Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f4bb9a8-b777-3384-8686-870cdca90909.roa
File:                     7f4bb9a8-b777-3384-8686-870cdca90909.roa (raw, json)
Hash identifier:          6V2YwPOdWVsvMl1JwmdbQLwZkGCZ+kQKrnx0TwZbzEQ=
Subject key identifier:   8F:64:04:F2:44:4F:87:C8:C4:B6:8D:FA:10:B8:8B:EF:AE:D1:D9:AC
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1719B657C69
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f4bb9a8-b777-3384-8686-870cdca90909.roa
Signing time:             Tue 21 Apr 2020 06:20:51 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 25 Jul 2022 04:00:00 +0000
asID:                     267
IP address blocks:        204.42.252.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:9b:65:7c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jul 25 04:00:00 2022 GMT
        Subject: CN=e64e1afe-e805-49dc-a9d9-048f153df487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:07:e0:cc:56:7b:30:0f:10:fa:79:9c:94:
                    2f:02:48:fa:48:c2:25:17:5b:59:54:3e:a0:8b:7d:
                    61:c8:76:52:19:80:73:84:07:49:3a:5c:16:87:c7:
                    ff:e5:79:4c:a6:c6:9d:79:fb:21:38:e8:de:f4:da:
                    8b:b4:1a:a2:95:c3:3c:7b:7c:8b:ee:88:eb:b8:1c:
                    e7:4f:e1:67:ab:47:dc:25:65:7f:30:ad:f1:32:b0:
                    1e:81:be:31:39:a1:3c:14:c4:aa:7b:9a:0b:84:4e:
                    9b:73:62:7d:1d:42:20:37:e1:2c:4b:5c:31:a1:95:
                    73:59:c6:56:c0:70:98:b3:eb:78:90:aa:19:90:fc:
                    41:87:a6:7c:d0:b8:c8:46:56:f5:a7:0a:58:3e:10:
                    67:5c:0e:eb:92:c4:5d:98:94:3d:5c:de:e2:89:94:
                    2c:27:1c:27:84:bf:ab:66:1c:af:a9:34:79:45:8a:
                    4e:f1:a3:26:d3:78:4e:2a:77:ff:c5:87:6d:8b:5d:
                    8b:aa:12:2d:2b:92:0c:0b:7c:9e:e4:e9:ca:6e:eb:
                    7a:ad:ae:75:70:e0:43:db:27:2c:6a:df:b6:1f:48:
                    1b:9f:2d:3a:ad:53:1b:9e:04:d0:e2:ca:54:40:7c:
                    49:e6:5a:02:5c:91:c7:6d:ca:c4:40:83:99:30:8b:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:64:04:F2:44:4F:87:C8:C4:B6:8D:FA:10:B8:8B:EF:AE:D1:D9:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f4bb9a8-b777-3384-8686-870cdca90909.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.42.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:73:84:cd:2a:5b:a1:5d:da:d1:93:8b:98:97:5a:85:19:88:
         75:06:5d:30:22:e0:20:e7:db:20:cf:eb:ed:e6:96:bf:b3:c5:
         19:cb:08:b4:ea:bd:72:41:3f:3f:41:75:52:1d:0c:ae:4e:0d:
         5a:ec:e6:7a:4e:45:0a:74:08:61:f7:34:69:07:76:83:9f:c8:
         c6:f6:62:fb:ec:01:a3:a7:fb:56:3d:5a:da:bc:13:46:ed:c6:
         eb:79:24:b2:ff:ba:f9:b2:1e:2d:6c:69:7d:c4:1c:30:d5:23:
         e7:2c:03:bc:ca:5c:39:18:17:34:17:0e:22:03:4f:4e:e1:aa:
         a6:04:1a:a6:d9:a4:94:a2:ff:73:38:f6:08:12:9a:be:99:3b:
         82:d3:41:0b:d9:0e:a7:fe:3a:a9:dd:8e:43:9c:21:eb:bf:50:
         6b:8b:06:27:35:05:bf:0b:f9:9a:d4:2b:7d:ab:83:a8:e0:2e:
         52:30:ca:7c:51:fd:3e:35:f2:ba:e3:29:59:4a:f8:15:58:e8:
         68:97:02:5f:22:f5:ec:a8:f4:25:87:cc:e7:72:71:eb:bf:33:
         0c:6d:ab:aa:bf:91:1a:81:23:03:e4:cf:11:a6:6a:c3:a8:ff:
         79:0e:0e:e5:b9:b9:95:35:af:ef:d6:f6:b8:9d:b1:ed:23:2e:
         ef:f9:f8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----