Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/2e3024fb-7d04-3bf5-b0fb-e25e684c71ee.roa
File:                     2e3024fb-7d04-3bf5-b0fb-e25e684c71ee.roa (raw, json)
Hash identifier:          fg+OTAWNaQJXRR2hLzD8NOfmMUHQUbRZ1+6DIpcZhp0=
Subject key identifier:   72:48:FF:32:C7:8D:DB:F1:E7:A6:3F:D2:00:85:8B:E9:9D:6D:C2:D2
Certificate issuer:       /CN=481eff9a-c8b9-4eed-af8e-c3859c22b5c8
Certificate serial:       010D0C9F4328576D51CC73C042CFC15B817BDA48
Authority key identifier: 1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/2e3024fb-7d04-3bf5-b0fb-e25e684c71ee.roa
Signing time:             Tue 18 Apr 2017 14:33:49 +0000
ROA not before:           Tue 18 Apr 2017 04:00:00 +0000
ROA not after:            Thu 30 Jun 2022 04:00:00 +0000
asID:                     393668
IP address blocks:        192.65.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:5b:81:7b:da:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481eff9a-c8b9-4eed-af8e-c3859c22b5c8
        Validity
            Not Before: Apr 18 04:00:00 2017 GMT
            Not After : Jun 30 04:00:00 2022 GMT
        Subject: CN=35b0535c-d573-45f7-b968-6607c8083bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:df:7c:dd:ad:3a:5d:96:05:12:45:22:dd:
                    b6:ba:9a:83:eb:80:44:aa:3b:1f:91:81:96:54:30:
                    46:b1:0b:77:9b:36:1d:98:73:1c:a9:53:74:53:5c:
                    fb:8b:ef:05:67:81:5f:74:e8:36:32:31:7b:7f:07:
                    cf:63:b5:b6:ef:49:6f:84:15:f0:b5:f3:38:8e:32:
                    17:1b:fa:63:ce:8d:2c:50:bc:27:73:5b:d2:e0:95:
                    90:6d:ff:a2:59:fa:a8:89:e8:30:ea:69:38:22:df:
                    8a:91:54:90:9d:c1:5f:14:aa:d1:2f:63:4d:ee:87:
                    7b:90:e8:8c:c4:2b:8f:76:b0:10:d9:dc:2b:05:5c:
                    08:cd:5f:50:b8:e5:5c:b8:d0:1a:aa:40:2e:b7:04:
                    f9:96:f1:86:71:e4:e5:76:91:3f:ad:f5:94:bf:91:
                    bf:ff:4e:33:44:46:0a:21:2d:9e:4d:a4:31:25:0e:
                    f6:5f:b7:03:4a:17:d4:7e:65:01:37:46:29:64:77:
                    68:58:7f:44:5c:87:11:dd:55:42:7d:91:e9:1a:41:
                    ab:61:b5:d9:2f:ae:95:e1:69:7b:52:b0:0b:cf:7d:
                    13:fb:58:92:71:a2:72:5b:96:44:c8:03:e2:34:d2:
                    84:d0:85:aa:e3:97:99:c4:e4:06:28:98:72:b6:00:
                    e0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:48:FF:32:C7:8D:DB:F1:E7:A6:3F:D2:00:85:8B:E9:9D:6D:C2:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/2e3024fb-7d04-3bf5-b0fb-e25e684c71ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.crl

            X509v3 Authority Key Identifier:
                keyid:1A:2E:04:DE:C8:91:38:25:BB:18:2E:26:E2:C0:98:78:E7:3A:BA:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/481eff9a-c8b9-4eed-af8e-c3859c22b5c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.65.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b6:4f:32:f2:b1:f1:40:b2:c7:7f:e7:08:7e:46:0d:76:95:
         3f:d4:f3:37:76:91:be:69:3d:47:fa:23:2a:52:27:35:71:d2:
         42:8a:7d:0b:2e:a6:ee:83:47:25:8e:1a:75:83:b5:bd:d9:85:
         a5:23:25:60:89:4c:c9:20:67:7f:7b:4f:8f:66:de:6a:73:01:
         0d:5c:ad:30:cc:86:9c:6e:55:be:d7:51:3d:98:ea:ff:3c:3d:
         4e:28:7e:01:6c:db:6c:99:62:23:55:9a:20:3d:23:68:ce:86:
         0c:ff:a2:22:8f:d8:9a:ac:9c:8a:93:96:6e:62:6a:1b:82:78:
         25:ae:6a:bb:78:eb:5a:a0:f5:8e:3a:a6:3d:4d:5a:71:55:70:
         ce:a8:be:75:68:bd:5c:16:1b:6c:df:78:bf:b5:5f:a7:d5:14:
         de:07:aa:51:21:dc:8d:1f:79:e3:ce:69:dc:84:7d:5c:a5:2b:
         39:de:d0:75:51:ca:6b:95:bf:f9:3f:c4:79:26:35:26:35:2a:
         10:94:e2:0d:a5:09:6d:06:ec:28:b0:70:c3:74:0d:0b:a0:23:
         ad:aa:dc:b8:69:9e:c3:0f:4d:c9:08:2c:d8:fa:76:cb:59:9e:
         23:73:51:6e:af:5f:87:ac:de:af:26:9c:58:27:4a:c8:b8:97:
         a9:cc:3c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----