Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b7a0222d-7e09-3288-8ba8-bd8b8267010f.roa
File:                     b7a0222d-7e09-3288-8ba8-bd8b8267010f.roa (raw, json)
Hash identifier:          S3wXtOH3mt7Rt8UhDuXdIqL1RD8tK0Xc7AcxuxFqAfQ=
Subject key identifier:   76:90:C1:BA:16:ED:FC:68:13:8A:26:D0:71:AE:4B:C0:08:40:9F:9B
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583927EA09AB1591F092531FFD40
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b7a0222d-7e09-3288-8ba8-bd8b8267010f.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Thu 08 Jun 2023 04:00:00 +0000
asID:                     393792
IP address blocks:        204.141.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:27:ea:09:ab:15:91:f0:92:53:1f:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jun  8 04:00:00 2023 GMT
        Subject: CN=f1317109-a134-4334-a8a1-1171641a859f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cf:ab:54:3c:bd:18:79:75:5e:0e:46:bb:5a:
                    85:0a:0b:9d:a8:50:b0:dd:b4:86:26:e9:5e:65:39:
                    59:73:7a:6f:6f:e1:5c:a0:de:1c:9e:fd:7b:81:cf:
                    89:62:0e:3f:61:2f:6c:9b:48:d1:e6:d5:c8:30:3e:
                    32:6b:e6:9f:db:f0:9a:0b:de:2d:f2:48:52:46:47:
                    16:1c:13:d2:20:83:b9:17:fb:27:21:1b:b0:be:06:
                    7e:5b:81:e0:c4:69:2e:53:d3:81:e2:9b:e9:7c:81:
                    f2:14:43:9f:9f:52:27:fc:00:0f:3a:43:0a:7b:8a:
                    66:df:09:4a:0b:f0:25:62:fc:b1:2e:df:55:35:10:
                    cf:17:1c:ad:58:fa:fc:b3:d6:8b:f7:ca:76:de:97:
                    1e:e3:26:03:0b:eb:1a:d6:a0:ec:1b:4c:b1:07:88:
                    e3:e9:f6:f3:cd:2d:1a:28:97:86:d0:5a:b6:8f:1c:
                    bf:e9:7e:06:06:63:68:a8:7b:af:d9:8d:86:ab:6b:
                    f6:a0:06:ba:53:67:3c:c2:e1:78:6b:ff:58:c0:a2:
                    1a:b5:52:f6:b8:ee:e4:30:e7:19:8a:d8:aa:ee:2e:
                    65:df:68:5d:4d:d6:f9:24:26:a9:b1:f7:2d:ab:72:
                    f3:2d:35:74:75:07:75:44:35:18:bb:b5:f5:44:69:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:90:C1:BA:16:ED:FC:68:13:8A:26:D0:71:AE:4B:C0:08:40:9F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b7a0222d-7e09-3288-8ba8-bd8b8267010f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.141.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:60:5c:6e:52:47:37:e7:7c:96:57:10:9e:da:94:78:9d:82:
         16:97:ea:51:dc:f8:a6:fb:0e:08:91:da:79:8a:e0:ec:43:9e:
         ba:fd:72:c4:59:ec:67:c2:25:ff:7b:92:4a:12:13:0c:f8:5d:
         62:ab:b1:18:77:e1:c3:63:78:95:52:24:c9:b2:47:b9:f9:49:
         73:d1:7b:58:97:aa:bb:1e:d5:ce:8e:37:c7:97:7c:62:b7:5e:
         76:fa:1a:92:71:d4:6a:d4:00:19:b5:80:31:85:3e:4d:e9:e5:
         11:83:a2:c2:2c:bd:42:58:73:5f:e8:8e:f1:04:71:16:56:20:
         2f:56:54:3f:a3:ca:31:0e:d7:84:09:53:11:f6:39:51:a6:f8:
         5e:bc:89:dd:ec:f0:c0:05:33:7a:ed:88:20:c8:da:d6:b1:e2:
         65:24:e2:9c:c9:72:b7:1c:8c:d6:87:b8:f4:00:bd:cf:0a:e2:
         c6:71:f7:16:eb:fb:7d:08:74:8b:4f:7c:7d:42:f7:72:cb:47:
         36:bd:c2:90:26:e7:7f:8a:25:70:f6:80:d4:bd:c5:dc:75:a7:
         f4:3c:a6:0f:27:2b:46:9d:c5:23:58:27:5b:4a:99:f5:2f:c9:
         fa:15:fc:c2:61:ed:da:02:62:73:e5:ab:84:fb:9b:95:ca:a7:
         65:5e:1a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----