Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/e37fdf51-b2d7-3b74-821f-0eda24c29987.roa
File:                     e37fdf51-b2d7-3b74-821f-0eda24c29987.roa (raw, json)
Hash identifier:          Goz4Hudc934knhKl4ZNCWLSnAP+7op78JuxFqooqaJw=
Subject key identifier:   42:CC:43:58:24:37:B2:57:66:7F:54:FE:C5:6D:55:DC:11:AB:C7:8F
Certificate issuer:       /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial:       010D0C9F4328583728B47CE0D1A309BC2881A000
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/e37fdf51-b2d7-3b74-821f-0eda24c29987.roa
Signing time:             Fri 17 Jul 2020 04:00:00 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Wed 07 Dec 2022 05:00:00 +0000
asID:                     398797
IP address blocks:        199.255.148.0/22 maxlen: 24
                          2602:fd1e::/36 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:28:b4:7c:e0:d1:a3:09:bc:28:81:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Dec  7 05:00:00 2022 GMT
        Subject: CN=4f373a5f-77a8-469c-99df-18fcc854945c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f1:94:1b:97:fb:15:8a:ea:b2:cf:2f:de:85:
                    2f:1c:47:66:3a:54:ab:1f:87:83:29:52:e7:e6:ea:
                    c8:88:2f:68:ad:5c:f9:25:4f:5f:d8:b6:d9:fd:ed:
                    9c:61:c3:16:bd:0f:69:75:41:42:4f:d9:5a:60:a3:
                    ea:98:6b:6f:91:82:ec:ab:72:93:99:fe:5e:0d:cf:
                    78:d1:8b:b7:6c:1c:78:ba:f8:88:b2:2a:94:0b:91:
                    bb:22:84:d4:36:d8:b2:a6:0e:bf:c8:d6:68:3d:c7:
                    0a:bb:07:ad:9a:d0:6e:e8:23:5b:17:ab:30:f2:c7:
                    0c:81:cb:95:73:12:80:cc:60:c6:5e:72:6a:04:8a:
                    38:da:cc:d5:09:fe:b4:cb:99:c2:8b:c6:9a:83:42:
                    58:3e:2e:dc:c5:80:f3:71:c7:d7:22:e2:51:dc:ab:
                    4a:7a:f0:61:92:f2:e2:40:d0:6e:e5:79:3e:fc:7b:
                    32:7a:6f:1f:db:1a:2f:96:bc:08:9f:da:47:24:b6:
                    1c:96:0d:ed:3a:4d:51:97:78:dc:90:19:89:88:74:
                    76:12:af:ac:c4:aa:e3:ec:69:2d:01:9e:5b:56:02:
                    eb:a8:98:ed:d0:70:6b:71:81:db:e1:d6:11:18:5f:
                    b5:37:43:60:6e:af:d3:50:33:17:23:dc:f1:4e:ca:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CC:43:58:24:37:B2:57:66:7F:54:FE:C5:6D:55:DC:11:AB:C7:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/e37fdf51-b2d7-3b74-821f-0eda24c29987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.148.0/22
                IPv6:
                  2602:fd1e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:8d:89:15:80:18:3b:0d:49:5e:18:03:da:3f:52:07:da:cb:
         6e:19:3d:c5:ec:3a:fd:8f:50:b2:8d:00:29:e9:14:15:bd:31:
         81:89:d6:31:d7:f9:a4:c0:d8:c4:4c:17:fd:46:23:51:58:81:
         7b:1c:8e:34:f9:da:13:ed:6a:08:a2:4e:44:56:d6:1d:e3:65:
         d2:44:a4:70:52:29:ea:1b:5a:c3:63:43:3e:4f:0b:dc:21:e6:
         0a:3d:a2:79:c7:80:51:a9:d0:2d:e5:e9:5d:59:7f:1e:8e:ae:
         14:91:d8:02:6b:20:d0:bd:cd:dc:44:87:3d:a9:41:ed:f9:4b:
         88:c2:e4:83:cf:0c:00:e3:65:9b:01:ae:29:bd:4f:3b:38:a0:
         d5:e2:eb:c6:63:54:b9:4c:61:35:d3:15:60:90:0c:df:83:99:
         62:a4:13:42:08:b0:4b:48:5c:5f:dc:a3:d6:57:be:7a:df:b6:
         09:a3:80:5f:26:ad:4d:47:3b:e9:3c:44:c4:91:03:e9:d4:26:
         cb:6f:91:1b:17:a4:d7:94:7a:96:c1:3d:2e:08:b1:76:cb:ed:
         79:7e:47:2e:0c:20:54:4f:29:f8:1e:bd:a5:de:33:42:d9:78:
         39:21:e3:3b:63:97:ed:e7:13:42:30:a4:57:86:58:49:15:fd:
         df:8d:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----