Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/f9b0dad5-6a4e-337e-9216-f15857205cad.roa
File:                     f9b0dad5-6a4e-337e-9216-f15857205cad.roa (raw, json)
Hash identifier:          BAYo7DVwSwlmoH36jEuqsKx4XikvUttd6ffNxuLCGEM=
Subject key identifier:   5A:47:38:F4:2F:68:41:AE:75:7B:52:EC:D3:B6:D5:16:78:68:80:01
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328576D51CC73C042CFC171D08A3949
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/f9b0dad5-6a4e-337e-9216-f15857205cad.roa
Signing time:             Fri 01 May 2020 14:00:51 +0000
ROA not before:           Fri 01 May 2020 04:00:00 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     47050
IP address blocks:        173.224.87.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:d0:8a:39:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: May  1 04:00:00 2020 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=6190448d-12aa-4ff2-8175-f03e7f85f612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:45:0c:e3:5b:9a:20:0d:66:9c:c9:c9:ee:4a:
                    2b:5c:ad:24:4a:d1:db:fd:02:31:09:b6:34:5b:18:
                    38:0e:43:3f:93:20:87:95:ee:59:6d:70:64:62:7f:
                    bd:25:4c:26:db:bd:21:b3:25:04:c1:cd:15:aa:1e:
                    f4:1e:50:b5:f3:e4:55:54:65:75:db:32:9e:08:d8:
                    04:41:5c:ca:88:a6:6a:18:4c:94:ea:f1:03:1d:eb:
                    67:b1:ea:1e:a3:7e:4d:95:e8:47:90:b1:89:3c:57:
                    c0:c4:4d:ab:39:a6:d0:ce:7b:80:3f:2b:bc:bd:07:
                    b2:bc:67:b6:29:4f:18:f7:2b:7c:8b:72:80:33:3b:
                    26:69:7a:7d:0d:09:d8:fe:30:0d:f8:b5:cd:d8:bd:
                    91:3d:da:32:03:a0:d2:11:7d:24:6a:1a:fc:7c:1b:
                    60:3d:c3:79:34:03:97:79:7c:52:61:a0:34:7d:3c:
                    2e:2e:a6:b3:08:37:95:60:02:cd:b9:13:68:8b:7a:
                    50:e6:ea:ad:9b:9c:7d:bd:c7:1f:f6:f5:d6:3b:e6:
                    00:29:22:29:a6:d9:e3:55:4b:62:6a:05:11:85:ed:
                    35:47:e4:fc:53:21:5b:d0:4e:8c:04:5b:36:1e:82:
                    2f:85:97:08:86:64:78:e5:01:09:bb:95:64:86:cb:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:47:38:F4:2F:68:41:AE:75:7B:52:EC:D3:B6:D5:16:78:68:80:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/f9b0dad5-6a4e-337e-9216-f15857205cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ea:2c:00:4e:72:15:e6:8c:c8:46:9f:43:80:37:ab:53:4d:
         e4:4e:11:31:77:28:97:7d:46:32:e9:fa:c8:8f:e7:0c:c5:14:
         61:6e:d0:63:c3:04:d6:7c:a9:81:f2:d2:e4:a1:c5:9e:b5:7b:
         07:63:27:45:f7:ce:c1:4b:b8:d1:b9:0f:ce:76:ee:ca:11:1b:
         7b:52:d6:ce:74:96:33:a8:f1:5a:73:78:6b:78:2d:4d:dd:58:
         13:3a:f1:ee:96:ec:f9:e6:5d:1d:56:02:4a:b4:31:f3:ca:f0:
         6e:3c:5f:2d:06:4c:89:0e:7d:4d:8c:fe:cf:59:9c:7d:7d:86:
         87:a4:dc:6e:4d:de:ca:1a:7e:43:3c:c4:2c:e0:7a:6e:06:48:
         13:a1:80:b7:f6:a1:71:3c:2a:2f:6d:05:53:98:7e:72:ad:a2:
         2b:7e:a4:61:c3:18:ef:37:70:bd:a3:f1:6d:df:19:ae:2c:fd:
         72:c9:3d:32:33:b2:52:bb:2f:dd:d6:dc:5f:12:68:db:e9:ae:
         9b:b5:21:00:bb:4a:f3:10:ec:19:9c:d1:b9:58:cc:d9:cb:cd:
         17:71:5a:44:b1:59:78:9c:b3:2c:b6:78:48:8c:11:7d:af:17:
         22:40:b1:39:3c:cb:d6:00:32:0f:4c:82:c9:c2:54:75:92:9d:
         17:f2:c3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----