Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/48dc4afc-08b1-3d85-846a-9c3a6f065c1c.roa
File:                     48dc4afc-08b1-3d85-846a-9c3a6f065c1c.roa (raw, json)
Hash identifier:          vO+up6ulhXQcLdkPQFM7vYuTR9waUtk/KFDXw0KzbRQ=
Subject key identifier:   EB:AD:EC:84:A0:5C:CA:D3:D3:42:D3:97:51:95:F6:45:A4:5A:30:B2
Certificate issuer:       /CN=5fb6f799-d584-48a1-9c74-50e91497918a
Certificate serial:       010D0C9F4328576D51CC73C042CFC16611EF1626
Authority key identifier: B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/48dc4afc-08b1-3d85-846a-9c3a6f065c1c.roa
Signing time:             Tue 25 Sep 2018 18:12:53 +0000
ROA not before:           Tue 25 Sep 2018 04:00:00 +0000
ROA not after:            Tue 22 Feb 2022 05:00:00 +0000
asID:                     7018
IP address blocks:        172.0.0.0/12 maxlen: 12

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:11:ef:16:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fb6f799-d584-48a1-9c74-50e91497918a
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : Feb 22 05:00:00 2022 GMT
        Subject: CN=86f533f2-0db6-40bf-9540-ec2c1f07c12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:f4:0c:c1:9f:52:30:ec:8c:49:9c:e8:7e:
                    1b:5e:36:c1:05:f9:71:0b:19:cc:3c:bb:b0:89:ed:
                    e0:79:dc:f0:0e:0a:fd:2f:dc:e0:ed:9c:c3:ae:a0:
                    93:86:84:63:f2:6f:ea:85:c2:48:d6:96:0c:e6:80:
                    25:88:14:44:b9:0d:ff:5d:a1:f5:98:a1:18:12:ee:
                    ee:d2:1b:d0:98:30:44:3c:04:70:34:10:12:8d:73:
                    10:62:98:47:6d:c7:0a:d1:b4:fc:1c:d2:29:bc:08:
                    a4:1b:e3:19:67:41:b8:b6:bf:62:2e:c8:fe:77:06:
                    31:cf:6b:76:84:8e:3d:fc:22:7a:6d:e6:9d:f7:df:
                    3a:ae:8f:5a:1a:5f:f6:d4:61:38:5f:e0:2b:6f:70:
                    12:7f:ba:44:aa:a8:b1:bb:a9:f9:f5:78:a1:ac:97:
                    54:7c:bb:6b:9a:9f:53:5c:ad:b5:bd:84:7a:29:3f:
                    f2:8e:83:66:45:af:b5:de:49:17:70:d5:36:a1:22:
                    10:86:11:68:2f:38:55:cc:98:bf:41:44:48:af:81:
                    45:84:f5:a9:5c:54:ee:87:b8:6d:04:c0:5b:ee:f2:
                    7a:fa:f2:e5:5b:5b:d6:c0:87:a5:9b:5d:25:35:67:
                    5b:5f:92:0f:44:f7:9d:0d:84:15:bc:34:db:7d:ac:
                    b4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AD:EC:84:A0:5C:CA:D3:D3:42:D3:97:51:95:F6:45:A4:5A:30:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/48dc4afc-08b1-3d85-846a-9c3a6f065c1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a/5fb6f799-d584-48a1-9c74-50e91497918a.crl

            X509v3 Authority Key Identifier:
                keyid:B4:66:3F:CE:6F:9C:67:45:04:4A:C3:43:91:B7:37:A9:FC:E2:26:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5fb6f799-d584-48a1-9c74-50e91497918a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.0.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c2:6e:0a:34:36:98:0a:ac:21:53:9d:ac:a4:ca:5a:51:c0:
         d6:5f:66:f7:e9:ae:e0:96:06:2e:32:48:a3:75:8a:ec:f2:98:
         11:6a:67:27:d0:fe:8c:06:ac:8f:61:33:e2:d6:52:6b:45:9c:
         48:3c:3e:a4:86:69:fe:17:07:9d:a8:e9:4a:4a:93:04:ff:e0:
         34:27:cc:ff:2d:64:90:ba:80:b1:d5:85:e7:b0:a6:76:03:df:
         fe:2b:ce:c3:64:8c:e0:69:7c:3a:fa:2b:fa:93:02:32:d9:bb:
         7c:b1:05:ee:91:d2:d5:a8:06:32:2e:42:e4:54:e5:a9:2b:c0:
         21:0b:6d:4c:bd:b3:c5:24:6c:cf:1c:15:cb:4e:f4:78:7c:16:
         a6:32:79:0d:71:ec:78:ac:de:ec:38:bd:e7:c7:7b:0c:a3:8d:
         7a:dd:6b:18:9e:7f:a2:a3:b4:66:69:b5:a1:4f:7c:87:b7:38:
         52:74:4d:b1:a7:a4:f9:d2:69:07:cc:ee:57:80:26:c8:57:e9:
         40:b3:64:4c:e6:31:19:68:01:85:2b:b2:60:9f:ed:60:d9:fb:
         72:b8:ff:da:5a:39:41:b1:91:fe:b5:f4:07:04:87:22:56:9a:
         c2:be:71:00:be:87:0b:5e:8d:b2:ef:cf:80:69:09:97:ad:ba:
         72:ee:67:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----