Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/34a784a2-e3f6-39d4-b5fb-6baef21e9768.roa
File:                     34a784a2-e3f6-39d4-b5fb-6baef21e9768.roa (raw, json)
Hash identifier:          7qgfwDxDJTMiMMBcfjBi4kdhmIimbDL/pyYG1FFq2PQ=
Subject key identifier:   40:78:38:E0:9C:FA:E7:42:0C:54:0E:B2:A7:99:6D:78:F6:9E:58:AE
Certificate issuer:       /CN=91b93de6-6446-4623-a181-5425af4f85cb
Certificate serial:       010D0C9F4328576D51CC73C042CFC16B758EC8DD
Authority key identifier: FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/34a784a2-e3f6-39d4-b5fb-6baef21e9768.roa
Signing time:             Thu 20 Jun 2019 15:43:40 +0000
ROA not before:           Wed 19 Dec 2012 05:00:00 +0000
ROA not after:            Mon 19 Dec 2022 05:00:00 +0000
asID:                     36459
IP address blocks:        140.82.112.0/20 maxlen: 24
                          192.30.252.0/22 maxlen: 24
                          2620:112:3000::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6b:75:8e:c8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91b93de6-6446-4623-a181-5425af4f85cb
        Validity
            Not Before: Dec 19 05:00:00 2012 GMT
            Not After : Dec 19 05:00:00 2022 GMT
        Subject: CN=d8130c22-933b-4c1d-915c-d3b3935e3334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:b8:4e:81:d7:aa:3c:df:37:21:17:4a:26:
                    0d:9c:c5:d8:9a:9e:c9:44:1f:5c:36:8b:4d:65:21:
                    79:3c:85:e9:a0:3d:33:71:da:8f:24:f2:85:60:33:
                    59:be:f5:e4:8a:27:4f:3c:3d:a2:b8:fd:e9:3c:45:
                    27:da:8d:e7:fb:85:c4:3b:cd:27:80:e7:07:49:4e:
                    4e:e7:f3:98:fc:ed:bc:eb:8a:a7:d4:62:c2:81:97:
                    9d:fa:91:dc:b4:85:70:55:c9:c4:c1:b1:ba:52:71:
                    0a:62:e7:b3:5d:7f:4d:5a:15:23:7b:c5:9e:a8:5d:
                    c7:20:74:47:32:d1:f7:f0:3e:a1:66:8b:22:e5:53:
                    2b:80:ab:74:48:3c:11:ff:42:18:76:94:fa:e2:bf:
                    d8:1f:d9:b7:2c:29:b7:86:a7:75:7e:fb:09:29:4c:
                    ff:fb:06:40:ce:b0:b7:8a:2a:c0:a8:db:41:64:e5:
                    3a:2f:27:22:f5:af:64:6c:c1:50:11:2c:e4:f4:52:
                    6f:6e:21:60:29:ae:23:b6:1f:d5:bd:34:c7:5b:00:
                    b7:1b:e5:6e:1d:38:c0:be:21:a9:c7:a6:75:7e:45:
                    26:cc:05:83:c1:ef:25:2a:91:57:3a:8c:e5:de:18:
                    e7:1b:5e:fe:22:88:ef:66:6c:e9:ac:05:3b:5b:1c:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:78:38:E0:9C:FA:E7:42:0C:54:0E:B2:A7:99:6D:78:F6:9E:58:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/34a784a2-e3f6-39d4-b5fb-6baef21e9768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb/91b93de6-6446-4623-a181-5425af4f85cb.crl

            X509v3 Authority Key Identifier:
                keyid:FF:17:C4:E9:06:5A:45:02:E5:72:C0:A9:7E:3D:59:08:C6:24:D3:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/91b93de6-6446-4623-a181-5425af4f85cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.82.112.0/20
                  192.30.252.0/22
                IPv6:
                  2620:112:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:6a:a2:1b:24:5a:d9:00:f7:d6:05:ba:df:10:f0:8c:46:88:
         75:4a:6b:fd:82:5a:3b:45:45:62:fa:34:4e:5d:d5:40:13:96:
         e7:e2:3c:bb:b6:c0:0f:2a:dc:8b:e7:fc:42:59:ff:71:0c:f5:
         7f:9d:77:41:e0:9b:cb:b7:47:74:e7:62:b5:db:01:e9:86:4c:
         8a:4b:30:4d:ca:76:3f:06:33:3a:25:c3:dd:87:96:94:0e:8c:
         d0:f1:d2:a4:7b:de:5e:be:7d:40:3b:66:64:6b:6b:2d:53:02:
         59:d2:d0:e8:2d:bb:a4:9a:9a:1d:ba:4a:92:c4:95:cc:8f:dd:
         da:9f:a8:58:74:c7:7b:11:51:f2:87:d2:6e:6e:5a:11:7d:9d:
         8c:7b:0e:a6:b9:2b:eb:b5:0e:85:68:ff:fd:3f:8b:f0:b0:02:
         48:aa:b2:7a:98:0c:d4:48:9d:b0:34:4d:95:2c:07:20:17:a5:
         38:34:28:c2:0c:0d:32:48:b2:f5:48:a7:ac:4d:b0:9c:76:43:
         0a:f1:56:66:b1:44:6a:2e:6f:64:06:ed:69:be:a7:92:4e:3c:
         71:a2:09:56:89:07:44:4f:06:1a:d0:6c:d8:c5:d7:8e:81:22:
         dd:7e:fc:a8:19:76:80:8f:24:a7:af:98:d8:04:9d:3c:2c:2e:
         90:fe:8a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----