Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02623fe2-4bd2-3b18-a844-a62470cbc82d.roa
File:                     02623fe2-4bd2-3b18-a844-a62470cbc82d.roa (raw, json)
Hash identifier:          d2FvcOA1UGPJ7K4XsTmF2ii9f+ajEZcsiADzAb2sktA=
Subject key identifier:   B8:FD:EC:1A:C1:4A:DE:62:49:9D:AA:7D:A4:54:18:F4:B2:C7:01:3F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285839626EDBB26CAF274647B48280
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02623fe2-4bd2-3b18-a844-a62470cbc82d.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Thu 29 Jun 2023 04:00:00 +0000
asID:                     2914
IP address blocks:        129.250.58.0/27 maxlen: 27

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:62:6e:db:b2:6c:af:27:46:47:b4:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jun 29 04:00:00 2023 GMT
        Subject: CN=ac7261bf-cf72-44e4-9652-a0d106485049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5c:33:0b:cd:a1:af:23:85:e1:b5:d6:b5:9d:
                    9b:0c:fd:d6:3c:27:0d:67:18:8f:b0:c8:53:7a:68:
                    5a:5e:2f:82:c1:de:c2:0d:dd:48:06:08:1f:f0:c4:
                    2f:9b:06:b0:16:f4:4f:03:a6:84:17:03:b3:bf:80:
                    ec:cc:a3:c8:53:15:38:d8:dc:3a:51:d3:51:be:64:
                    87:63:3c:ce:49:63:fb:38:01:76:9a:e2:a5:d7:16:
                    00:47:ba:2c:5c:9c:52:54:7b:68:42:fb:77:f0:ee:
                    0c:aa:07:a0:83:20:3a:f9:fe:30:3a:8b:9b:1b:88:
                    12:43:e7:f9:f2:00:31:a8:77:ad:3a:8b:f1:bc:71:
                    23:f9:a3:d3:66:40:7e:47:f3:c4:4c:f3:0d:46:1d:
                    b3:14:e9:73:3e:f5:da:35:54:59:da:47:7c:df:bf:
                    3e:49:df:d5:7f:97:08:b0:c0:8c:15:f4:f6:c4:bf:
                    63:c3:2b:a0:a8:2a:44:8b:bb:e1:81:2b:5e:54:cf:
                    e2:b2:cb:5e:13:4a:cd:3f:23:3f:ee:27:5d:28:87:
                    3e:5d:b3:b5:0d:65:93:48:b4:dc:ee:3c:e7:37:70:
                    01:b0:4d:81:03:d4:ad:47:72:50:29:29:52:b1:3a:
                    7e:44:13:81:cb:8c:ec:b0:59:a3:42:ed:39:57:02:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:EC:1A:C1:4A:DE:62:49:9D:AA:7D:A4:54:18:F4:B2:C7:01:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/02623fe2-4bd2-3b18-a844-a62470cbc82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.58.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b5:8e:16:10:c1:c5:44:42:09:b9:a0:57:70:08:8a:99:e2:
         10:09:98:05:87:7d:32:83:79:49:56:45:09:4c:06:5c:e4:3e:
         04:89:4b:e6:2b:c7:ec:9c:7e:c2:b0:9e:09:cc:78:76:cc:0b:
         22:e6:0a:d4:50:c9:ca:0a:31:e8:eb:3f:28:eb:86:51:5a:6d:
         fe:b2:b3:71:6d:c7:73:25:12:24:6a:94:af:d5:5f:b1:72:b0:
         df:a6:1a:9d:7a:6d:54:c6:60:1d:1b:4d:c2:55:1b:63:8e:f7:
         72:ee:e7:45:f1:9b:91:f0:43:fe:66:9d:66:0e:74:f6:7f:46:
         a9:04:00:c7:30:36:d2:db:2f:ba:df:41:29:1c:9d:c4:ba:51:
         9e:cc:6c:59:f4:3d:52:23:44:76:58:74:47:7a:0b:59:c4:dd:
         6e:b7:2e:bc:c4:79:11:14:e0:72:c1:c9:e6:df:2b:e8:79:9e:
         a4:7c:e3:85:33:90:7a:20:56:d0:f4:07:c5:63:b6:a8:f3:6e:
         82:a8:31:6c:94:d5:3b:6d:ec:1d:e3:cf:5a:78:4f:f9:92:ab:
         83:3e:fa:55:50:f1:0f:03:0b:77:a5:57:17:b6:9b:dd:f3:c2:
         69:af:65:83:19:d6:58:4e:5a:c1:06:e4:e2:99:f1:61:dc:a2:
         5f:09:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----