Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36771f0d-a6ee-3536-952b-1626ca0eb8b5.roa
File:                     36771f0d-a6ee-3536-952b-1626ca0eb8b5.roa (raw, json)
Hash identifier:          5hjBFlo+8qxFte8uq1b7gzA0nK2Gw8wBlwJd+AWd+Ug=
Subject key identifier:   A3:E6:87:B8:A0:09:24:3C:FC:BD:90:67:E6:CB:B3:41:B4:F1:6F:A6
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1708E2A5799
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36771f0d-a6ee-3536-952b-1626ca0eb8b5.roa
Signing time:             Fri 28 Feb 2020 23:38:24 +0000
ROA not before:           Thu 10 Jan 2019 05:00:00 +0000
ROA not after:            Thu 02 Jun 2022 04:00:00 +0000
asID:                     209
IP address blocks:        205.227.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:8e:2a:57:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Jun  2 04:00:00 2022 GMT
        Subject: CN=ff906245-498d-470f-92c4-3bcf9291d701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:64:42:a2:7c:12:87:00:95:53:02:9b:58:
                    60:de:7a:ea:0b:29:35:8f:93:0d:1f:f5:38:1e:c8:
                    3f:b4:23:63:e5:20:4a:dd:3d:08:62:c6:96:65:1e:
                    e6:55:22:ff:32:99:34:d1:76:80:66:77:b8:83:db:
                    e7:10:c6:b0:8d:1b:18:cb:fe:7e:30:60:6e:ae:af:
                    2b:e6:89:0a:fc:7d:8d:28:85:ea:80:67:98:bc:11:
                    a5:2a:ba:2b:69:e8:48:02:a5:27:e3:ad:4b:39:93:
                    f7:37:cb:77:22:82:50:9a:26:8b:b8:94:60:8f:dc:
                    4b:09:5d:98:bf:00:af:2e:11:17:b8:e4:9b:b0:36:
                    f7:b0:68:cd:44:97:69:16:f2:35:a9:80:2a:b6:f5:
                    9f:76:bc:a5:c0:70:26:3d:47:01:c0:1e:28:60:96:
                    9b:b8:75:54:e8:a7:8b:bb:6d:d5:d8:d2:e8:0e:f6:
                    b9:d2:8d:f3:f5:02:c7:72:e2:e4:46:e2:8c:77:b3:
                    a9:ef:da:b6:d0:44:4f:72:1c:f4:3b:f8:13:17:d2:
                    05:9d:0b:b8:2f:a0:21:97:31:3e:4b:45:96:d1:03:
                    47:1c:87:e2:9c:ac:70:16:f6:09:a4:08:1f:cb:9d:
                    f8:4e:03:54:c4:ae:83:cf:3a:69:6d:e1:92:14:d9:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:87:B8:A0:09:24:3C:FC:BD:90:67:E6:CB:B3:41:B4:F1:6F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/36771f0d-a6ee-3536-952b-1626ca0eb8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.227.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:55:38:fa:a7:11:0f:d3:97:f2:b1:d3:32:c8:23:bb:c8:fc:
         af:fd:ac:11:d4:7f:55:6a:f6:bd:ec:ef:a7:b6:e7:68:89:04:
         88:01:31:8f:4b:23:2c:ed:fa:d4:b8:e5:51:3b:e3:ed:07:ba:
         37:ec:7f:95:fb:81:2f:8e:a9:b6:3a:c7:5a:6a:9a:85:77:39:
         8b:49:4a:a5:c7:1a:be:4c:9d:9d:84:40:78:e6:c2:79:13:98:
         46:51:54:d1:60:fe:a4:f2:22:f9:a3:79:f7:38:cd:c9:f9:1f:
         9f:36:97:de:c1:d3:aa:cf:24:d0:0a:89:5e:f2:18:9a:63:a3:
         35:04:14:86:c9:a2:8e:f6:1a:fd:73:78:33:77:27:05:5f:f1:
         1f:80:51:02:a9:86:bb:3d:cc:c4:9d:a9:e1:95:90:97:f5:e4:
         6b:e8:81:9c:51:0d:e6:68:36:09:bd:f6:7e:71:80:37:8a:dc:
         87:c7:3d:8b:ee:45:4d:26:32:1a:6a:9a:1c:86:39:5d:d5:00:
         8e:2b:b1:72:08:58:63:78:cb:a5:75:3c:e8:42:55:66:5d:4b:
         d3:cd:f4:7e:e9:74:77:a6:ac:8a:ac:20:ae:be:c7:19:c5:7e:
         40:9f:31:23:23:a5:94:9d:0e:6d:99:72:a6:38:65:be:f3:13:
         ad:56:14:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----