Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/05dd71d4-5fcc-3202-b3f1-0052327a0a0f.roa
File:                     05dd71d4-5fcc-3202-b3f1-0052327a0a0f.roa (raw, json)
Hash identifier:          3Av9HIJzEaKG89INc6s3n9CdNl1Qtd+8sM6EjYksNWc=
Subject key identifier:   C4:58:E8:CE:96:E2:D9:93:F1:49:CB:B2:57:44:B7:4D:DC:98:26:DA
Certificate issuer:       /CN=369643f4-a849-4a0c-af2a-677957de74bc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1728A1DC882
Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/05dd71d4-5fcc-3202-b3f1-0052327a0a0f.roa
Signing time:             Sat 06 Jun 2020 14:51:47 +0000
ROA not before:           Wed 21 Oct 2015 04:00:00 +0000
ROA not after:            Sat 10 Sep 2022 04:00:00 +0000
asID:                     7489
IP address blocks:        202.5.16.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:8a:1d:c8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc
        Validity
            Not Before: Oct 21 04:00:00 2015 GMT
            Not After : Sep 10 04:00:00 2022 GMT
        Subject: CN=44aaa396-0413-4601-938e-6f8d7136371b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0a:b4:97:78:6d:57:ea:74:e4:69:40:2f:8e:
                    04:2b:e2:88:0d:73:20:4d:8c:49:aa:85:f8:a0:11:
                    e0:63:3e:35:52:0c:52:00:06:9a:e4:70:97:37:a3:
                    8b:fa:c4:41:18:70:7f:97:ea:35:99:e0:e1:b0:28:
                    7b:9e:d9:13:e0:2a:fc:61:02:7f:b6:b6:d7:3d:eb:
                    2c:ab:61:3d:47:59:4f:ac:b3:81:be:b1:df:32:25:
                    64:11:3d:9f:ff:1a:03:f4:d0:1f:f1:dc:ef:92:1c:
                    4c:53:a7:95:e3:8a:d5:cc:39:f7:cf:5f:77:c8:9c:
                    b8:ab:7b:03:94:ba:80:7a:cd:04:a2:dc:13:54:e8:
                    4c:30:4d:1a:35:ae:5c:3c:f3:b4:07:dd:7e:3d:9b:
                    2d:c3:9e:9d:da:62:00:8c:ce:de:cf:54:9e:59:91:
                    7e:a2:54:a5:38:f8:f2:26:93:9d:62:5f:ac:39:7b:
                    9b:ff:15:6b:a3:c3:a6:dd:61:ac:69:d9:b1:c9:38:
                    b7:1b:8c:58:84:a1:0e:18:6b:e3:f8:2c:ef:e6:9c:
                    68:99:0d:27:71:fc:f6:b1:82:75:de:79:b9:9a:97:
                    95:f1:62:ab:82:98:ef:2f:47:90:58:59:19:89:24:
                    30:a8:67:05:cc:71:da:7e:24:1e:59:23:c2:71:31:
                    05:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:58:E8:CE:96:E2:D9:93:F1:49:CB:B2:57:44:B7:4D:DC:98:26:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/05dd71d4-5fcc-3202-b3f1-0052327a0a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl

            X509v3 Authority Key Identifier:
                keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d6:c4:8a:61:71:fc:8b:bf:6e:b3:0c:01:bb:cd:f5:22:43:
         f5:6e:5e:2f:15:3e:7b:61:37:e3:19:56:c8:27:e7:5a:e6:2d:
         c0:af:6e:c7:a2:9b:12:ee:72:7e:04:f9:f8:09:d8:06:c5:6f:
         96:8d:2f:6d:d0:26:07:23:ae:80:7e:15:f6:c8:0f:94:ba:69:
         51:6c:a4:5f:7a:85:63:64:99:78:64:74:47:59:fd:db:dc:61:
         8c:5c:e5:c6:d5:ee:54:d1:26:a5:b3:35:9f:ba:ef:9f:8b:86:
         80:f4:b4:c6:90:dc:f2:b3:c9:46:2b:f6:24:c5:3f:c5:4d:65:
         a3:25:c7:32:7a:8b:de:37:4a:b0:6d:a2:01:5e:dd:d7:ca:b2:
         83:be:43:94:fd:f6:5c:48:25:3f:b1:48:85:a6:e5:a2:73:4c:
         45:8f:c7:17:e5:06:ed:c8:b2:ff:f5:b3:89:89:9f:ca:44:f3:
         dd:59:f6:42:d1:d7:ad:42:6a:50:d7:2b:77:ac:4b:57:b5:bb:
         ca:a6:c7:c2:ae:32:73:04:2f:12:b0:58:ad:95:4e:f8:26:a9:
         30:69:7b:60:e4:87:6a:17:26:22:45:32:18:4e:c7:0b:ec:ea:
         ed:b1:a5:e5:3b:dd:e2:a1:38:ea:9a:1c:2f:48:c7:f6:07:6b:
         70:d7:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----