Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4e9bfac8-5cce-3b69-b84c-102769d2a1f9.roa
File:                     4e9bfac8-5cce-3b69-b84c-102769d2a1f9.roa (raw, json)
Hash identifier:          G9y6d61R1JKErclGUEL7Jxq8+z5nydPzEOqMOEfaZoU=
Subject key identifier:   96:64:5F:E2:D9:7D:9B:07:A0:A1:FA:5F:03:78:43:33:FE:09:60:A2
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735C864DA9
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4e9bfac8-5cce-3b69-b84c-102769d2a1f9.roa
Signing time:             Fri 17 Jul 2020 11:26:12 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     30682
IP address blocks:        159.182.160.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5c:86:4d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=89481af1-fca8-443c-abce-730711c101ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:e4:39:f8:4f:6f:61:63:f6:30:3a:4b:94:
                    f2:c0:fe:6b:9e:7a:d7:d0:32:9b:42:48:1a:8f:3c:
                    b8:80:07:34:d2:89:79:d9:12:55:64:aa:2f:51:de:
                    3e:a3:d0:16:19:77:f2:73:88:5f:41:d0:e3:29:f3:
                    f3:dd:6f:5f:c1:43:e6:0f:52:36:b9:f4:f7:50:6f:
                    c8:4c:1a:af:86:72:fe:38:99:75:6d:ec:17:ab:48:
                    bf:d2:39:ae:55:ce:28:a4:5e:ac:88:c0:79:dc:05:
                    be:cd:54:8a:4a:62:c0:46:b4:4f:ec:35:e3:e1:47:
                    d7:3c:6e:e5:4d:56:af:a7:c8:b1:63:17:fd:e5:fe:
                    3b:c0:fd:f1:e5:ae:74:7d:d9:02:df:40:f4:74:5c:
                    44:b8:f7:fc:36:47:d2:e4:72:c2:a3:1e:26:11:fc:
                    70:f1:3c:18:31:c0:47:17:bc:68:94:ec:ec:f0:66:
                    e3:2e:26:57:b0:4c:17:29:1c:85:fe:f8:f2:1a:03:
                    03:51:38:69:70:ec:bc:86:3a:3e:13:c7:0d:9f:0a:
                    3d:53:22:66:a7:26:ef:74:f7:f9:21:d3:c2:6f:eb:
                    bd:7c:fa:86:c0:13:48:a9:e9:f5:4d:3d:e2:8b:53:
                    fd:e7:ae:d6:bc:41:5e:a5:ac:67:a2:72:90:1f:7b:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:64:5F:E2:D9:7D:9B:07:A0:A1:FA:5F:03:78:43:33:FE:09:60:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4e9bfac8-5cce-3b69-b84c-102769d2a1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b3:8d:01:ff:fd:46:68:c4:fa:da:ad:34:d4:ef:0b:80:32:
         60:ca:98:21:e8:c8:ac:a1:53:ee:24:17:aa:ac:35:5e:b1:eb:
         51:a9:dc:48:95:7d:b6:b4:e1:5f:41:57:0f:69:87:fc:90:46:
         59:8f:59:aa:ca:03:e9:14:ad:a9:45:b1:69:2f:05:73:6e:ae:
         6d:e3:1c:a5:0a:2d:ed:6c:13:64:bb:ef:81:36:11:21:45:59:
         f7:1a:08:33:82:df:47:bd:3a:74:17:cc:7b:ea:0a:98:27:4a:
         2c:a2:f3:28:7e:2e:88:2f:44:26:b6:c7:0d:f1:90:9e:60:8d:
         00:b0:4c:dd:2a:ac:89:6f:8d:84:d5:c7:ec:d1:f8:47:e4:ae:
         af:f5:4f:7f:db:c7:f2:fd:13:0d:4f:fe:31:2d:9a:f6:38:15:
         2a:e3:e5:c6:e6:ec:48:26:a1:c5:d4:49:23:18:ad:82:63:80:
         a4:ec:14:8a:d5:57:b5:27:9a:7d:f1:9a:0b:6b:ae:dc:3a:df:
         22:41:96:0a:a6:04:10:2a:03:7a:0a:1d:c3:5e:26:ee:e6:99:
         95:66:68:ee:6f:fc:c4:97:86:db:18:ec:94:77:41:a7:99:9f:
         1f:ae:cf:e8:b8:1e:0b:6a:2e:59:01:15:4c:7f:de:dc:dd:c9:
         13:5d:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----