Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/55e6b41b-ce77-37cb-a52a-2c0963fb6bea.roa
File:                     55e6b41b-ce77-37cb-a52a-2c0963fb6bea.roa (raw, json)
Hash identifier:          wklr+LEiKWDXnvCs/nG6ZrWsFSSbGsaJ8W/DrThxvi0=
Subject key identifier:   B2:70:7E:D4:5F:B3:8E:99:96:E9:51:84:3F:F8:A0:50:8A:5D:DE:D0
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735C57070E
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/55e6b41b-ce77-37cb-a52a-2c0963fb6bea.roa
Signing time:             Fri 17 Jul 2020 10:34:34 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5c:57:07:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=b055d3b2-a864-4e05-ae9d-04e6b4b83860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:51:95:f3:55:2e:f7:13:20:dc:e6:d9:98:f2:
                    3b:01:4d:c1:f1:13:18:bf:cb:3d:d4:e9:f2:7b:61:
                    8d:ba:7b:57:f8:00:aa:53:62:1d:cf:3f:1b:cf:b1:
                    73:e7:94:00:13:e8:27:97:ed:a4:13:61:98:77:85:
                    83:f2:d8:6a:b2:43:3f:3e:4a:ba:99:e6:9f:fc:6a:
                    f8:48:46:5d:b0:ee:3d:9d:b8:e7:8a:5b:3d:bf:d1:
                    2d:61:04:03:70:bd:06:3b:20:21:55:22:af:b8:f7:
                    05:a5:3f:ba:8e:21:83:b1:09:45:58:81:70:8e:7e:
                    a7:be:7c:78:e7:6c:c2:22:ab:ac:23:5b:cf:00:ed:
                    22:2e:10:ff:f1:b9:72:ab:c8:d2:76:79:59:34:20:
                    42:9d:a7:7c:46:9f:98:7d:3f:7e:3b:46:bf:cb:26:
                    51:6f:fe:cd:f7:dd:bb:9e:22:ea:8c:a7:93:6d:03:
                    9f:c1:8d:d2:dc:5e:41:7a:95:59:f4:a5:d7:22:fc:
                    b9:d7:bd:fb:b4:16:01:cf:14:75:dd:61:b1:ef:33:
                    10:e3:57:cb:63:e1:a5:ba:73:b4:f5:e5:f0:d6:70:
                    f0:aa:e5:7f:24:71:eb:79:8a:a1:8a:c2:17:0f:6f:
                    9b:e0:e3:24:2e:45:79:ef:c5:55:5b:c2:89:f1:88:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:70:7E:D4:5F:B3:8E:99:96:E9:51:84:3F:F8:A0:50:8A:5D:DE:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/55e6b41b-ce77-37cb-a52a-2c0963fb6bea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:07:e3:7d:59:ce:6d:0c:55:af:d9:a9:26:c4:72:59:bd:16:
         a1:dd:9a:52:b4:5b:07:62:63:ec:5d:58:26:4b:53:88:c7:51:
         93:20:41:60:63:16:7f:1c:4d:2c:b7:e5:ba:89:f4:a3:e3:11:
         0e:0e:df:cd:45:d2:8a:7e:90:98:9e:b3:8e:54:63:cb:f7:78:
         9e:7d:3a:14:42:f8:db:7e:13:45:83:75:fe:c2:b1:84:29:a8:
         45:c1:47:e0:ea:78:d0:2a:ab:88:23:b7:8a:61:88:72:44:2d:
         08:af:88:12:65:43:ee:4f:7d:14:b2:fb:5e:78:74:ff:19:cb:
         9d:01:37:0c:a6:45:93:ea:54:04:e7:8d:18:db:bc:a0:c1:cc:
         04:c2:39:79:bb:d7:c4:98:2d:98:50:b8:f3:fd:51:dc:a6:31:
         e9:66:db:ae:7f:f9:ff:d7:e0:7f:74:43:64:e1:93:37:15:f8:
         d3:20:db:47:24:18:81:38:ed:6b:74:e1:6a:f6:d0:2a:e2:92:
         a7:e9:82:82:c8:e6:1e:01:03:f1:ca:51:95:03:ce:f1:44:ff:
         c9:dd:13:7d:00:d9:2b:ac:c5:79:88:3f:3e:38:00:df:a7:76:
         94:8a:df:3d:5c:c4:e8:10:62:47:93:49:86:ac:ab:cb:7f:57:
         dc:28:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----