Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c73cb6b6-1d0c-3158-bfe2-bf2028da03f3.roa
File:                     c73cb6b6-1d0c-3158-bfe2-bf2028da03f3.roa (raw, json)
Hash identifier:          im+VTCi3RrgkgPwMAZYOYJgbVmwQX2hfTGRTx//zy88=
Subject key identifier:   79:CE:50:AD:15:EF:F2:3A:3F:31:DD:D1:17:E3:3F:5D:40:61:41:D4
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC17398937E37
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c73cb6b6-1d0c-3158-bfe2-bf2028da03f3.roa
Signing time:             Wed 29 Jul 2020 03:17:49 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 31 Oct 2022 04:00:00 +0000
asID:                     275
IP address blocks:        2001:418:144d::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:98:93:7e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Oct 31 04:00:00 2022 GMT
        Subject: CN=1adb41f7-eb13-494b-ad23-0ce3ae3322d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:37:2e:a8:a4:2d:b1:e4:34:3e:8b:48:7d:
                    e1:e7:e0:05:6f:a0:95:f1:8e:95:71:38:90:82:c4:
                    cd:5b:93:6e:11:9e:91:e4:71:60:64:04:c5:62:95:
                    07:ba:09:18:0a:00:09:9c:76:aa:71:fa:77:07:74:
                    64:3c:1d:8d:ab:f4:b5:21:33:83:89:62:ce:fe:e4:
                    f8:39:61:e8:67:9f:15:39:fc:9f:15:31:81:5c:58:
                    dc:a4:13:4b:33:74:75:c4:0b:54:d9:30:8b:7b:b4:
                    67:dd:4a:ac:aa:7f:e6:7b:f0:f0:79:45:be:32:6b:
                    a0:61:29:3a:fa:c3:5c:51:76:ad:d8:ac:8e:a8:94:
                    2a:8a:95:60:58:39:33:f9:0f:99:32:5f:96:19:7b:
                    c5:af:27:a6:05:ee:44:50:c5:b7:64:04:1e:de:77:
                    d5:ba:23:84:f6:36:e0:c8:00:9d:11:69:d2:0d:c3:
                    d5:06:0a:63:71:8d:75:38:17:73:68:0e:18:0b:65:
                    bd:97:2b:b1:e5:87:7e:4b:1b:c2:e0:8f:5e:f0:95:
                    fa:0a:0b:7a:e6:b3:35:cb:ea:47:55:1b:52:c8:87:
                    cd:8f:a8:71:95:29:f3:20:ac:8a:4e:ef:81:ad:5e:
                    63:d7:31:cf:e5:23:89:38:f2:8e:4f:5a:b3:72:98:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CE:50:AD:15:EF:F2:3A:3F:31:DD:D1:17:E3:3F:5D:40:61:41:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c73cb6b6-1d0c-3158-bfe2-bf2028da03f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:144d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:5a:f4:00:46:73:93:24:40:46:0b:2a:44:67:fd:aa:15:eb:
         86:2d:35:8b:b2:72:e2:20:ba:b7:42:16:0d:8e:81:63:2c:3d:
         cf:42:18:35:3b:92:9d:82:57:c5:37:14:4f:9e:71:80:7d:cc:
         80:50:09:d5:07:a8:54:94:7b:e5:4d:7e:56:13:af:2b:62:6a:
         d9:11:ce:70:39:a0:c5:59:fb:8a:6f:3c:e0:cc:1a:f2:7f:d6:
         38:b7:7d:9a:bb:be:b2:f6:f7:9c:08:34:1c:1c:b1:a1:f1:c6:
         18:45:2e:e2:7f:e9:2f:e7:6a:f0:14:42:02:fe:a5:b5:c5:38:
         7e:3a:db:dd:88:54:e0:8e:bc:ae:ec:60:99:83:c3:a5:11:a5:
         22:f5:40:c6:6e:e2:d4:9d:5f:18:fa:05:0d:d8:1c:b6:b8:8c:
         79:73:2c:3a:da:da:e1:bb:ba:45:81:51:00:65:8e:a1:ab:73:
         e9:15:75:a3:b4:96:21:82:d5:87:7d:b4:e7:37:b0:4a:40:f9:
         fe:9f:92:d1:7d:8e:32:30:e3:4b:94:b4:8c:c3:55:85:e3:17:
         b1:3a:ec:9f:e3:39:a9:cc:d2:02:df:c2:0b:c4:ac:02:c7:9e:
         58:ab:27:72:45:d0:12:b0:9d:b4:f3:c3:6d:f1:2f:c6:ec:12:
         89:47:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----