Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4ef177fc-2e72-36f3-9136-235f75bf9dc6.roa
File:                     4ef177fc-2e72-36f3-9136-235f75bf9dc6.roa (raw, json)
Hash identifier:          8/Mw90MGTZzEx3AnTA8Lx9gPR27lkYT/aFmPNHjYSBk=
Subject key identifier:   57:CC:E7:BA:3A:92:27:6C:B3:53:E9:69:6F:E2:CF:79:F2:D7:06:66
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328576D51CC73C042CFC171AF360189
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4ef177fc-2e72-36f3-9136-235f75bf9dc6.roa
Signing time:             Sat 25 Apr 2020 02:41:24 +0000
ROA not before:           Thu 10 Jan 2019 05:00:00 +0000
ROA not after:            Thu 28 Jul 2022 04:00:00 +0000
asID:                     27487
IP address blocks:        206.128.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:af:36:01:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Jul 28 04:00:00 2022 GMT
        Subject: CN=74924e0a-53be-40a1-b8d3-bda0023eb56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:73:2b:4a:7e:d5:bc:3c:86:88:27:97:fe:
                    9e:12:6c:8e:fa:f8:7d:72:d6:16:45:40:d2:fb:f5:
                    12:84:db:e0:56:d3:e9:2e:41:e2:bf:c5:5d:f4:76:
                    fd:fa:24:ac:16:df:84:cd:d3:89:84:77:6d:8f:a5:
                    87:65:f5:8f:20:f6:ba:2f:c7:48:1c:17:2f:15:2e:
                    ae:50:2f:3f:5b:e2:3d:6d:b8:68:40:e2:9a:63:6e:
                    33:3a:07:91:96:6c:c9:81:bb:1b:22:38:0f:08:7a:
                    8c:c5:71:ae:7d:a9:8f:7c:7b:f9:a2:d4:95:45:59:
                    d0:3d:a4:ad:22:7a:fa:fc:bd:58:74:c8:84:6c:ed:
                    17:e3:14:80:47:cc:0a:c1:02:dd:b9:ec:6b:dc:35:
                    df:09:20:d8:3d:95:bc:69:93:f7:ea:f2:8e:7a:cd:
                    97:0b:96:6e:5c:36:08:d9:0e:e2:06:32:53:7f:52:
                    bb:64:6b:f4:f0:f3:86:d7:80:42:54:6a:ea:67:d1:
                    05:8b:c3:45:9c:9f:aa:7e:45:6a:a8:ce:71:e0:1a:
                    ed:67:12:d0:e4:80:cb:a3:3c:5d:27:6d:89:a4:ad:
                    ed:af:0d:95:09:a9:b0:1a:c5:44:1d:15:4d:2a:5b:
                    79:3a:16:78:71:7b:ba:c3:c2:3e:7b:18:19:2c:f6:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CC:E7:BA:3A:92:27:6C:B3:53:E9:69:6F:E2:CF:79:F2:D7:06:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4ef177fc-2e72-36f3-9136-235f75bf9dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.128.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:6c:55:b9:08:74:eb:11:18:c5:01:7a:03:b6:e7:78:47:
         62:11:6e:60:07:13:3f:19:f3:e7:ba:2f:91:c0:92:ae:59:11:
         a1:e0:57:14:86:94:76:da:2b:8a:09:b4:60:93:7a:5e:e1:9d:
         e1:13:a5:e9:9a:41:06:5e:6a:23:09:82:6e:8e:4e:fe:6d:0e:
         7e:e8:e2:0b:3a:a6:ca:d1:44:8f:6d:b1:52:2f:0e:75:f4:a5:
         1f:d2:16:d4:ec:3c:29:38:92:95:9a:d7:58:c3:56:43:56:5e:
         82:42:8d:d6:48:cf:f0:ed:2f:b1:95:72:71:5f:70:09:f5:90:
         13:24:de:82:dd:1f:0f:b7:f4:5e:7f:f5:53:8e:74:e1:24:20:
         85:40:97:9e:55:98:6d:eb:f1:dc:7a:0c:25:58:79:9c:dc:f0:
         c0:70:ea:fd:4c:97:ad:19:a8:20:29:5a:4f:f9:3f:23:a4:9b:
         43:70:88:09:cd:b5:fd:28:30:38:bf:50:d3:95:8f:26:9c:97:
         b1:5c:0d:f5:c4:2e:75:b6:c6:5f:bd:cd:41:12:7d:e7:2d:c6:
         52:f0:20:c9:9c:6b:ba:d0:c7:24:79:f7:fd:ce:88:92:fd:22:
         a1:ef:6d:ef:4a:73:17:8e:73:f8:e1:7f:31:e3:5f:71:81:9a:
         c6:05:5f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----