Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/abe1b8bd-c874-3bcb-ba1d-fe37447c834e.roa
File:                     abe1b8bd-c874-3bcb-ba1d-fe37447c834e.roa (raw, json)
Hash identifier:          fPoxcX51i6wWhnyFHjN21jXr0OOvUFGPhsf6OwwY46U=
Subject key identifier:   4A:CC:C9:4B:48:AF:F3:1B:63:96:2D:85:A7:90:4B:38:41:E7:5A:F1
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FFCD5BA3A
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/abe1b8bd-c874-3bcb-ba1d-fe37447c834e.roa
Signing time:             Fri 31 Jan 2020 18:21:02 +0000
ROA not before:           Mon 26 Nov 2012 05:00:00 +0000
ROA not after:            Sat 26 Nov 2022 05:00:00 +0000
asID:                     22070
IP address blocks:        64.99.240.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:fc:d5:ba:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Nov 26 05:00:00 2012 GMT
            Not After : Nov 26 05:00:00 2022 GMT
        Subject: CN=db1557dc-e59a-46c1-9fdc-99b1e84ed334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:b4:a0:58:b2:bb:45:dc:c6:97:d2:96:0b:
                    06:3b:14:3f:57:40:dd:90:15:19:ea:68:9c:72:80:
                    00:e4:54:64:6e:f7:8c:f9:a8:46:f3:24:52:6f:33:
                    37:dd:e7:74:3f:05:d2:18:79:e4:3b:64:f7:4d:38:
                    1d:e0:b8:e7:8e:1d:1b:91:b3:1f:ff:d2:43:2f:c3:
                    d3:7e:86:be:77:0a:c7:2f:05:39:e0:ab:34:3d:38:
                    9b:47:1b:5f:92:73:5d:33:fa:e3:96:37:01:61:dd:
                    5e:fe:57:24:1d:f4:78:0b:b4:6a:5b:97:3b:fc:f6:
                    07:34:ac:6e:6a:ef:47:50:53:d4:7e:46:e2:1c:25:
                    97:23:4e:d6:40:f4:93:78:69:31:d6:96:28:50:58:
                    99:0b:52:50:72:cb:5f:c3:e7:37:3a:ce:8a:6f:55:
                    eb:02:89:b3:db:c8:41:dc:b8:11:a3:b8:a3:f0:ad:
                    ac:b7:1d:d2:0f:e4:d7:0a:b0:ca:08:b6:4b:8a:31:
                    ad:71:26:17:f5:53:71:9a:c6:33:46:31:e0:7d:5d:
                    cb:38:20:5f:93:14:a9:06:14:e7:c6:91:44:69:0a:
                    86:ff:ba:02:72:f9:6f:84:a5:4b:e5:9a:c0:b3:42:
                    7b:55:7f:ee:2a:1f:f7:af:f5:eb:ce:15:85:71:59:
                    18:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CC:C9:4B:48:AF:F3:1B:63:96:2D:85:A7:90:4B:38:41:E7:5A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/abe1b8bd-c874-3bcb-ba1d-fe37447c834e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a9:89:2e:07:d0:df:7f:99:ac:c3:38:49:95:60:1d:d5:2e:
         cb:2b:38:2a:ca:5a:3a:41:fb:84:5d:be:86:87:4f:65:fb:53:
         08:09:44:6b:c8:78:ac:34:31:d4:98:46:fa:cb:7e:a5:a6:28:
         f9:ae:9d:e0:49:ec:84:bf:4f:37:90:1e:3b:08:ff:a1:e1:da:
         58:46:dd:9d:d1:4b:58:30:3c:7f:c0:07:ad:51:16:ac:37:08:
         61:62:ce:26:84:f1:c9:05:ea:8c:ad:cd:89:5c:c9:e6:ff:28:
         ad:82:35:55:60:ff:02:f1:ce:27:4a:be:0b:1e:81:02:87:54:
         5b:11:a3:09:51:53:1c:ca:44:28:82:0a:7a:e5:73:7d:82:5a:
         ae:7c:74:88:71:46:05:90:71:4a:ec:0f:8d:93:7c:8e:78:2f:
         74:fe:55:35:c0:e5:d1:2f:13:d4:8c:8a:a1:9d:74:27:7b:34:
         99:1f:77:b4:3c:a6:cc:68:aa:cf:62:de:19:3c:53:97:76:cf:
         91:21:32:11:55:03:37:49:fb:f3:ff:28:34:93:14:70:20:b6:
         aa:a0:12:18:5b:c0:29:97:83:83:2c:57:8d:96:09:a1:5c:d0:
         59:3e:2f:33:db:e7:9c:0c:3b:74:a2:09:8c:64:11:6d:3c:94:
         2f:2e:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----