Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6503fd69-c609-3c51-b00e-77f1c6e29c0b.roa
File:                     6503fd69-c609-3c51-b00e-77f1c6e29c0b.roa (raw, json)
Hash identifier:          SRjPKzJ2hD3F88umSRmMtlUi9Puj1TJ6sTHMpdToBn4=
Subject key identifier:   C4:9F:E8:8F:77:0C:5B:AF:BF:1D:F7:3B:6F:F5:2B:5F:43:37:BB:03
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583989DD60AAF017B5DA79FD4280
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6503fd69-c609-3c51-b00e-77f1c6e29c0b.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Thu 13 Jul 2023 04:00:00 +0000
asID:                     271509
IP address blocks:        200.15.12.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:89:dd:60:aa:f0:17:b5:da:79:fd:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jul 13 04:00:00 2023 GMT
        Subject: CN=2dbe0384-3328-4f82-aa29-98cd047e8620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:44:2a:6d:3d:9c:ac:78:51:c5:ab:2f:f8:f4:
                    20:48:84:2f:92:c3:3a:c2:82:26:57:bd:4d:2a:34:
                    56:ef:0b:bc:b4:be:6a:60:3a:51:80:57:90:ce:3e:
                    8c:c8:bc:ed:02:4e:9a:f1:5d:3e:51:37:09:7c:41:
                    33:38:34:ba:84:7f:0d:da:46:46:9d:65:15:58:a7:
                    d0:0d:a3:2f:e9:4a:38:cc:aa:13:34:b4:f5:6f:50:
                    2b:97:25:ee:25:01:36:f5:05:1c:68:e0:14:69:11:
                    4d:cd:dc:5f:a3:07:19:04:64:b5:25:c9:9b:ec:d2:
                    c8:d5:ca:3d:9c:a2:eb:2d:5a:58:d9:f8:f6:00:a8:
                    9c:ad:20:16:62:77:12:fc:34:3f:22:72:d4:97:d6:
                    ff:3c:70:9f:f8:4c:73:fe:ec:50:f1:5a:a9:4a:9f:
                    66:77:36:14:b9:31:e2:23:de:b0:81:d7:30:95:63:
                    a1:78:d3:cb:38:f0:78:03:0a:09:15:cf:dd:db:d6:
                    d6:d3:0b:a1:47:45:01:4a:b9:26:4e:22:bf:6a:9a:
                    a6:0a:af:80:70:3a:b3:df:a7:d9:dc:9d:45:99:3a:
                    6f:68:4a:26:01:1d:d4:a8:12:bc:98:a8:7a:e7:b8:
                    ea:b5:7a:a6:de:a9:21:31:38:34:06:e8:83:40:ff:
                    40:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9F:E8:8F:77:0C:5B:AF:BF:1D:F7:3B:6F:F5:2B:5F:43:37:BB:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6503fd69-c609-3c51-b00e-77f1c6e29c0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.15.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:dc:df:98:58:a0:4a:1e:42:13:07:bb:d8:35:a8:6f:27:d7:
         07:ce:4d:da:a9:6a:42:e1:80:ec:57:70:c7:de:73:55:ed:28:
         2e:ed:0b:6f:bc:0c:c6:6d:51:00:d9:c3:ea:29:6b:f3:a9:71:
         62:ec:4c:c2:5d:dd:c9:61:fd:1f:e0:3c:7b:55:91:f4:57:f5:
         b5:c9:0d:5c:77:99:ea:69:ee:a0:b6:2b:39:1b:e0:d7:7a:e7:
         4f:d2:69:94:e7:5a:4a:ef:ce:0b:e7:87:5f:bc:1b:75:e6:ff:
         51:42:b3:d1:46:d1:98:fa:dc:bc:b1:9b:2a:ef:82:ac:7f:1f:
         40:2b:d2:2a:6d:f4:87:ba:0f:c3:3c:b8:3a:e3:f1:cc:c3:b9:
         96:4a:02:cc:fd:28:f9:78:61:12:c2:df:f7:d9:23:fe:5b:f3:
         f6:8c:fa:72:5f:b0:fb:2b:58:af:1f:3a:74:fe:4e:bc:76:7a:
         33:e3:79:2e:45:3f:21:82:15:07:7b:71:81:be:5c:7c:5a:3e:
         e5:bf:43:2a:3e:57:02:11:27:c6:de:48:17:0e:11:84:7e:4f:
         64:70:d4:bf:6f:d8:3b:b2:9b:c1:eb:47:24:1b:7e:9b:22:0e:
         ce:3d:ad:2e:36:4b:64:33:24:23:a8:22:c5:03:ff:14:df:03:
         4d:31:05:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----