Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/082e6f2a-10b9-36a7-8fa8-bd75feae389f.roa
File:                     082e6f2a-10b9-36a7-8fa8-bd75feae389f.roa (raw, json)
Hash identifier:          BSwcTMbxOdcmopeMmAF0ZWrFRFtxmuBHv2vqHVmbzlw=
Subject key identifier:   A9:4D:9B:40:E0:F4:C0:DA:73:56:0C:FC:20:31:D7:65:61:29:0C:D3
Certificate issuer:       /CN=550c917f-e2be-44dc-8c27-87cd6064aaa9
Certificate serial:       010D0C9F4328576D51CC73C042CFC172A9866311
Authority key identifier: DB:14:F0:0B:5F:95:99:E8:AD:AF:1A:0D:69:51:38:93:7F:9B:74:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/082e6f2a-10b9-36a7-8fa8-bd75feae389f.roa
Signing time:             Fri 12 Jun 2020 17:14:16 +0000
ROA not before:           Fri 12 Jun 2020 04:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     26685
IP address blocks:        198.14.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:a9:86:63:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550c917f-e2be-44dc-8c27-87cd6064aaa9
        Validity
            Not Before: Jun 12 04:00:00 2020 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=6b5b0e41-3d8d-4183-bf6f-ad83a5657683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:73:a4:a2:47:c1:31:ec:df:a8:a8:96:a2:
                    bd:29:4b:7f:b7:63:c1:41:79:83:47:ff:de:5f:8f:
                    97:b2:90:bb:99:aa:1f:7f:70:d8:a7:bf:69:4b:05:
                    c5:26:a9:e0:8c:85:98:d1:50:68:db:2a:21:7a:58:
                    40:0f:d7:67:8b:cc:18:c9:1f:e9:1d:fb:19:32:f7:
                    3b:4a:ff:39:79:90:af:98:fc:9a:f1:e0:b0:26:ea:
                    79:32:0d:b2:19:41:c3:21:4a:9c:ec:dd:a3:12:ff:
                    cb:5b:a4:cb:e7:39:4e:a4:93:e5:e2:3c:c6:9e:a3:
                    22:f9:73:8d:a2:ef:08:c2:4f:f1:3a:28:b7:a6:c9:
                    97:92:34:ea:a4:16:79:cd:75:e9:a8:ac:38:e5:94:
                    e4:7e:35:60:c6:93:a5:bb:a7:a7:0b:71:ef:f9:1b:
                    44:fc:06:b6:77:ae:a4:21:15:9f:2a:62:67:8b:3e:
                    52:02:43:92:68:6d:a6:7f:0e:fb:44:07:6c:e4:9f:
                    4e:7f:b3:eb:f0:d6:b3:6d:9a:78:20:b0:71:dc:89:
                    f6:82:0f:fe:7f:8b:75:83:b4:f0:50:29:c1:e5:63:
                    cd:5e:c5:db:30:3c:bd:56:24:48:f8:7d:6a:fa:44:
                    b2:94:da:cd:3a:ae:1a:b3:bc:c1:48:7d:50:dd:c9:
                    80:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4D:9B:40:E0:F4:C0:DA:73:56:0C:FC:20:31:D7:65:61:29:0C:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/082e6f2a-10b9-36a7-8fa8-bd75feae389f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9/550c917f-e2be-44dc-8c27-87cd6064aaa9.crl

            X509v3 Authority Key Identifier:
                keyid:DB:14:F0:0B:5F:95:99:E8:AD:AF:1A:0D:69:51:38:93:7F:9B:74:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/550c917f-e2be-44dc-8c27-87cd6064aaa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:de:5f:b8:1f:e0:37:6a:f9:48:61:c0:a7:10:d6:42:07:59:
         1f:1b:0a:55:ed:c9:50:83:b1:22:39:ba:b4:77:f7:0a:b9:01:
         50:96:e0:b5:33:30:4c:ff:ee:15:06:6c:78:a7:1a:13:cc:20:
         a4:68:ad:e7:ad:1d:82:c2:65:3b:13:97:92:ce:40:36:5d:c7:
         b6:70:02:bf:b9:35:de:c2:8d:06:24:ee:f3:4c:38:95:b2:5b:
         95:50:50:c6:6c:6f:42:54:1b:c0:31:ff:6e:3e:52:33:7a:22:
         69:9b:24:7a:52:d9:1e:cc:a2:45:47:7b:b2:0d:7d:79:4c:d8:
         ae:3a:94:a1:6e:e9:fc:d2:d8:f5:84:34:35:e7:ef:c8:83:ac:
         49:cf:05:ae:34:f2:10:e0:b6:11:21:03:af:51:9f:9a:33:ef:
         00:fb:26:d8:f6:aa:32:cd:03:e8:3b:63:a2:b3:28:bc:a4:57:
         c0:01:25:da:f5:13:6e:e2:f3:85:1b:d0:39:3f:8e:88:91:6e:
         c5:a3:3e:50:b1:4e:70:c6:74:88:e8:58:2c:ed:c8:2d:56:99:
         b1:74:f2:3f:b0:b6:2f:32:7f:1a:49:7e:fc:3a:26:a8:bc:bd:
         4b:1e:6e:47:62:f8:07:0d:97:92:40:a1:41:10:88:23:64:fb:
         73:50:6f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----