Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/97c3e194-5c5a-3416-8324-a57145bc8860.roa
File:                     97c3e194-5c5a-3416-8324-a57145bc8860.roa (raw, json)
Hash identifier:          l3At+Tf+ZxcKahvWqIoWKT8FJcPMNq6RPXErRovCvSU=
Subject key identifier:   91:47:9C:C1:52:C0:2F:9C:F3:17:6A:CC:E7:44:0E:16:17:93:7D:41
Certificate issuer:       /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FFD49E1B1
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/97c3e194-5c5a-3416-8324-a57145bc8860.roa
Signing time:             Fri 31 Jan 2020 20:27:55 +0000
ROA not before:           Tue 08 May 2018 04:00:00 +0000
ROA not after:            Thu 05 May 2022 04:00:00 +0000
asID:                     393891
IP address blocks:        192.103.118.0/24 maxlen: 24
                          192.103.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:fd:49:e1:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
        Validity
            Not Before: May  8 04:00:00 2018 GMT
            Not After : May  5 04:00:00 2022 GMT
        Subject: CN=03767881-2b84-48c0-84f2-4bdf6efc93f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fc:11:1a:b8:b5:4d:3d:6d:11:5f:2a:0c:e5:
                    48:a2:1c:b4:ec:35:4d:86:1d:bf:53:40:ea:77:9d:
                    8f:36:d9:e0:69:67:62:e0:6a:21:e2:9b:a2:39:e4:
                    58:3b:48:2b:1a:f8:97:98:1f:5e:c6:4c:06:cb:44:
                    9a:b3:e1:6e:cd:fd:5b:d3:3a:ad:3c:2a:c2:ba:e9:
                    f1:80:73:af:04:45:5c:08:3a:fd:ce:74:fa:cd:8c:
                    70:48:2b:c1:c7:ee:0e:e8:e7:f9:42:0c:d3:3c:d8:
                    e8:e1:b0:be:0a:27:e9:c1:74:27:c2:49:1d:9b:62:
                    b6:f2:a2:9e:ef:a3:43:ee:0d:a8:bf:79:8a:52:4e:
                    ea:21:19:e6:5b:b7:5a:cf:76:bc:2c:25:ba:bb:40:
                    7b:1c:1c:92:17:92:e2:db:5c:80:c5:e6:ad:f6:d9:
                    93:f9:4f:3b:09:5d:da:88:8f:dc:f7:8d:87:9a:d6:
                    d8:b7:5b:2c:84:9d:6c:3f:aa:3e:5c:6d:f4:a4:ca:
                    9b:69:e1:0a:b4:3f:70:bc:88:f2:ee:f0:3c:ca:88:
                    43:52:3a:b6:0b:fe:45:5f:89:d4:be:1c:b8:f4:b3:
                    94:5e:60:93:cd:b6:53:d3:bc:b8:99:0e:0c:9b:13:
                    ef:2a:40:17:64:8d:fa:86:f3:0a:29:2b:74:2a:30:
                    d9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:47:9C:C1:52:C0:2F:9C:F3:17:6A:CC:E7:44:0E:16:17:93:7D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/97c3e194-5c5a-3416-8324-a57145bc8860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl

            X509v3 Authority Key Identifier:
                keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b4:6d:ba:f6:36:b8:da:e2:2b:80:76:66:64:cd:91:7d:e3:
         88:79:0f:49:bd:1d:ef:e9:b3:45:a1:71:0d:1a:26:ab:f1:ae:
         8d:df:88:f5:4d:fb:ee:e1:7e:60:3b:a1:4e:51:46:33:fe:4d:
         02:02:49:62:f2:1b:7a:77:0a:85:72:09:ab:ed:d8:63:7c:90:
         a0:b2:2e:26:da:27:bf:10:57:62:87:48:ca:93:37:ed:71:ef:
         bd:4d:a5:d6:3c:c0:2c:7a:41:a0:80:4a:c9:b1:e1:a0:dc:cf:
         9a:f1:13:05:97:6b:cc:ee:d0:15:0b:89:cc:9c:f1:3a:ba:6e:
         f3:fc:20:f1:26:c5:f5:a8:86:cf:a1:7b:51:f2:5a:ed:19:c8:
         e2:57:bf:d3:41:e0:4f:26:f4:b4:81:46:a6:79:e5:86:0d:de:
         b7:11:0e:60:01:50:86:9f:56:c2:0d:cb:9d:77:2b:8f:63:e5:
         bd:41:f8:87:79:a5:46:3b:f6:26:39:72:4a:11:04:18:6e:42:
         70:7d:22:74:7f:c4:75:50:53:93:ed:17:84:a0:e9:7a:ef:9d:
         a1:2a:58:bc:30:bb:01:ba:89:ed:b6:16:66:ee:90:a7:35:a2:
         63:3e:58:4a:1a:a2:76:4f:65:e4:1b:a3:eb:76:9e:73:44:ec:
         c0:ce:22:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----