Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cdc053e3-79fc-3c05-bdb2-363a345039a0.roa
File:                     cdc053e3-79fc-3c05-bdb2-363a345039a0.roa (raw, json)
Hash identifier:          +wa+kyjH9LDTB68cqEoFMZ0tIjAn6ZjOznUYKyGBIek=
Subject key identifier:   6B:4B:3C:DF:4D:CB:08:72:BF:23:B1:AA:59:A6:35:D3:8B:AC:8D:C9
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328576D51CC73C042CFC171758DF337
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cdc053e3-79fc-3c05-bdb2-363a345039a0.roa
Signing time:             Mon 13 Apr 2020 21:59:29 +0000
ROA not before:           Thu 10 Jan 2019 05:00:00 +0000
ROA not after:            Sun 17 Jul 2022 04:00:00 +0000
asID:                     209
IP address blocks:        209.247.32.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:75:8d:f3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Jul 17 04:00:00 2022 GMT
        Subject: CN=eee0b8b8-202d-4503-a2ab-7f5b56b85a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:45:b9:2b:74:03:da:b7:0b:cc:61:ed:a4:
                    0f:57:90:53:82:43:d3:34:0e:3b:5d:01:33:34:1f:
                    0c:04:2e:df:39:77:73:16:ac:41:a0:98:bc:e3:c8:
                    98:bc:f6:e5:e5:e8:3b:5c:85:26:86:77:48:04:59:
                    4d:b2:3b:cb:fd:e2:2a:da:6f:04:d4:bc:1c:7a:35:
                    67:01:95:0c:aa:09:95:f8:3c:03:42:47:3d:35:5c:
                    61:c4:8d:66:77:9e:0a:07:d5:7d:29:4e:f8:cb:f4:
                    e9:e8:24:25:dc:e8:5a:6e:66:7e:75:e6:16:75:a2:
                    22:4d:73:aa:f8:cc:17:5e:5b:94:45:0e:61:0d:ba:
                    e3:f0:1a:6b:9b:92:36:36:7f:97:cb:2c:00:52:ce:
                    eb:ba:26:51:3b:38:d0:22:06:6d:5f:f8:c7:91:6c:
                    4a:81:ea:e0:8c:59:26:25:e6:26:e6:72:07:ab:d8:
                    3b:75:ba:d2:fd:9f:58:9b:4b:7b:a5:9a:60:6f:10:
                    ed:3e:28:22:6f:23:a1:19:07:66:4a:c0:72:0a:47:
                    1c:cc:1e:4e:88:d2:36:b6:36:c2:82:ac:54:6b:4b:
                    8a:a2:65:4a:de:9e:25:17:0e:64:03:01:72:66:49:
                    50:80:af:b6:ca:bd:cf:41:24:a1:e4:f3:de:79:83:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4B:3C:DF:4D:CB:08:72:BF:23:B1:AA:59:A6:35:D3:8B:AC:8D:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/cdc053e3-79fc-3c05-bdb2-363a345039a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.247.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:06:ef:b1:0e:14:3f:65:9c:18:3c:be:2a:f9:a7:ca:bf:38:
         9c:7a:d0:19:d3:89:b4:7f:7b:b4:3e:f1:5d:de:72:50:b7:51:
         a1:53:07:d3:e0:9f:b1:ba:ee:58:c1:12:a8:29:8e:2d:58:46:
         88:1f:8b:8c:4c:08:79:42:58:43:74:92:5c:72:89:eb:dd:86:
         6e:99:2f:66:17:80:51:32:b4:59:1e:15:48:8f:e3:3e:44:bd:
         c6:96:97:db:d1:9a:bc:91:7e:cd:32:c1:b5:a0:e6:ae:ad:7f:
         0e:20:c3:9e:ed:d2:04:91:5e:0c:d0:42:b9:a2:6b:a0:eb:53:
         3c:e4:57:be:2d:30:ec:6f:b4:84:51:83:32:5a:dd:03:64:9d:
         33:5e:06:77:ab:82:71:b8:09:c8:a0:26:53:7e:00:97:8d:b1:
         2c:48:07:b1:45:9c:ff:87:ad:11:09:4d:35:db:f0:25:6b:91:
         b5:bb:04:82:7c:4d:fa:c4:b1:5a:74:40:ba:90:0b:3e:47:09:
         fd:28:c8:7e:2f:99:3f:d2:7e:93:a2:9f:3b:a4:b3:dd:e3:7c:
         28:23:d3:d1:a4:45:9c:a8:42:af:da:8e:dc:79:a9:43:c9:74:
         01:70:e8:1d:94:c6:99:09:46:df:32:d2:36:4b:08:c3:c6:0a:
         43:84:3d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----