Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/0de077cd-25ca-3f20-b291-e1eb22d1901c.roa
File:                     0de077cd-25ca-3f20-b291-e1eb22d1901c.roa (raw, json)
Hash identifier:          QsWuB5NWyRA28Wjl6OUkwMaB+GsT+VpTTfeyEyqgkQA=
Subject key identifier:   AD:DC:81:7D:38:E4:4C:56:F8:F5:E4:3B:39:55:6E:5A:DA:8D:EC:11
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328583CB3AAC297F4857660DD0E7500
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/0de077cd-25ca-3f20-b291-e1eb22d1901c.roa
Signing time:             Fri 13 Nov 2020 05:00:00 +0000
ROA not before:           Fri 13 Nov 2020 05:00:00 +0000
ROA not after:            Sun 28 Apr 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        204.9.60.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b3:aa:c2:97:f4:85:76:60:dd:0e:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Nov 13 05:00:00 2020 GMT
            Not After : Apr 28 04:00:00 2024 GMT
        Subject: CN=549e7baa-a589-46dd-927d-7129a45abfa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:9a:8a:ab:6b:bb:87:2e:8a:46:0b:64:da:
                    8e:27:fd:1d:45:c5:d8:b1:c0:9a:56:1d:ec:4a:a0:
                    1e:27:68:ec:c9:69:33:ae:df:32:ab:3a:de:a4:d5:
                    a4:7b:c6:ba:d3:48:a1:d1:17:c0:ec:53:cb:ad:fb:
                    6f:f2:63:40:90:a2:46:43:6b:6a:80:98:84:c3:26:
                    a3:6b:dc:c8:e5:a0:6b:96:2c:34:3f:59:b7:ec:2a:
                    b4:68:7c:9c:5a:a8:f1:19:2e:b9:d0:7f:4a:d4:1a:
                    5e:bb:f3:2f:b1:37:09:95:21:6f:53:35:93:4e:22:
                    f0:c4:19:0a:e7:cb:23:dd:f6:2c:58:4f:54:c1:f0:
                    2e:48:00:98:2f:f0:16:96:a6:c9:1e:8b:a3:8a:34:
                    82:e4:48:71:d1:af:95:9a:5e:35:9a:6c:6f:ac:e6:
                    e2:bb:9e:69:b3:c8:b1:0f:ff:1d:36:86:8b:43:c7:
                    5c:85:92:90:dc:ad:ad:e3:98:df:c9:27:4b:96:37:
                    d6:3d:d9:e4:19:42:fd:fa:01:e5:85:d7:fa:69:40:
                    34:c7:fc:02:c3:c9:17:5d:b2:e1:df:15:6c:7f:e9:
                    74:36:f1:d8:05:6c:3e:76:94:3f:7b:aa:fb:c5:31:
                    d5:a6:1f:d4:cc:6c:90:83:e7:0b:02:8a:06:0f:43:
                    40:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DC:81:7D:38:E4:4C:56:F8:F5:E4:3B:39:55:6E:5A:DA:8D:EC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/0de077cd-25ca-3f20-b291-e1eb22d1901c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7b:c9:42:6c:e7:07:ba:e6:fc:4f:2a:d0:fe:1f:5f:8c:e1:
         b8:2e:6a:77:84:1f:cb:c0:af:68:d2:e8:d3:8c:38:3d:83:d3:
         9f:39:4b:b2:cc:f2:e1:c2:27:7d:3d:11:9a:32:d3:08:9f:bd:
         19:a5:da:0e:84:e9:bf:1c:92:57:ee:cd:bc:94:88:cb:94:d3:
         f1:9a:83:e0:00:74:3a:99:46:01:b0:ff:76:c2:1d:a1:3c:7f:
         7a:b6:e9:2a:fa:86:14:50:44:18:27:dd:d0:96:48:52:6c:f9:
         9e:c0:4e:b1:cb:94:ee:c7:b8:48:02:19:9b:f6:f4:34:ea:e3:
         07:e5:6c:8b:13:7a:6d:c5:e7:b3:a7:9a:43:7f:44:d1:fe:25:
         4d:23:b9:4a:40:0b:92:f8:02:66:f8:6f:c1:56:a8:c1:01:ef:
         81:96:40:b7:b9:66:56:4e:47:f7:97:3a:fd:bc:18:ec:3d:f6:
         c6:4c:01:8b:2a:94:d6:ce:42:9c:55:34:6d:a8:4b:ed:1b:7d:
         3f:02:6d:ff:38:82:f4:2c:dc:b8:87:f8:f3:49:a9:96:85:ec:
         43:9b:01:dc:43:3c:b1:3e:ab:93:e0:b4:14:fd:e0:bc:0c:15:
         9e:c7:4f:ec:c3:17:b5:dc:3c:4c:43:9b:d7:b5:b5:51:ab:f6:
         ae:7b:74:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----