Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a009395f-8188-32f7-b643-b524b67cd8a2.roa
File:                     a009395f-8188-32f7-b643-b524b67cd8a2.roa (raw, json)
Hash identifier:          FRZa4HCwVuROaY65DrohY+0I+b43TrNSn5ow6IUNePI=
Subject key identifier:   EE:59:17:FE:59:ED:4F:9A:AB:EB:F5:4B:E8:AD:49:5D:47:FA:69:4F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC171DC730993
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a009395f-8188-32f7-b643-b524b67cd8a2.roa
Signing time:             Sun 03 May 2020 21:30:58 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Sat 06 Aug 2022 04:00:00 +0000
asID:                     3949
IP address blocks:        198.87.102.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:dc:73:09:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Aug  6 04:00:00 2022 GMT
        Subject: CN=b3a8c08c-f66c-4c9e-a9ca-1fec678a6b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:53:ba:cd:35:ca:0a:9a:b9:aa:e7:7d:ff:
                    ae:00:d1:c5:e5:98:b1:70:84:fb:6e:fc:45:6a:4d:
                    0f:15:d9:4e:51:d6:da:66:45:3a:d7:76:72:33:2e:
                    b8:5e:52:f3:09:74:23:46:c2:ef:9d:21:ec:c7:45:
                    e7:ec:16:c4:01:b9:8a:f4:2e:25:40:62:e0:44:db:
                    cc:b1:45:ac:7c:9e:fb:2a:bc:e6:52:eb:70:00:9b:
                    e5:f1:7e:9b:61:41:3a:ff:5a:da:51:18:f6:bc:b3:
                    c2:5f:a2:1b:8d:9d:48:ea:d4:36:1c:7d:62:dc:9c:
                    2e:70:11:af:ca:be:97:09:63:14:51:25:1d:71:f8:
                    f6:1b:b3:b8:2c:b4:d9:cc:5a:0b:7e:fe:72:83:fa:
                    43:e7:2f:80:f6:74:cb:2c:0d:f9:2c:38:32:54:33:
                    f3:17:d4:4c:8f:d4:52:fc:cb:34:2b:88:69:ee:6b:
                    d6:b8:39:6f:93:38:b6:0b:1c:61:fa:51:e9:5a:e9:
                    22:8b:cd:3a:f2:05:23:b9:ff:85:93:1a:ac:97:fd:
                    8b:26:56:0f:5e:5c:d3:22:72:2b:54:da:bd:0f:33:
                    ad:6e:bc:48:ff:0b:4e:a6:6a:5a:5a:64:16:c3:dc:
                    46:f2:fa:ca:0a:d8:f5:2b:81:20:9b:98:4e:15:52:
                    26:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:59:17:FE:59:ED:4F:9A:AB:EB:F5:4B:E8:AD:49:5D:47:FA:69:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a009395f-8188-32f7-b643-b524b67cd8a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.87.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:15:c8:ab:43:92:87:ec:5c:24:41:fc:57:81:f5:9f:58:e9:
         9a:03:d2:b9:a1:f9:21:06:49:5a:f9:a2:a0:0a:4b:e9:97:59:
         39:2b:5e:ec:d0:3c:77:3d:55:ad:96:41:f2:bc:35:86:47:fc:
         9d:48:70:75:55:63:81:e0:a7:a4:75:6f:bf:32:9d:af:79:bf:
         da:b0:37:0f:8a:94:71:4a:51:4e:a8:9f:c9:27:c5:0b:c2:9a:
         e8:b9:50:5f:49:a2:6f:78:eb:d6:0a:71:10:5b:2f:ce:76:0d:
         a6:64:d7:ab:01:b1:5f:2a:78:f0:94:41:82:92:cb:36:ae:47:
         14:a2:e5:e4:50:f7:3e:e7:69:30:22:9e:ea:d3:0a:cd:74:5e:
         73:75:1e:f7:67:8f:29:13:ab:30:6c:e9:92:89:0f:73:49:d6:
         ca:a1:90:09:eb:4f:11:38:ab:05:90:ba:52:8f:f2:da:70:88:
         5f:a5:35:95:b8:07:0f:2d:5a:04:df:cd:f5:75:27:80:3f:6c:
         c9:63:ba:7f:26:fc:5a:98:10:74:45:a0:1b:50:e5:53:4a:6c:
         c4:35:b3:14:71:7d:61:4a:de:e5:d3:58:ff:ac:f2:a0:f0:b7:
         a0:0d:01:42:64:eb:75:58:75:61:62:82:91:7e:9a:48:36:8e:
         cb:45:52:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----