Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3bd6175-4b2d-3a9a-98a1-19dd62c2e869.roa
File:                     f3bd6175-4b2d-3a9a-98a1-19dd62c2e869.roa (raw, json)
Hash identifier:          QzPmZcCoCetTKAhtppWbmANN0S/AwEVdM8IqUJtr4oA=
Subject key identifier:   FD:A2:B7:99:7F:EA:DB:BF:07:CD:0E:EA:CB:BA:DA:86:5B:D1:F3:F9
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285838DA1E719DF1F0B399347BBC80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3bd6175-4b2d-3a9a-98a1-19dd62c2e869.roa
Signing time:             Tue 05 May 2020 04:00:00 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Thu 11 May 2023 04:00:00 +0000
asID:                     33696
IP address blocks:        50.114.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:da:1e:71:9d:f1:f0:b3:99:34:7b:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : May 11 04:00:00 2023 GMT
        Subject: CN=58eec6ed-1daa-4a24-9c82-bb9e6b9173b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:39:18:37:1c:e3:13:db:a0:51:63:03:a0:f3:
                    cb:d9:ca:78:82:52:8b:36:c0:9f:25:b2:bc:2a:ea:
                    7d:7e:0a:0b:fc:d3:ab:d1:4a:e8:e7:9f:63:e4:9a:
                    56:45:30:bb:4d:27:8a:a6:ec:8a:28:fc:38:b1:b9:
                    d2:9e:c1:a0:12:2e:81:20:81:98:73:89:0f:c6:32:
                    27:02:01:f9:6a:64:a3:52:61:a1:f3:0a:a6:1c:4e:
                    67:47:c9:ce:71:da:63:4d:2d:fd:cc:21:ab:e5:fa:
                    6e:12:97:c0:68:e0:ef:db:a6:39:a2:b2:e3:1d:83:
                    59:fa:a4:6b:76:6b:88:dd:5c:2c:d0:63:8b:79:5b:
                    b3:d7:87:2b:d4:81:67:0c:c1:fe:75:c5:0a:39:17:
                    13:1b:f4:70:4e:11:2a:d1:36:10:5f:1c:20:d3:bb:
                    21:e5:0d:f6:4a:fa:1d:c3:1b:89:97:f1:5c:b5:57:
                    ab:21:57:41:4f:da:1b:a2:3d:51:65:43:05:bd:2d:
                    6c:74:4d:a9:fb:97:f5:31:a3:aa:7d:99:d9:ae:ff:
                    0d:7b:b0:b7:c1:3e:fa:86:a9:89:08:6a:69:11:9a:
                    f8:7d:96:02:06:1f:2b:71:44:5d:fa:fe:0a:68:90:
                    28:e8:ea:e5:90:b8:f2:ce:0c:10:98:2a:e4:24:0e:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A2:B7:99:7F:EA:DB:BF:07:CD:0E:EA:CB:BA:DA:86:5B:D1:F3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/f3bd6175-4b2d-3a9a-98a1-19dd62c2e869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4f:bf:c8:c6:1d:bf:d3:81:84:51:cb:12:6b:43:49:16:95:
         31:60:d8:c0:72:8d:3b:37:ea:be:7f:91:18:84:74:82:e7:bf:
         04:95:f6:ba:d7:74:1c:46:b0:4b:2b:ed:c6:a0:42:05:f8:92:
         01:4f:9d:47:fd:fd:53:d5:47:94:cb:7d:0b:4e:3f:63:ea:52:
         0e:5f:9c:99:c3:b5:8b:eb:ac:de:c2:5a:e2:7f:d7:54:98:61:
         0b:43:c6:2f:c7:1b:22:1f:58:da:7f:dd:5f:b3:f0:80:25:6b:
         e0:6e:ea:56:9a:39:10:ca:51:60:73:fc:84:6c:bc:e2:32:93:
         45:67:23:c9:78:b1:63:68:9d:a8:a5:dc:a7:e2:5e:57:77:86:
         16:43:db:8a:ff:1a:c9:7f:f9:35:89:84:ca:a3:90:ee:d5:22:
         40:94:dc:73:2f:31:f7:b4:4e:3c:14:92:b1:e1:f3:9b:34:1e:
         31:79:3e:23:17:6a:15:fb:4c:f5:f6:d9:f8:40:4a:b1:23:07:
         1b:bc:3e:25:d2:86:66:9d:78:46:18:63:43:3a:7f:03:6a:46:
         1b:08:bd:1b:b7:76:8a:13:25:05:0f:c1:cd:4d:be:73:a6:32:
         6d:d5:68:94:57:d1:40:a5:f0:a2:c9:95:d3:5c:5f:b9:cc:2b:
         66:20:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----