Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e7e04b98-7bce-337b-84f1-642ae1db43d7.roa
File:                     e7e04b98-7bce-337b-84f1-642ae1db43d7.roa (raw, json)
Hash identifier:          lpbT+oGarG44QB1Sf4wQ8V5KwKDGucggYAuWyeq2gGg=
Subject key identifier:   E7:6A:90:37:39:73:9D:48:AB:33:C7:BC:33:DE:6B:4C:54:03:E3:29
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E7F000CD
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e7e04b98-7bce-337b-84f1-642ae1db43d7.roa
Signing time:             Wed 24 Jun 2020 20:06:05 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Tue 27 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        192.206.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e7:f0:00:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : Sep 27 04:00:00 2022 GMT
        Subject: CN=1a141f8f-ce56-47d0-a61d-4dd3f0c6c12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:dc:a4:f4:b4:a9:a3:7c:ee:e2:7e:12:cb:6a:
                    a4:f9:4d:be:ca:f7:93:60:01:6e:58:d5:15:dc:91:
                    d1:f9:ec:21:ef:af:ce:96:5b:a0:c7:b1:a5:e2:39:
                    a5:b3:e5:cd:c9:b5:e3:08:1b:0e:3d:bd:28:21:57:
                    86:32:61:77:ed:18:94:62:72:33:fa:89:ae:61:11:
                    fa:fa:78:73:75:a6:97:dc:26:a9:ed:9a:34:c9:ff:
                    07:67:57:f7:6e:5f:ee:17:ee:c7:1a:54:c1:62:93:
                    ba:76:c6:55:78:f6:6b:b1:a9:a1:82:6c:d9:a0:65:
                    52:f3:cf:37:e0:b3:03:4b:2a:49:b2:21:03:62:22:
                    cb:cd:d0:9c:2f:49:fa:52:64:e0:db:62:ad:2b:9b:
                    f0:26:f5:82:09:e5:c3:fb:1f:82:41:90:25:d9:49:
                    e4:b2:ed:e3:eb:b7:2e:b7:f5:79:4f:a9:35:90:95:
                    13:21:92:36:30:21:5e:65:eb:cb:f8:67:87:f6:8f:
                    02:e3:1f:33:a2:47:ed:f1:ae:f2:aa:ff:77:b5:8d:
                    f9:99:3a:e4:e1:80:48:28:9e:ec:ba:c4:1a:68:46:
                    6d:6b:50:28:d2:50:ee:83:46:cb:2e:45:87:17:6b:
                    c7:9a:84:e0:a5:b7:71:61:62:24:df:4e:25:cb:8a:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6A:90:37:39:73:9D:48:AB:33:C7:BC:33:DE:6B:4C:54:03:E3:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e7e04b98-7bce-337b-84f1-642ae1db43d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:75:e7:07:e1:6f:39:94:27:8f:c0:a3:18:4f:97:18:29:eb:
         61:e1:d9:b6:ce:3d:50:7b:7d:67:14:bf:23:d6:60:6c:47:29:
         e4:4b:24:fd:35:b1:bd:ab:20:77:dd:1f:eb:e1:76:dc:51:fe:
         1a:8a:60:d9:ea:66:ec:36:86:49:b8:6d:9b:78:87:0b:9c:4a:
         51:cf:9c:22:50:b1:f3:a7:63:28:ad:b7:01:7e:0b:64:db:bb:
         6d:aa:ad:5f:b3:dd:5f:1b:1c:8b:36:b2:06:de:97:68:e7:c8:
         37:02:3a:bc:e8:e8:62:8a:e3:28:98:2a:24:19:93:16:9e:7d:
         f2:7a:46:44:b4:d5:41:c4:54:ce:73:e6:18:97:af:eb:ab:e9:
         8f:39:c7:d4:f8:12:71:96:77:02:c5:e6:34:20:fd:2c:4d:26:
         71:0e:42:f5:70:00:a6:fa:7f:a0:06:47:35:01:62:8f:d9:82:
         09:64:ca:5a:f5:2b:a6:99:c8:d4:70:5f:7f:95:fc:f0:ef:f9:
         e6:6e:10:01:02:f6:00:e3:6d:e9:23:93:a7:45:a7:11:47:4b:
         b5:88:d9:14:69:cf:f0:95:38:f2:e2:42:0b:83:14:03:67:53:
         98:7b:97:d7:60:f8:31:60:5a:b5:7d:a8:ac:66:ac:2f:ad:e9:
         08:96:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----