Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/73775b2c-8800-31f1-9925-c138ccbe4747.roa
File:                     73775b2c-8800-31f1-9925-c138ccbe4747.roa (raw, json)
Hash identifier:          +GwFyQVYrhasJTbinmD3mGYTVzqDCHfs4jwWs2af1Jk=
Subject key identifier:   2A:33:5E:43:F6:2A:B0:9A:AB:11:25:FC:35:34:DF:65:15:B7:FE:69
Certificate issuer:       /CN=e6b50385-8dc3-40bf-b077-89afa371f955
Certificate serial:       010D0C9F43285837D76E08ADFEFBDDC9BF68EB00
Authority key identifier: 69:0E:FE:C9:F7:C2:58:D5:A7:2B:B9:1B:30:55:61:A8:87:38:BB:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/73775b2c-8800-31f1-9925-c138ccbe4747.roa
Signing time:             Thu 05 Nov 2020 05:00:00 +0000
ROA not before:           Thu 05 Nov 2020 05:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     22607
IP address blocks:        64.17.192.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d7:6e:08:ad:fe:fb:dd:c9:bf:68:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6b50385-8dc3-40bf-b077-89afa371f955
        Validity
            Not Before: Nov  5 05:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=c5dc4fea-a8b2-4f48-b3c7-fe976f5b2975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:3c:72:1c:3d:69:6a:1f:01:a9:6f:8d:a3:
                    89:8e:17:92:a4:ce:0d:df:2e:18:83:19:40:25:c5:
                    8a:af:df:0e:69:8f:c1:b1:2e:fd:54:da:d8:96:52:
                    c8:6f:77:e3:46:1b:00:ae:97:a7:c6:fb:cd:e8:f7:
                    96:75:81:f3:82:07:8e:3e:b2:83:92:d3:8f:cf:9f:
                    8a:ae:06:c8:9a:7a:3e:47:30:82:f1:d4:79:71:80:
                    5b:00:71:7a:1f:df:f8:4e:4d:4c:37:a8:d8:2f:15:
                    54:a5:fb:41:e4:1e:c0:cf:04:6f:0b:a5:11:00:80:
                    35:05:a7:e3:10:25:45:1e:7d:6d:cd:1f:8b:22:c1:
                    44:28:c6:f3:25:48:d1:b5:d9:de:3d:de:4b:93:f3:
                    8a:4a:c5:14:37:c6:cb:46:82:70:c9:ca:84:8a:d2:
                    84:be:7a:21:73:21:11:c7:24:96:46:e8:3f:bf:f1:
                    db:ea:57:51:47:7c:da:84:53:2d:41:64:7f:fe:09:
                    1a:5f:a9:65:3e:8c:9f:27:ff:9d:b2:04:9a:09:21:
                    0a:b3:14:8b:66:70:11:9c:97:36:3e:2b:f9:be:51:
                    8d:ae:5d:08:21:f4:86:cb:7b:c6:a6:aa:4d:37:1e:
                    d6:81:77:1b:a6:96:05:3c:a1:4f:7b:55:93:6d:21:
                    ae:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:33:5E:43:F6:2A:B0:9A:AB:11:25:FC:35:34:DF:65:15:B7:FE:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/73775b2c-8800-31f1-9925-c138ccbe4747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/e6b50385-8dc3-40bf-b077-89afa371f955.crl

            X509v3 Authority Key Identifier:
                keyid:69:0E:FE:C9:F7:C2:58:D5:A7:2B:B9:1B:30:55:61:A8:87:38:BB:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:45:17:6a:69:d4:9d:e2:e7:f3:a5:25:d4:0e:35:44:e9:32:
         37:d9:d9:73:25:7e:aa:25:fb:8c:09:6c:20:36:a4:82:6f:2c:
         8b:1f:e7:75:25:86:ca:4e:73:cf:a5:fb:cb:0f:c7:12:96:2d:
         cd:c4:6e:82:fa:63:3e:02:0f:25:44:63:a5:c2:96:f1:e1:2f:
         72:a8:65:e4:25:27:6f:e4:cf:db:01:2f:e8:59:7d:38:dd:a7:
         f4:a5:de:fb:e0:9a:51:d5:c9:14:dd:f1:2a:ca:52:c1:ed:14:
         b3:6f:7f:6b:55:8a:45:19:b9:d9:6a:1f:a5:f6:ea:95:54:d0:
         51:71:28:e9:84:38:5c:ed:3e:c4:08:41:07:c8:c7:a6:79:65:
         8b:c1:d8:f8:91:93:13:8f:66:dc:c5:4e:bb:de:97:5f:11:e5:
         d2:01:ba:d0:62:3f:94:62:15:4f:f1:a7:cb:74:54:a5:fa:57:
         55:20:8d:c8:63:92:e8:b2:32:7e:1a:dd:80:04:60:2d:5a:26:
         2a:88:e8:8f:91:91:aa:be:60:02:e2:13:4b:a9:75:bc:b0:ab:
         ba:ce:91:1e:29:d6:81:f5:64:70:1e:29:5b:dd:de:e5:33:7d:
         a6:2b:97:f2:5b:38:80:5e:31:bc:e6:8e:61:44:0f:75:ab:dc:
         e5:84:09:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----