Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9515c3c0-e758-3a95-873f-664a18e5e326.roa
File:                     9515c3c0-e758-3a95-873f-664a18e5e326.roa (raw, json)
Hash identifier:          sIs6/BvNowLt0lr74uDcB+4Y+IV5B0XgOsx/qIpO66I=
Subject key identifier:   C9:97:C6:7E:C9:F1:66:C4:9F:98:AF:2A:52:E2:C9:4F:83:15:9D:47
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583B59C1A1567482932B0B455500
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9515c3c0-e758-3a95-873f-664a18e5e326.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Tue 26 Dec 2023 05:00:00 +0000
asID:                     397601
IP address blocks:        204.2.128.208/28 maxlen: 28

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:59:c1:a1:56:74:82:93:2b:0b:45:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Dec 26 05:00:00 2023 GMT
        Subject: CN=9448c52b-53e3-4644-bcf7-5f5f8b6c98fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:21:6b:15:53:c2:bb:d1:19:09:fb:49:01:8c:
                    2c:45:71:72:2f:5c:e1:fc:d0:a4:78:c3:0d:80:8c:
                    ab:d8:6b:dc:c3:12:3d:df:4b:3f:86:a5:bf:01:54:
                    f5:80:7a:2a:b0:02:ae:35:68:c2:49:f7:8a:a2:72:
                    50:60:86:9a:9a:88:7c:83:0d:94:51:1b:e1:60:f8:
                    7f:ea:79:a4:90:4a:20:5c:c2:a0:c2:1b:ba:5c:52:
                    7d:a4:7b:19:f6:2a:fe:bd:81:07:76:3c:1c:fb:58:
                    e0:aa:c9:d1:ad:db:fc:58:df:df:57:d2:6d:de:e2:
                    97:51:11:66:f8:97:68:d8:70:e1:f8:88:b9:43:64:
                    ae:fd:05:0f:c9:54:e1:a3:e5:58:66:58:18:2e:8c:
                    cb:94:81:31:a9:e8:9c:fe:db:57:43:6c:35:85:04:
                    2a:c8:ec:1a:ae:5a:d4:89:93:11:14:84:f6:f7:8d:
                    7f:22:52:45:2f:ef:52:46:ea:d9:23:5c:9f:91:04:
                    51:51:fc:09:a7:be:70:78:56:48:ba:92:1e:aa:ab:
                    91:26:ac:7b:38:6d:07:27:a3:bf:de:0e:8d:67:69:
                    6a:e3:56:89:e7:32:cd:35:10:77:35:09:ad:2e:9b:
                    1b:5d:5a:8e:53:e5:3a:72:a7:ca:af:c2:68:6c:48:
                    49:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:97:C6:7E:C9:F1:66:C4:9F:98:AF:2A:52:E2:C9:4F:83:15:9D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9515c3c0-e758-3a95-873f-664a18e5e326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.128.208/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:33:92:17:15:e0:a0:96:c1:d6:ce:ad:7d:33:a5:9b:d4:a4:
         f3:4d:90:49:31:be:c4:c1:9a:3a:6e:46:2b:44:6c:19:19:f6:
         4e:4b:e9:7e:11:cd:50:15:e5:53:54:7f:98:80:b2:2e:bf:11:
         3b:ae:6d:d2:0a:14:4a:c6:71:e3:7f:12:a2:e5:22:c1:77:af:
         a6:e6:63:7b:59:e9:e9:b8:2d:90:c1:eb:d7:2a:ec:6e:f4:c2:
         e8:97:05:d7:84:f8:f9:84:f4:34:20:24:bc:0b:cb:f2:e4:c9:
         16:85:d5:22:d5:4a:a7:5b:d5:87:09:0f:f4:e4:4a:65:43:2c:
         ad:bb:9d:2b:76:7a:22:b4:fa:b8:87:16:f1:90:81:11:7f:86:
         e6:94:6f:15:fb:7c:f0:90:43:d2:39:88:15:c1:af:57:79:f4:
         b2:e5:99:5e:38:44:a2:dd:c4:32:f2:20:1f:d4:79:0e:50:2f:
         22:8d:92:0e:24:f5:fb:d2:d7:b5:6e:cd:d3:47:aa:78:58:c5:
         c0:1f:2a:6d:b7:c6:9d:c3:8f:75:7f:6b:d9:3c:e2:ca:b1:a0:
         f4:99:9e:e0:5f:34:43:be:66:43:54:57:77:2f:73:46:89:cd:
         47:06:46:12:2a:1f:2b:fa:56:75:91:02:39:9e:e0:d1:10:3b:
         7d:ec:9c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----