Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d263dba0-9704-348e-aeeb-1f53873dfb31.roa
File:                     d263dba0-9704-348e-aeeb-1f53873dfb31.roa (raw, json)
Hash identifier:          PNV/pW5X6jG7fd28yhGs9rqL7orwQ8MD3TYIL7jvrKg=
Subject key identifier:   32:91:CC:3B:29:9A:0E:20:40:77:CE:D7:10:86:A1:81:53:A9:0A:6E
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E3BB255A
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d263dba0-9704-348e-aeeb-1f53873dfb31.roa
Signing time:             Wed 24 Jun 2020 00:29:52 +0000
ROA not before:           Thu 18 Oct 2018 04:00:00 +0000
ROA not after:            Tue 27 Sep 2022 04:00:00 +0000
asID:                     14061
IP address blocks:        45.55.0.0/16 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e3:bb:25:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct 18 04:00:00 2018 GMT
            Not After : Sep 27 04:00:00 2022 GMT
        Subject: CN=8b280103-6b75-47aa-8976-2ace02ed29a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:f6:2e:1f:b7:8a:99:a2:7f:c3:64:b9:f3:
                    d7:b5:a6:6f:b7:b5:fb:18:a6:c6:34:d0:69:14:d5:
                    cf:b5:12:76:8f:8e:71:1e:35:57:11:b6:f4:f5:bf:
                    ee:f1:c4:dd:2e:b7:55:f6:4b:69:31:3e:f2:74:93:
                    f6:ce:a3:a2:60:b8:f2:ed:df:46:5b:80:6b:bf:a0:
                    b3:39:92:c1:a7:d2:13:19:f6:3e:bd:54:e6:83:77:
                    64:a1:b6:ac:bd:92:09:c7:ff:15:8d:e0:11:27:60:
                    de:31:be:eb:29:da:1b:60:dd:87:fd:11:bb:c3:0c:
                    6b:31:f1:2e:f3:2e:32:31:fa:49:0e:c8:b0:6b:2f:
                    85:ec:92:6f:0f:0b:f0:30:64:9f:2a:17:d1:9c:12:
                    d1:2d:3f:63:52:c4:49:94:c7:04:4e:e5:a1:41:b5:
                    bb:68:60:80:30:db:48:37:60:ec:49:d4:a8:a3:67:
                    e2:fe:a1:50:b7:a3:ca:31:32:13:75:1a:e5:b6:8b:
                    5b:b1:66:81:59:55:ce:96:72:79:72:27:97:8d:00:
                    7d:f1:f0:4c:d6:0e:f3:a9:d8:5d:f7:59:f6:e3:33:
                    20:18:1b:9e:8f:ec:23:fc:61:35:c4:37:bc:3b:da:
                    9a:a1:42:dc:7f:1d:50:61:fd:2a:1f:b7:c9:1e:b1:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:91:CC:3B:29:9A:0E:20:40:77:CE:D7:10:86:A1:81:53:A9:0A:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d263dba0-9704-348e-aeeb-1f53873dfb31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e2:a9:97:ef:04:f4:29:bf:97:6b:25:0f:bf:09:b2:93:98:
         3f:58:1a:35:cb:7d:6e:7d:35:3b:48:1a:6e:f2:d6:df:c7:4f:
         02:bd:09:81:24:66:83:d7:01:70:71:ee:94:fb:bf:49:51:e9:
         7e:a8:fc:12:9c:68:a8:4d:db:44:48:d8:81:6a:42:75:5c:98:
         05:36:29:cb:f1:31:16:36:28:31:35:a6:b5:e4:14:5d:17:ee:
         c0:4c:00:cc:1b:ca:f4:07:cb:9a:8a:69:d8:06:1e:2e:5c:cc:
         82:d5:82:f8:1e:47:71:b3:da:84:82:60:2e:ac:7c:6a:91:37:
         f0:16:d5:26:6c:6f:bf:99:ad:2d:f8:2e:50:13:39:0a:bd:9d:
         29:55:96:14:00:72:52:8b:2d:dd:65:b6:5a:66:23:70:ae:84:
         1b:4a:90:41:20:bd:ed:c1:8a:15:79:0a:c2:73:86:11:0f:8c:
         e1:f6:bc:41:de:9b:53:4d:e3:5f:91:cc:58:75:01:d8:83:12:
         4d:63:d5:6b:95:9e:61:44:58:eb:38:8a:ad:b9:25:ee:48:ae:
         06:29:99:b0:3a:c3:99:8b:dc:89:d7:31:45:c7:53:60:95:98:
         a2:95:df:e0:a2:90:2b:ec:02:c2:50:97:8e:e6:6e:cf:24:24:
         49:e4:31:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----