Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/c76c740b-8c84-3c0a-8cd2-201464267108.roa
File:                     c76c740b-8c84-3c0a-8cd2-201464267108.roa (raw, json)
Hash identifier:          hlEh2yhksJkCQj4xNfGT8WbHQM8+2+L+AuWn0+wXNBs=
Subject key identifier:   EF:3C:21:C7:31:42:A1:29:DE:AF:EE:8E:D2:BB:2D:61:F3:89:58:E7
Certificate issuer:       /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial:       010D0C9F4328576D51CC73C042CFC172A42200C3
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/c76c740b-8c84-3c0a-8cd2-201464267108.roa
Signing time:             Thu 11 Jun 2020 16:06:31 +0000
ROA not before:           Tue 08 May 2018 04:00:00 +0000
ROA not after:            Wed 14 Sep 2022 04:00:00 +0000
asID:                     393891
IP address blocks:        192.103.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:a4:22:00:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
        Validity
            Not Before: May  8 04:00:00 2018 GMT
            Not After : Sep 14 04:00:00 2022 GMT
        Subject: CN=c92426a3-10b5-4074-9cb1-6d8afabd48a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:13:45:75:48:29:a0:79:e1:c6:b5:78:82:
                    e4:83:52:71:e3:c4:54:23:2c:6e:87:36:f8:9b:9d:
                    75:fb:30:c1:29:b3:66:b4:7e:ef:60:96:38:dd:28:
                    e9:3a:c8:3f:05:2d:69:a6:aa:6e:db:c7:07:d5:bf:
                    8c:6f:8f:f4:85:d6:bf:0b:bd:74:cb:4d:1f:86:e6:
                    62:95:39:a4:2e:ea:68:e3:b9:1e:90:80:5a:b1:f5:
                    3c:a7:05:ae:33:2e:af:fe:5d:04:08:fd:88:81:d8:
                    cf:84:6f:b2:ad:fc:7d:d0:7b:05:4e:00:b9:d9:12:
                    25:71:e5:29:68:43:4e:98:14:40:78:a1:7b:c3:8b:
                    45:9d:12:d9:31:32:98:23:8c:44:4e:82:53:f1:a5:
                    ab:e2:93:34:0f:56:d5:1c:13:70:86:d3:9b:06:be:
                    e5:48:92:ca:a3:f5:ea:a5:31:c0:02:c0:51:0b:2f:
                    1b:c0:89:7b:e4:eb:b3:16:0e:59:d1:1c:8a:56:a4:
                    e9:f6:a2:3a:5b:61:f4:b3:72:c9:13:59:6e:35:0c:
                    b6:22:9e:23:95:a7:de:81:c1:e2:af:01:00:4a:e1:
                    29:45:22:14:d4:1d:27:e0:f8:15:10:76:a9:e9:41:
                    b5:c6:1b:1a:d1:6d:d8:6d:25:4f:12:a1:a8:13:fe:
                    d8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3C:21:C7:31:42:A1:29:DE:AF:EE:8E:D2:BB:2D:61:F3:89:58:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/c76c740b-8c84-3c0a-8cd2-201464267108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl

            X509v3 Authority Key Identifier:
                keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3b:3c:7d:d9:83:9d:e8:b2:29:3b:dc:65:e7:f0:49:b8:4c:
         78:52:c2:dc:2a:0d:6e:84:1e:97:08:76:3b:c0:1a:e9:45:6d:
         32:a4:5d:f1:74:b2:4f:95:ee:ae:d7:96:dc:a8:59:3f:5f:35:
         68:83:51:fd:cb:18:d5:10:83:53:3d:e1:5d:e7:1b:5a:c7:01:
         02:ef:87:79:f4:9f:0a:e3:93:73:2a:a2:e4:3d:61:0d:4c:ac:
         e7:ab:dc:19:bf:a5:7e:c0:15:3e:00:c3:09:7c:f3:ec:61:09:
         72:54:c8:43:cc:94:92:1b:82:f9:ad:d1:3e:d9:b2:0f:d9:46:
         21:a5:04:59:7d:a3:89:f7:84:74:a4:d9:a4:d8:31:03:b7:51:
         35:f0:99:df:f1:0a:ee:f3:67:24:9c:13:a0:87:1e:cd:c0:f6:
         62:7f:49:e6:e4:b3:a2:94:e9:e5:3c:c3:ef:15:9a:fb:13:ef:
         b0:32:fd:3c:9b:31:b4:b9:81:bc:66:7c:42:c2:62:a9:c0:dc:
         78:76:0d:ea:ae:99:19:2d:32:43:b3:3f:a6:20:ad:60:e5:48:
         d8:20:ba:c6:aa:92:c9:b8:2a:c3:62:e7:9c:87:d1:32:f2:7f:
         03:4c:c2:c7:d5:32:f9:3e:30:9c:d1:bb:ec:9b:95:9f:e6:f5:
         64:4d:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----