Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/357c7197-8bba-3ff0-a3f6-960fa216f765.roa
File:                     357c7197-8bba-3ff0-a3f6-960fa216f765.roa (raw, json)
Hash identifier:          F19GrKD9mUr58PUXFKctrleUGv5S4wJv7OHYUUuxiVw=
Subject key identifier:   9C:89:7E:B4:52:30:3E:C2:30:3A:F4:23:B1:B0:2C:25:6D:E7:0C:49
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735DD4EEC9
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/357c7197-8bba-3ff0-a3f6-960fa216f765.roa
Signing time:             Fri 17 Jul 2020 17:31:42 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     19893
IP address blocks:        165.254.220.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5d:d4:ee:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=3ebe867b-6aed-4e17-819b-9a3d328ff35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:5c:39:19:d8:2a:f5:06:fe:3f:65:1e:ec:
                    57:59:fa:b5:74:e3:c5:51:d2:5d:a4:33:b4:f8:72:
                    87:ec:ed:d3:df:ab:4f:0a:26:3b:62:cd:a0:16:1e:
                    cf:8a:e9:fe:7d:f0:0c:ae:62:a4:48:31:ce:a0:24:
                    f0:e7:db:05:c8:0b:ec:51:48:a9:d1:84:f2:8f:23:
                    90:c5:7a:41:02:04:82:91:67:05:7b:cf:9c:c4:e1:
                    a4:4d:51:11:08:4a:9d:73:0e:fb:fd:56:4b:53:cd:
                    66:e3:b5:0b:47:be:03:50:8b:4f:54:8f:80:65:e4:
                    ba:5b:d4:39:7c:25:5a:c9:e9:4e:51:f7:f1:15:bb:
                    3e:83:bc:c9:b0:fa:5b:db:8d:b5:23:df:05:ee:b1:
                    2d:a9:f2:4e:7a:dd:b7:73:5f:9b:a6:c1:c3:bd:75:
                    20:26:45:b3:b2:bc:ac:66:94:8c:20:8f:4f:3d:60:
                    ff:ec:da:b1:b0:f4:eb:ea:15:b0:ad:9a:16:6b:8a:
                    7c:74:75:59:cc:5c:53:bb:a0:9e:79:91:2f:10:b7:
                    37:64:9c:00:46:23:99:80:0c:67:72:ac:e8:41:d9:
                    68:36:7d:44:b7:be:f2:40:24:dc:0d:d7:4c:c3:00:
                    0a:5c:c2:32:ed:cc:84:5d:a7:fd:9c:46:cd:8a:1d:
                    7c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:89:7E:B4:52:30:3E:C2:30:3A:F4:23:B1:B0:2C:25:6D:E7:0C:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/357c7197-8bba-3ff0-a3f6-960fa216f765.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:6d:83:c8:86:14:f3:a0:dd:be:eb:c1:53:9a:aa:b9:8a:b8:
         ed:f9:09:57:7a:ab:09:de:d0:4e:00:2f:c2:7f:09:11:fa:86:
         02:21:d4:df:99:eb:08:b1:50:73:d8:cb:8f:9d:de:c3:db:57:
         da:15:35:29:78:ab:e1:b5:6c:9e:9c:15:6a:a3:19:48:c2:fb:
         49:a8:10:78:42:ef:ff:bb:1a:09:b3:49:31:bb:36:04:1b:ae:
         3b:7c:c0:4a:be:c0:73:f9:d7:f6:1a:35:59:34:bf:31:11:f9:
         6e:1b:cb:d2:a6:60:1e:3d:2a:b2:15:2f:88:18:63:7f:a5:ba:
         2b:1a:70:8b:18:24:ed:e0:17:4c:72:45:91:cc:16:06:8e:f5:
         2c:2d:05:57:c6:a9:21:04:96:14:77:b6:8d:8f:10:3e:e2:e0:
         9d:ea:e7:8c:76:bd:6c:90:ab:dc:f1:6f:09:4b:2c:1a:0d:fe:
         1d:34:a7:04:cd:9c:dc:ba:e7:79:6b:2f:f4:bc:49:c3:1a:41:
         78:7d:75:23:89:c9:e3:d8:d4:34:0e:9e:2b:bd:3a:02:0e:4f:
         20:33:a5:24:3a:e2:68:c2:d5:2b:87:ff:13:1f:3d:09:e6:f5:
         e2:39:66:34:06:9a:0e:41:cd:12:81:75:a5:1c:b6:00:88:96:
         29:7b:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----