Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/fbd66c7c-cad1-3058-93bd-a04e5de8bea7.roa
File:                     fbd66c7c-cad1-3058-93bd-a04e5de8bea7.roa (raw, json)
Hash identifier:          h6i7CpbvxTZvlfdGqG8EKtXOw5Zfiqesw9pfSpw3OFA=
Subject key identifier:   74:32:C6:FA:4B:94:DC:6C:E9:20:ED:7B:98:7C:63:28:EE:51:63:FE
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328576D51CC73C042CFC171D08C4A7E
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/fbd66c7c-cad1-3058-93bd-a04e5de8bea7.roa
Signing time:             Fri 01 May 2020 14:03:07 +0000
ROA not before:           Fri 01 May 2020 04:00:00 +0000
ROA not after:            Thu 04 Aug 2022 04:00:00 +0000
asID:                     47050
IP address blocks:        173.224.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:d0:8c:4a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: May  1 04:00:00 2020 GMT
            Not After : Aug  4 04:00:00 2022 GMT
        Subject: CN=011c0311-6f39-4ef2-bb45-7833cfbe57ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:d4:58:b8:dd:fa:ec:00:98:64:3d:f4:93:
                    49:0f:47:6a:05:01:38:0f:a4:42:e7:1d:d4:1b:39:
                    65:77:4a:be:db:e8:f4:9f:ad:41:12:48:47:5c:af:
                    75:64:3d:08:aa:f8:30:29:4b:90:b4:a9:cb:2d:53:
                    2a:a7:f0:f5:46:b8:2d:e9:84:b2:00:15:aa:b0:39:
                    4e:b9:d2:04:12:bb:83:6e:53:bc:68:47:f9:b3:98:
                    05:eb:ca:84:e0:a1:55:fd:3e:43:3d:d9:54:0b:2f:
                    00:7a:49:fe:7b:6e:60:5f:dc:c7:e4:a1:6f:59:d0:
                    57:08:72:e0:8d:24:a5:ba:7f:ba:2c:83:9c:c3:4c:
                    ae:51:6b:20:53:4b:24:c3:66:90:5f:c0:78:f9:7a:
                    74:f4:0e:d2:2b:a7:60:10:9a:9d:e2:d6:d9:1c:11:
                    3f:f4:6c:25:4f:a8:65:ea:6d:ad:ae:d9:74:39:6d:
                    4d:a9:fd:36:c1:ba:a2:f0:fd:a1:3d:f4:12:bd:58:
                    6e:52:a5:bd:3c:c2:a2:fa:40:c3:94:be:8a:d1:30:
                    36:8d:6f:87:cb:55:8f:85:07:1e:2f:ff:ec:a2:f5:
                    14:7f:99:64:8a:66:21:21:58:ad:de:e7:ac:e1:0e:
                    53:ea:26:fd:01:bc:16:95:e3:cd:2e:6c:14:6e:d9:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:32:C6:FA:4B:94:DC:6C:E9:20:ED:7B:98:7C:63:28:EE:51:63:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/fbd66c7c-cad1-3058-93bd-a04e5de8bea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:15:66:a4:17:8f:b1:9c:1d:c8:cc:37:ae:eb:ed:ae:8a:bb:
         51:9d:e2:c7:3b:d0:4a:8a:d4:ec:b6:41:6c:6f:c3:9c:cd:03:
         0a:88:62:28:05:22:fd:2e:a6:10:c0:3d:10:d1:d5:a5:d4:e9:
         25:16:f6:2a:29:65:88:f1:b7:95:fd:0e:5b:f8:c7:a3:b3:e4:
         29:04:af:57:69:c6:3b:55:81:c0:8c:c9:f4:cf:f3:17:4e:18:
         85:89:6b:8b:2e:1b:05:0c:cd:7d:7b:ba:0a:c5:f2:9e:28:cc:
         21:17:84:86:74:7f:aa:02:57:b5:54:2d:e9:ed:87:34:cd:75:
         93:88:31:a5:40:12:f5:77:3a:1c:84:59:26:da:54:59:6c:39:
         32:29:1c:37:c6:46:f2:bf:9a:65:04:38:e8:fa:47:20:a2:e8:
         eb:df:64:f1:a1:32:f4:34:79:87:66:13:47:8d:fb:fc:a8:0b:
         9f:43:3f:86:9c:d5:07:e4:74:00:03:bf:a6:1d:f8:25:49:e4:
         76:17:a5:aa:ec:9b:7f:39:24:13:2e:83:8d:d5:b0:f0:f6:e0:
         9d:39:f2:30:6e:3b:59:c5:23:dd:08:90:86:c6:52:b8:f8:7e:
         26:f2:b3:7d:46:ff:55:54:02:2d:7b:5f:9a:41:16:ce:57:c8:
         0c:77:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----