Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/13d9230f-7140-3665-8324-cead8894371b.roa
File:                     13d9230f-7140-3665-8324-cead8894371b.roa (raw, json)
Hash identifier:          JAZu1HkVXtdf9TRZGebSlWkJm1A29eGJm5lwfyv+s+g=
Subject key identifier:   AA:F0:19:15:30:A9:18:6C:44:15:EC:72:53:5D:BA:B9:26:30:33:D0
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E7EDC264
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/13d9230f-7140-3665-8324-cead8894371b.roa
Signing time:             Wed 24 Jun 2020 20:03:38 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Tue 27 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        192.206.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e7:ed:c2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : Sep 27 04:00:00 2022 GMT
        Subject: CN=7428fa04-d507-43d2-a5f0-e75eefaa3c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:11:c1:f8:39:39:34:e6:82:17:74:48:52:
                    0c:66:64:24:fa:b8:9e:e8:4e:75:cd:6c:76:57:4d:
                    2f:b9:e5:60:33:a5:84:f6:52:93:39:eb:79:88:e4:
                    60:4e:54:63:b3:b0:ec:1f:76:6d:45:94:ce:a9:6f:
                    a4:e4:93:68:2c:6a:ef:5f:4a:1f:8e:40:5f:2d:24:
                    b3:a0:1f:57:6c:2e:b3:40:7e:9a:1c:43:0c:cb:8a:
                    f6:06:51:c4:dd:3c:45:c0:65:32:9a:c3:12:da:9f:
                    fa:4d:24:7a:b6:1c:27:37:96:1b:3a:7c:3d:0b:84:
                    52:d4:3a:6a:e3:7a:26:02:df:44:86:a4:d1:8b:9b:
                    b6:f1:ba:e2:e5:5d:20:fe:bd:39:66:76:ec:1e:82:
                    92:b6:10:1e:31:92:91:96:c1:8d:65:e5:c3:fa:23:
                    11:cf:bd:15:74:92:02:a5:d3:fd:39:65:fe:40:44:
                    19:90:c9:83:c2:23:d0:67:00:e9:42:1d:4f:08:3f:
                    ea:73:d7:ab:b7:46:ab:1d:0a:35:e5:d3:65:df:bc:
                    2d:0c:9c:b6:46:7a:6a:9f:5a:ed:fb:20:eb:7a:8d:
                    5f:69:a2:ff:3a:d2:41:5d:88:67:4b:ec:b6:b3:a9:
                    15:05:61:dc:52:24:61:0c:8e:bd:85:7c:b6:c3:e9:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F0:19:15:30:A9:18:6C:44:15:EC:72:53:5D:BA:B9:26:30:33:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/13d9230f-7140-3665-8324-cead8894371b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:fe:3f:2f:ab:03:26:59:21:0d:e6:57:23:13:f3:1a:77:c5:
         83:95:7f:d6:48:d1:3d:a1:f8:a4:48:77:71:6f:41:a0:60:7d:
         52:41:3b:80:50:6c:f2:52:35:68:95:d2:a5:aa:6d:80:02:37:
         f7:2d:4a:c2:30:cf:09:f4:bc:86:dd:58:5f:1c:7c:f1:f0:63:
         bb:98:f3:c6:e8:68:c2:34:76:67:d3:25:d4:52:f5:b4:98:ec:
         35:fc:e8:70:6d:d0:9e:7d:e5:1f:a1:8a:d4:ce:47:c7:5c:3d:
         05:18:96:e4:82:c6:22:93:d3:4d:6c:ed:a2:fd:fa:e9:6d:38:
         c3:68:19:cc:f1:63:b0:7e:3b:dc:32:1c:a5:4e:5a:a4:60:7b:
         8e:06:02:16:95:c7:e4:c8:ae:f7:4a:43:9a:bb:3c:20:9d:af:
         1d:72:9b:7d:7b:33:7a:97:1e:e8:e7:a4:33:b4:39:10:33:97:
         57:88:df:9e:92:aa:a2:ff:c8:2b:db:e3:53:d9:36:c6:ed:0a:
         44:18:45:00:ad:b5:ac:88:34:bc:21:51:04:d9:0b:b3:76:60:
         50:4b:de:57:a0:10:63:b4:0f:67:98:38:6e:7b:54:19:75:9e:
         27:b7:d2:70:3b:c1:ef:fe:b6:33:cf:68:ff:22:a3:13:f4:72:
         87:ae:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----