Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/9073904d-7724-3889-8bee-738495820ac2.roa
File:                     9073904d-7724-3889-8bee-738495820ac2.roa (raw, json)
Hash identifier:          BdRyETgUotiT6KRyyQj3CB5KJwzPcLfZSVUbWgr25qg=
Subject key identifier:   1E:1E:22:68:0A:2F:66:8F:0E:2F:22:1B:01:1C:44:EF:76:AB:B5:C6
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328576D51CC73C042CFC173B59F19BD
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/9073904d-7724-3889-8bee-738495820ac2.roa
Signing time:             Mon 03 Aug 2020 18:39:29 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sun 06 Nov 2022 04:00:00 +0000
asID:                     32133
IP address blocks:        64.98.192.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:b5:9f:19:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov  6 04:00:00 2022 GMT
        Subject: CN=3cbd204f-bb96-41b5-8d93-f42c5ef888d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:2e:88:8b:2b:97:f7:da:e9:d6:43:73:cb:
                    af:f1:6d:12:33:43:11:d6:52:2b:c6:f7:3e:ce:3f:
                    93:01:f3:d4:d6:27:18:98:46:87:31:6a:6a:b9:3a:
                    f1:57:52:6a:0c:14:6d:e0:5e:08:63:a7:7e:5c:88:
                    d9:4e:27:c2:c3:ac:b8:fe:6d:15:a6:83:34:74:49:
                    c0:7c:17:68:9c:7c:9c:55:f8:89:5e:a3:38:af:23:
                    77:03:40:26:ad:b2:56:2a:4e:40:fc:44:82:84:3d:
                    f5:20:b1:27:ed:76:86:69:f5:0c:a7:63:0a:be:b2:
                    a5:2c:28:ff:94:b1:81:9f:d8:76:2e:87:15:c8:f0:
                    70:37:2b:37:93:a4:4a:6a:3b:0d:d7:ea:33:86:b3:
                    48:ba:29:03:58:4b:be:7d:2a:5f:60:e4:e2:98:df:
                    ee:0f:80:5d:46:ee:07:47:c9:b7:5f:da:8e:b9:50:
                    ba:a3:33:60:59:fa:23:da:3e:82:12:c8:7d:a4:7c:
                    ee:2b:2c:f2:f2:c4:47:4b:67:cc:5c:4a:94:76:9a:
                    77:4f:b7:d5:5a:e9:9f:81:2f:51:ff:0a:c1:5a:cf:
                    de:0f:dc:44:fa:0b:8e:6b:41:7e:e0:dc:ac:87:c8:
                    0c:6b:3f:73:ae:59:2a:72:cf:04:5d:d3:47:5c:69:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1E:22:68:0A:2F:66:8F:0E:2F:22:1B:01:1C:44:EF:76:AB:B5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/9073904d-7724-3889-8bee-738495820ac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6e:b1:94:54:06:38:85:c0:1d:52:cb:17:9d:f2:10:12:0a:
         b4:d0:8d:70:a3:87:b1:c4:e0:e1:d3:cf:4c:ed:b0:aa:23:d3:
         46:fa:6d:cf:2b:92:e2:85:2f:1c:19:7a:c4:f9:1f:c5:0c:38:
         09:e6:2e:84:16:93:69:32:ec:1a:9e:ba:71:3b:b2:09:e6:32:
         26:d0:d6:6b:1e:ac:16:00:3d:79:4a:89:a6:30:e2:26:c2:3c:
         72:6a:59:24:4a:94:49:43:46:d4:30:4e:51:54:58:80:b4:84:
         b3:0b:b9:48:e5:92:f2:fa:57:eb:e9:cb:fb:8c:5b:bc:cc:32:
         eb:2d:a1:8a:73:10:32:4d:ca:14:f8:8e:66:be:bf:98:18:4a:
         06:5c:4e:8a:61:9c:76:e3:62:75:bd:b0:c9:7f:39:10:64:c2:
         d1:00:45:7d:7c:6b:62:5d:eb:c8:6a:4f:a8:34:23:98:f0:e7:
         10:7f:46:f2:50:73:5d:52:da:a6:a6:78:95:6b:f4:9c:d1:2b:
         6b:db:da:cb:3a:f2:0e:29:8b:cd:70:79:30:21:12:90:1d:c8:
         bd:c5:32:30:c6:38:27:45:50:77:11:70:71:4e:d6:99:29:a4:
         21:12:bd:2e:4c:d4:18:bc:02:dd:cf:c7:04:c4:a1:d2:80:3e:
         1c:9e:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----