Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0d0cc7e2-447d-373e-9f6f-d8e7f7efbcc4.roa
File:                     0d0cc7e2-447d-373e-9f6f-d8e7f7efbcc4.roa (raw, json)
Hash identifier:          i2lbvPR1jndpxIFdk+XrsyKg5wqo7ddjWmKnUySMrRw=
Subject key identifier:   3E:5E:ED:36:56:49:BF:4B:C3:3F:82:58:7F:35:7A:67:4A:6B:AD:2D
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732D359B29
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0d0cc7e2-447d-373e-9f6f-d8e7f7efbcc4.roa
Signing time:             Wed 08 Jul 2020 06:55:54 +0000
ROA not before:           Mon 24 Sep 2018 04:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     40818
IP address blocks:        216.38.168.0/24 maxlen: 24
                          216.38.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2d:35:9b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: Sep 24 04:00:00 2018 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=676e54d5-6020-449f-a00a-cff95a71e757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:16:96:5c:b2:68:4d:63:15:a2:34:52:eb:38:
                    36:9e:2a:45:b1:27:ea:76:b3:88:87:01:9a:14:a1:
                    0a:28:d8:1d:51:cd:62:9e:3a:d6:57:08:57:94:a0:
                    fd:80:b6:10:5d:34:34:1f:b9:fb:1c:fe:44:14:6a:
                    39:92:54:90:05:29:74:68:36:bb:97:35:94:84:bd:
                    81:75:89:50:d7:0b:16:bf:a6:51:00:69:72:c7:22:
                    ca:22:da:50:2a:79:b9:89:31:57:ad:70:b1:f3:ad:
                    51:a6:2a:9c:b7:49:72:4e:3a:92:d3:00:15:a8:80:
                    de:01:9d:8b:f5:72:79:c5:ec:32:cc:9a:9d:cb:20:
                    b7:13:f2:23:f6:c3:5e:a9:79:a9:c6:c3:46:4c:3a:
                    16:18:77:8b:51:c5:16:f4:69:66:a6:d3:54:28:95:
                    61:3b:99:db:4b:0c:17:30:6d:53:be:0d:a5:f4:99:
                    2f:23:ce:ca:2f:7f:83:34:9d:95:bc:6f:70:53:8d:
                    7b:d8:31:10:46:5b:f7:db:ed:e3:48:96:d4:3c:eb:
                    a3:c6:55:59:b2:b0:52:34:47:5d:e2:43:e5:82:60:
                    5b:ff:be:e0:2d:49:29:14:76:21:88:20:70:d0:2c:
                    3c:0b:32:5d:ab:99:3b:20:91:32:59:01:fc:9e:45:
                    b7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5E:ED:36:56:49:BF:4B:C3:3F:82:58:7F:35:7A:67:4A:6B:AD:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0d0cc7e2-447d-373e-9f6f-d8e7f7efbcc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:df:67:aa:b8:27:59:9a:1c:cc:5f:46:f1:1f:b3:e5:36:
         e5:6e:08:d8:bd:6c:ac:0f:e7:f9:3d:db:ce:c2:4a:f6:b4:88:
         b7:80:81:02:c8:b7:54:6f:5d:2a:7a:8c:0e:5c:a7:7d:07:ee:
         17:e5:4e:d7:f7:9c:d5:4a:d8:72:e7:9a:2b:a9:c8:4b:f7:59:
         bd:56:83:82:ae:c3:88:54:a4:e7:32:53:7f:42:58:18:26:a1:
         61:9d:1e:37:8e:9d:59:25:ed:9c:88:0b:c0:74:5b:4e:e1:03:
         84:98:69:10:2f:83:f4:b4:d2:76:14:6f:04:a4:89:0f:5d:fe:
         72:28:c2:d9:75:72:6c:4e:d5:74:8f:f5:99:0e:5d:f0:c9:c4:
         4a:43:fd:fb:52:a4:5a:54:79:f9:6f:d7:15:b6:55:7c:ea:47:
         28:f9:50:a2:84:f3:a2:d7:5f:af:97:b7:50:bb:42:b5:a7:f0:
         1c:50:43:f4:b5:1b:a3:ce:83:5c:28:1c:48:69:d1:fa:25:5e:
         0d:40:81:76:fc:6c:e3:03:12:d6:0d:02:76:f1:7e:b4:3e:2e:
         e4:c3:06:12:a7:05:86:d4:ef:8d:b1:24:a6:f1:ff:3d:23:24:
         70:c1:d8:20:fc:9d:da:30:16:c6:0f:c0:b1:91:79:b8:17:ca:
         c4:2a:94:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----