Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8f747e8a-e594-3c58-b08a-546282a9367a.roa
File:                     8f747e8a-e594-3c58-b08a-546282a9367a.roa (raw, json)
Hash identifier:          qu4Ko5hV/8vvl3DnZYajVe+BeCQ8i3fKWzKLKHO5X2Y=
Subject key identifier:   FE:90:74:65:F5:47:43:89:D3:0E:A4:2C:61:3C:27:0F:27:42:24:24
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285837992745AF82B447A2D8E8D600
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8f747e8a-e594-3c58-b08a-546282a9367a.roa
Signing time:             Thu 10 Jan 2019 05:00:00 +0000
ROA not before:           Thu 10 Jan 2019 05:00:00 +0000
ROA not after:            Mon 16 Jan 2023 05:00:00 +0000
asID:                     209
IP address blocks:        63.233.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:99:27:45:af:82:b4:47:a2:d8:e8:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Jan 16 05:00:00 2023 GMT
        Subject: CN=8d36ca78-937d-4722-b31e-f96a10e91826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:37:d6:67:58:62:8b:8d:fb:80:c0:2f:af:24:
                    27:f8:70:19:e0:24:58:b3:ba:96:17:9f:c9:04:e0:
                    91:3c:0e:a9:04:f0:d4:22:a1:32:a8:a6:c7:90:a9:
                    03:69:07:ae:83:5c:3e:02:be:8f:b9:d8:e1:50:0a:
                    26:47:80:a7:ba:c4:5d:db:52:61:61:0f:71:91:31:
                    4d:50:cd:b2:88:cd:43:a4:e2:4d:a9:71:8b:4d:20:
                    60:1c:a3:87:19:1d:2c:34:ea:ea:bc:ae:aa:06:01:
                    a9:df:27:17:15:c4:45:05:56:cf:b4:b6:28:aa:16:
                    a9:02:a3:d4:51:ee:9a:b2:37:b9:ef:a7:57:67:44:
                    5e:ed:1e:5e:cf:7c:63:b0:db:63:17:0f:12:fd:1e:
                    75:a3:78:b6:43:c3:05:02:54:9d:b3:fd:48:e9:95:
                    90:90:6b:4d:e0:a6:8a:8c:a5:bc:82:c0:eb:89:e8:
                    dd:4f:86:3f:1e:ae:8c:9f:2c:f5:29:a9:2d:dc:10:
                    ec:8e:e4:83:95:18:79:b9:e2:08:ed:7a:d6:ed:93:
                    21:3c:e5:dd:e7:1c:db:1e:cc:08:37:85:4e:12:22:
                    49:87:50:11:ce:bc:cb:25:5c:53:e6:48:95:7d:db:
                    4b:74:0d:a6:4a:8b:b5:93:eb:dc:1e:b8:1c:bc:64:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:90:74:65:F5:47:43:89:D3:0E:A4:2C:61:3C:27:0F:27:42:24:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8f747e8a-e594-3c58-b08a-546282a9367a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.233.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:de:2d:cd:32:38:56:c9:c5:b3:1b:47:96:a8:0e:7c:3b:f3:
         90:30:9c:f8:51:05:39:90:48:a2:5f:d6:9a:9d:c0:da:c5:52:
         ec:b3:ea:29:7a:46:5a:94:71:d6:1d:82:33:f0:04:26:3d:59:
         84:0f:17:d1:0e:b1:70:96:04:50:08:f2:b6:df:52:f2:e6:d2:
         06:3f:09:57:af:3d:66:92:17:27:0b:a8:95:44:e3:9f:24:a1:
         ec:27:2e:7b:88:05:6f:2c:0d:d9:20:76:d5:3e:60:28:63:12:
         b8:28:a2:17:f0:96:f8:59:2c:ad:24:9a:d7:fe:bb:6f:ef:0a:
         cb:70:32:ed:9c:c3:ad:85:19:1f:62:cd:42:9d:f9:0b:37:c6:
         79:58:63:79:6f:55:e6:0b:75:03:db:11:62:28:f7:9b:f2:a7:
         37:cc:0c:64:f2:71:4b:79:d9:46:00:ac:09:7b:4e:43:de:81:
         b2:7a:13:6a:ae:e9:0e:5f:41:80:00:75:e1:c5:ad:0e:86:a1:
         9e:a6:92:db:68:d4:e3:38:8d:80:c0:df:86:44:b1:ad:f7:3b:
         58:7a:18:d5:f8:55:26:7e:e3:70:c3:76:d1:22:3d:76:fe:8b:
         f6:74:09:45:b4:b3:b0:c9:77:65:19:ec:52:bc:c4:ec:d3:d9:
         7a:ef:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----