Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/bde403d7-250f-3733-8562-caa5c5bc01fe.roa
File:                     bde403d7-250f-3733-8562-caa5c5bc01fe.roa (raw, json)
Hash identifier:          d9Hfcj4kUQdSKFHMIHKb2U09za3+lp8IVzmT/XdieIQ=
Subject key identifier:   3C:0A:63:88:8B:75:EB:EF:7C:8E:D3:5B:30:36:79:D3:EF:E4:80:A7
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735C573181
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/bde403d7-250f-3733-8562-caa5c5bc01fe.roa
Signing time:             Fri 17 Jul 2020 10:34:44 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     7018
IP address blocks:        159.182.156.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5c:57:31:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=5d7537b0-b9c6-4c76-b440-a0bb3bb311f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fb:12:8e:8b:49:a3:51:66:5f:41:79:16:38:
                    2c:db:0f:c8:ef:c0:9e:7b:ba:b8:e4:f5:ca:77:24:
                    28:5e:99:9d:01:d4:aa:dc:2e:c9:78:1a:04:15:3f:
                    c2:9c:49:39:9b:1d:4a:8a:99:60:a8:44:36:41:cc:
                    f0:a5:cb:5e:e5:7b:23:f7:90:0b:8b:5a:96:24:c6:
                    8b:51:1c:de:9a:da:da:9e:16:2b:13:b1:a7:d3:03:
                    af:22:61:73:a7:c3:bf:a4:66:60:9f:9e:f6:3c:94:
                    d5:ca:98:c6:2f:4c:d4:d3:32:8f:5c:41:a2:2f:7b:
                    a2:bf:cb:bf:9d:dd:68:08:82:12:a7:b2:d6:9c:fa:
                    8b:9e:29:d6:b4:a5:56:00:c3:52:2c:95:0e:a4:f5:
                    fb:b1:ff:c4:b7:84:08:80:fa:d9:ac:d9:79:27:23:
                    1b:d8:86:eb:36:5f:f4:ec:05:f2:a8:bd:e8:b7:f7:
                    cb:3c:73:94:70:d9:b7:f7:d7:1f:73:32:0c:a8:69:
                    4c:e3:52:e8:12:1f:7d:9b:87:00:24:1c:ef:35:f8:
                    5a:44:c2:9e:e4:48:6b:fc:aa:f3:56:42:75:c9:9f:
                    15:a9:3a:0b:d8:ef:b1:35:60:d5:6d:7c:68:c1:6f:
                    eb:f4:e9:0e:e2:98:9c:73:78:82:09:fe:e7:ef:0f:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0A:63:88:8B:75:EB:EF:7C:8E:D3:5B:30:36:79:D3:EF:E4:80:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/bde403d7-250f-3733-8562-caa5c5bc01fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:89:6c:b9:ca:a5:e0:8c:29:f1:3f:52:b7:b5:93:c6:a4:fa:
         96:10:60:d1:44:b6:4a:29:d6:ae:b0:21:1f:5d:f5:7c:05:51:
         8e:c1:13:ba:b4:cd:08:47:b0:cf:e4:67:0f:6f:f3:0e:1b:9d:
         bd:23:62:b4:d6:15:d9:27:74:ca:ee:f7:85:ff:e3:a4:87:aa:
         87:32:47:6a:fe:e5:7a:23:da:88:3e:f0:55:23:ce:5d:57:00:
         e2:82:ce:ca:e2:ca:0b:fd:49:e1:08:e8:0f:41:26:c0:74:48:
         c2:57:d2:d3:b7:ad:98:03:54:c9:df:13:75:ee:ee:55:48:f9:
         70:a7:b5:35:08:bd:1c:61:f3:fa:9d:cf:b2:b2:06:3b:ca:ba:
         89:56:3c:c0:f8:5f:2c:9f:3d:06:35:f9:9c:5c:9f:3b:8d:39:
         d2:72:9f:35:74:06:5e:6a:ad:a4:9c:bf:32:b6:44:c3:72:aa:
         d0:9b:1d:e8:c8:a6:68:2b:6f:51:78:c5:b8:45:2e:c3:69:d7:
         f7:67:c3:dc:dd:dd:58:fb:93:95:73:6b:5f:cf:19:4f:5a:ec:
         06:9f:74:b4:83:f6:bb:71:d6:14:39:7a:16:a5:e2:7b:b4:81:
         bf:f3:cf:ce:eb:8b:1b:9a:72:86:11:a4:66:e6:15:cd:92:f8:
         cd:81:c3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----