Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/c163f16e-215b-30a2-aab8-9d61c373fe40.roa
File:                     c163f16e-215b-30a2-aab8-9d61c373fe40.roa (raw, json)
Hash identifier:          ae3xna4T2+PnYQIWzApEm1m/D3zeaR4QmRGriavwO2c=
Subject key identifier:   BE:37:9E:60:EA:60:5A:46:92:04:82:AC:B1:BD:2F:91:9B:D9:F7:39
Certificate issuer:       /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735C57256F
Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/c163f16e-215b-30a2-aab8-9d61c373fe40.roa
Signing time:             Fri 17 Jul 2020 10:34:41 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     11892
IP address blocks:        159.182.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5c:57:25:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=ff3bf462-06aa-4014-9808-fbf6a3ea41c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:37:c1:16:12:20:3b:d4:92:f8:92:ae:e2:
                    a9:af:8a:2b:28:c1:2b:42:9c:a9:59:da:3d:54:aa:
                    b3:fd:45:94:7b:80:6b:3e:12:4e:dd:45:3d:ec:c8:
                    6e:0d:0c:6c:ec:bf:f7:76:77:80:a7:11:25:a6:6c:
                    b2:5e:21:a4:79:82:16:4b:60:7b:b3:5a:80:15:78:
                    6d:fc:d0:31:e1:78:ae:07:ea:e0:22:d9:57:70:0e:
                    25:1d:23:ff:5f:02:ac:b7:7c:98:3c:c5:b2:96:73:
                    57:59:26:dc:8f:d4:fa:6b:c2:4d:a0:cc:01:6b:a2:
                    9e:b4:b7:98:b4:02:ec:17:85:4a:7d:6a:0a:df:cf:
                    60:3d:95:9c:8c:e9:6f:2e:7f:51:c8:ec:83:19:c9:
                    25:7d:9a:ab:f5:66:c8:98:1b:42:67:99:06:c2:05:
                    df:7a:c0:57:5f:0a:8b:72:3f:0c:64:b9:7e:da:a5:
                    4f:f6:aa:6c:17:92:b6:18:44:39:45:14:ad:2d:cd:
                    53:33:cb:84:8d:70:f0:b4:9c:9c:b2:9b:0e:a3:d1:
                    35:56:4e:ce:df:f7:71:89:be:cc:46:98:e2:12:98:
                    4f:2c:33:33:e6:76:fd:f9:50:63:47:bc:f7:21:fa:
                    54:c7:25:c8:93:b9:a9:09:ff:72:56:c1:41:4f:da:
                    fe:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:37:9E:60:EA:60:5A:46:92:04:82:AC:B1:BD:2F:91:9B:D9:F7:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/c163f16e-215b-30a2-aab8-9d61c373fe40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.182.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:98:00:ec:08:ca:11:ee:59:ea:e5:2c:8d:d2:ca:16:8c:56:
         2d:c7:b6:85:c8:21:81:3e:12:12:a4:2e:4d:3d:8f:3a:b9:dd:
         6e:bb:6e:51:90:2b:10:a0:69:b3:eb:36:63:8e:7b:a8:a6:0a:
         a4:64:c8:34:e6:7c:10:a4:bd:38:69:b9:43:36:7f:6e:57:44:
         e9:4b:92:62:50:16:4c:30:0c:37:95:b2:99:cd:c9:32:65:b9:
         ab:d6:10:a3:b5:b3:8a:a7:1a:de:3b:23:1d:5a:eb:a7:80:0a:
         2b:31:5c:e6:ee:57:c2:cf:f4:fd:4a:b0:58:ab:44:fa:fa:39:
         06:a0:38:a7:78:75:9a:aa:fd:9a:f1:08:30:1d:38:86:ef:62:
         15:37:57:79:c6:02:0e:ab:23:bb:c6:10:14:69:61:ff:cb:e5:
         d1:83:fd:5e:47:2d:65:22:26:c5:f9:74:f5:bf:d7:e5:af:35:
         83:b6:8e:26:bb:25:ff:f7:f8:29:9f:2a:d8:bb:4f:11:e2:7f:
         33:07:51:5b:ce:80:a6:fb:d6:31:88:ec:60:23:b6:81:d8:01:
         85:43:83:2b:ef:72:6b:94:72:37:b0:25:24:87:14:55:9a:00:
         c6:74:c0:0d:bc:92:f3:00:19:6c:eb:70:c4:c4:4b:b3:45:ba:
         3c:04:6c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----