Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47dfd74b-dc0c-39ac-81fd-bcd13f43fb2e.roa
File:                     47dfd74b-dc0c-39ac-81fd-bcd13f43fb2e.roa (raw, json)
Hash identifier:          AL7B/umeMW0yznklKCYRFJ5MAaZTXzqghtxfzO8/pIw=
Subject key identifier:   CC:8F:DF:5B:A4:A6:D3:FB:23:9B:67:26:51:5B:4A:C8:37:15:27:9D
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1708A0C88AA
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47dfd74b-dc0c-39ac-81fd-bcd13f43fb2e.roa
Signing time:             Fri 28 Feb 2020 04:27:22 +0000
ROA not before:           Thu 10 Jan 2019 05:00:00 +0000
ROA not after:            Wed 01 Jun 2022 04:00:00 +0000
asID:                     209
IP address blocks:        67.16.192.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:8a:0c:88:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Jun  1 04:00:00 2022 GMT
        Subject: CN=8a2c5e3a-1c65-416f-93b0-f0ec50bf6914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:64:9e:53:b7:1b:2f:e8:86:8e:87:50:d9:
                    4b:29:52:d5:a0:19:e5:30:d2:ef:f1:f9:b2:67:b0:
                    0c:dc:65:0d:7d:d9:b0:07:38:d3:dd:89:10:4d:4e:
                    60:42:9e:5d:4c:b9:87:25:80:c8:9f:5d:1f:c1:c7:
                    0f:0a:a9:cf:c9:b1:98:c8:81:b0:b4:a3:6b:3c:77:
                    ab:c3:b9:64:2e:3a:85:78:73:64:0b:61:03:19:21:
                    9e:fd:95:01:a2:39:e0:5b:82:90:59:f0:78:55:66:
                    9b:95:45:e0:3f:f8:3e:4a:97:c0:1f:48:43:d0:c2:
                    be:40:c4:2b:b4:3e:bc:b3:7a:f5:5c:69:de:b7:bd:
                    9b:c5:6e:0d:7f:3d:1f:76:25:27:c5:ab:bc:6a:7b:
                    eb:60:e8:91:d8:77:98:42:f5:44:9c:09:0b:82:22:
                    97:9a:27:02:f8:15:78:b7:64:0c:f0:17:30:6e:b8:
                    c6:9b:7d:d8:5d:54:45:8b:7e:6b:cd:c2:25:e3:28:
                    c2:23:51:f6:cb:d5:15:51:ff:5a:26:af:b9:f2:0e:
                    fe:23:f8:d6:95:2f:2c:53:c5:1e:76:59:ae:00:23:
                    64:98:1d:bf:2f:30:79:2c:3e:48:6a:52:eb:f3:b6:
                    30:3c:ef:8c:16:34:9c:a3:e1:f0:92:cc:45:fa:dc:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8F:DF:5B:A4:A6:D3:FB:23:9B:67:26:51:5B:4A:C8:37:15:27:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/47dfd74b-dc0c-39ac-81fd-bcd13f43fb2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.16.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:de:3f:ed:7d:56:c0:cc:3f:bf:e3:40:29:f7:de:dc:f4:05:
         27:3a:de:4e:28:d3:38:68:61:19:cf:7a:2a:05:85:67:5f:25:
         b9:e2:1d:55:bf:88:84:ec:81:d7:ba:43:95:85:51:ab:63:f0:
         7a:b0:0f:5c:00:41:5a:dc:e8:03:32:c4:62:47:06:fc:1f:13:
         2c:93:c9:3e:a6:44:eb:73:08:bc:d0:5d:d4:99:25:f8:0e:4f:
         df:0e:cc:34:7c:95:3b:c8:0b:dd:6d:8e:96:8c:d5:3c:06:57:
         ee:95:fa:ec:97:23:07:a1:cd:82:d9:6c:65:70:63:45:2b:e0:
         e1:2d:f3:64:ac:07:de:b7:38:e9:f7:f3:a1:21:e5:17:58:ba:
         40:cf:2e:ea:20:3c:15:37:19:76:d9:b7:d4:61:57:cb:df:fa:
         ad:1b:97:9e:15:28:a9:37:1c:48:fd:b2:af:6c:34:5b:f0:d4:
         ac:0a:ea:c5:3c:ab:ee:bb:9a:94:e0:ef:a4:3f:be:d9:11:f8:
         0d:a7:0a:76:f7:33:8d:e0:91:3a:df:8e:e1:3f:b9:ae:15:40:
         da:ea:7b:9e:89:52:03:d1:19:ad:7d:d4:51:39:c3:fc:a4:e1:
         29:df:63:b8:d1:d3:7b:a5:79:da:1d:6c:82:50:5f:87:39:c7:
         d1:25:4d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----