Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2a68b279-1a37-3149-a0a4-81a752cc0bb4.roa
File:                     2a68b279-1a37-3149-a0a4-81a752cc0bb4.roa (raw, json)
Hash identifier:          /sLoDi7OPhoT3Zl9TBDLRazjpHdyMtjN6r9d7bHaJN4=
Subject key identifier:   D0:E0:E4:52:F8:8B:0C:B1:1C:21:0D:AF:FF:1F:B0:DC:88:F8:DF:92
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328576D51CC73C042CFC171758FD451
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2a68b279-1a37-3149-a0a4-81a752cc0bb4.roa
Signing time:             Mon 13 Apr 2020 22:01:32 +0000
ROA not before:           Thu 10 Jan 2019 05:00:00 +0000
ROA not after:            Sun 17 Jul 2022 04:00:00 +0000
asID:                     209
IP address blocks:        65.59.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:75:8f:d4:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Jul 17 04:00:00 2022 GMT
        Subject: CN=0167360b-a3e6-497c-8874-bc1792849722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:83:d3:aa:43:dd:c6:32:c4:1f:fe:2a:92:
                    57:ea:93:e9:75:9c:97:af:e0:2a:3b:b6:08:9d:48:
                    13:d1:c7:91:0b:7b:69:1b:47:dc:88:9c:50:27:95:
                    a7:de:00:7a:a2:2b:4f:5b:ba:25:82:75:04:8e:ab:
                    9c:c1:a4:17:73:18:e0:88:76:56:08:4f:6c:cc:fd:
                    43:be:c4:e6:c7:05:ec:bd:cb:3e:dd:7e:d1:87:b6:
                    80:24:4d:84:dd:e4:d9:90:82:08:de:ea:eb:24:96:
                    74:73:a7:db:09:5e:bc:5c:3e:f3:9e:66:83:bb:7c:
                    bb:55:c1:2b:ba:c2:29:71:5a:b9:86:fc:63:bc:39:
                    68:04:55:2d:67:a7:72:b5:ea:e3:2c:79:27:b9:ce:
                    e4:2f:e0:b9:59:01:6f:37:a0:2b:6d:26:5a:7a:e4:
                    97:bf:ff:b6:ab:ef:7d:a9:5b:17:73:97:3b:f2:d7:
                    e7:c0:9c:3b:c4:54:c6:5e:bf:0f:e9:35:6d:10:ed:
                    93:fe:2e:f7:6c:d4:8c:9f:99:d3:9c:af:2c:b0:63:
                    14:fe:18:f8:d1:61:60:c0:1d:92:38:a1:c5:2e:79:
                    61:36:cf:37:31:45:fd:03:9c:13:d5:0c:f7:38:67:
                    82:3f:67:7f:28:76:01:42:22:35:b4:f2:c4:f4:b1:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E0:E4:52:F8:8B:0C:B1:1C:21:0D:AF:FF:1F:B0:DC:88:F8:DF:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2a68b279-1a37-3149-a0a4-81a752cc0bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.59.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f7:07:7f:e9:95:82:17:25:14:f8:0e:67:6d:42:e7:04:81:
         40:1f:f9:1f:01:97:60:45:08:57:8d:3c:f7:6a:d2:57:79:ca:
         96:8c:ef:91:d9:e8:ed:ee:45:67:65:da:b5:2d:2a:ef:f0:db:
         e9:7e:dd:d6:f0:ad:a1:c6:2c:41:c9:4b:eb:4f:cd:8b:cf:52:
         19:3c:9d:49:1d:18:52:19:a6:20:b5:30:b7:a9:c1:b8:1a:9e:
         6b:a6:1b:e4:db:eb:57:08:94:f7:72:54:c3:7f:78:c0:c5:7d:
         20:97:b6:2f:4e:78:1e:52:19:f4:e1:f2:1f:d5:a4:05:e6:fb:
         e5:d6:1f:a9:d8:f8:04:56:29:b7:44:ad:b0:e8:5c:9a:22:11:
         93:b3:87:6c:a2:fa:5f:b4:be:f8:30:54:f7:ac:05:28:45:7b:
         0a:9d:a7:2c:07:41:36:53:c9:1a:b1:72:12:2c:1f:24:54:95:
         6c:71:85:a3:0b:99:cb:d2:d2:35:b8:9a:79:ab:01:61:a4:a4:
         c1:e6:6d:8a:f5:bb:6b:59:0d:4a:d3:2a:06:6d:01:df:ad:15:
         28:74:7e:d1:bb:b7:c1:f4:9a:77:9f:28:e9:ed:f4:80:bc:05:
         72:ae:2f:05:00:1d:e8:af:a1:89:cb:e2:83:0e:f3:9b:99:c3:
         ce:c1:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----