c3:8c:3c:98:50:01:c5:d7:3d:
                    71:fe:2b:7c:23:e3:e7:71:ea:c7:70:a9:43:1d:ca:
                    39:7a:7e:03:18:1a:57:3b:4d:04:89:bd:41:fd:63:
                    7b:61:c9:97:98:7c:58:df:b0:fd:76:dc:03:08:91:
                    1d:83:07:58:43:e9:b4:88:30:8e:8d:0e:5e:7d:de:
                    a9:f1:53:31:81:2a:fe:bc:50:a8:cd:80:5e:83:f8:
                    81:cd:12:4e:81:5a:87:92:b5:67:df:aa:8d:44:29:
                    a3:37:41:90:b1:24:56:f6:2d:b3:2b:5e:fb:21:07:
                    72:fb:54:46:69:39:23:ca:1f:a0:e1:e9:b9:70:95:
                    c0:ff:42:4d:f7:e4:e6:21:11:e0:37:62:72:01:35:
                    3d:6e:df:c1:64:52:24:3a:2e:b0:6c:c1:e1:ae:92:
                    6f:af:d1:46:70:aa:40:f5:db:3a:ab:4b:1e:0d:6f:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0C:B0:38:E4:7A:D5:28:5F:BE:35:CF:0A:C8:50:DA:16:22:9C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/e86c3275-9d1b-3237-837c-c73c9652bbab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:15:1b:a5:a5:64:f9:e4:2a:6f:62:d6:85:27:3c:8b:78:40:
         19:77:58:50:d4:3a:c9:28:8a:29:a2:01:e9:31:66:56:86:18:
         c0:ca:61:2e:22:4c:1a:c4:b5:ea:f2:e5:ef:a0:72:0e:de:08:
         78:67:7a:83:42:1a:5f:f0:b1:9f:7c:1e:e5:65:b5:be:a6:35:
         a2:ae:ec:8c:d5:3b:bb:d0:8e:cd:ef:49:1c:79:ab:eb:62:0a:
         55:ea:86:e7:86:b3:75:80:0e:a5:96:09:88:53:43:aa:a5:c5:
         af:a7:0b:4f:f2:14:69:9c:25:f8:17:c9:87:a5:35:8f:06:18:
         61:13:85:5f:97:5b:28:db:39:97:10:cd:de:0f:45:5f:ba:8f:
         fd:cd:5a:1a:ab:0b:63:2d:7d:68:67:50:a1:0a:e8:2d:77:f4:
         3e:3e:d2:05:88:28:89:9a:b7:af:b2:26:08:17:43:2b:a9:eb:
         2a:70:60:4f:cc:f4:23:c3:04:7d:f5:e8:83:c0:cf:f2:63:67:
         59:4c:65:9b:e0:ea:ca:84:f7:13:02:59:c9:04:90:aa:db:e1:
         07:18:e8:3e:a0:a2:bf:d9:21:61:5d:bb:ed:d7:df:6d:ae:b5:
         01:a8:89:2f:0f:d7:42:cb:72:c0:a0:e7:27:26:71:08:e0:4a:
         c6:27:4c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----