Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/725d3000-c3cb-359c-a35b-0496f25e462e.roa
File:                     725d3000-c3cb-359c-a35b-0496f25e462e.roa (raw, json)
Hash identifier:          dLchKRYeph+c+QqoYl672kKLn40bKfdCJLlaWZqVxuc=
Subject key identifier:   E4:5F:A2:BF:D2:1F:70:A7:66:3C:2B:AE:9E:9E:5B:C1:D6:EF:AC:01
Certificate issuer:       /CN=b97dcf28-5160-4073-b534-4d59060c438c
Certificate serial:       010D0C9F4328576D51CC73C042CFC172B9AC579E
Authority key identifier: 80:45:68:7A:7B:47:75:E1:8F:66:1C:3C:8B:4B:97:A0:C0:31:AC:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/725d3000-c3cb-359c-a35b-0496f25e462e.roa
Signing time:             Mon 15 Jun 2020 20:29:39 +0000
ROA not before:           Tue 12 May 2020 04:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        192.81.98.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:b9:ac:57:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97dcf28-5160-4073-b534-4d59060c438c
        Validity
            Not Before: May 12 04:00:00 2020 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=043bd47a-dc4d-41cd-bbe1-6ca9afb26f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:19:70:c0:84:7e:e1:2f:4e:46:9e:83:69:09:
                    11:1a:5a:69:d4:3a:0d:49:b6:e6:96:d9:db:b0:36:
                    86:3c:bf:21:24:c0:46:6d:ef:9a:a4:9f:a6:5c:bf:
                    96:5e:41:47:2f:b6:d1:96:ee:df:78:4a:02:1d:09:
                    81:62:58:51:ca:d4:f6:10:69:60:b5:c3:fc:19:82:
                    28:81:f2:1a:ce:50:b4:11:b0:c6:44:92:e3:52:b3:
                    e4:85:68:b2:5d:77:59:a6:ed:6d:99:c5:52:1d:d2:
                    0f:60:d9:32:12:44:dd:34:6a:38:85:9d:a5:96:7f:
                    ac:4f:ce:2b:d2:94:55:fb:50:65:b3:1a:cf:a9:9c:
                    63:8b:10:1f:70:26:64:af:d7:f8:ea:08:03:6c:fc:
                    50:44:40:d4:36:9e:15:3f:3c:f7:f5:9c:b2:c9:4f:
                    2d:8f:78:f5:fd:7d:16:05:0f:4b:bb:0e:e2:28:d1:
                    aa:d9:19:44:31:23:88:74:89:e1:b8:c1:01:af:7e:
                    47:03:13:52:2a:f5:9b:d0:68:3a:c9:ef:ea:0b:b3:
                    69:b4:0b:d5:cb:88:ee:ff:af:31:86:6b:be:b4:2b:
                    97:40:80:b6:95:4f:6b:06:5f:31:3b:5e:92:03:dc:
                    53:66:ad:44:e8:d8:f2:cf:31:5e:20:a4:dd:81:27:
                    f8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5F:A2:BF:D2:1F:70:A7:66:3C:2B:AE:9E:9E:5B:C1:D6:EF:AC:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/725d3000-c3cb-359c-a35b-0496f25e462e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/b97dcf28-5160-4073-b534-4d59060c438c.crl

            X509v3 Authority Key Identifier:
                keyid:80:45:68:7A:7B:47:75:E1:8F:66:1C:3C:8B:4B:97:A0:C0:31:AC:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:4f:8b:72:c4:00:cc:7c:14:c5:77:c7:87:9f:e9:9a:84:ce:
         ea:f4:24:67:91:4e:e8:8e:38:de:90:d3:e6:13:78:99:27:d0:
         93:ff:2f:eb:f1:96:61:b9:72:05:68:e0:b4:68:6e:56:e0:eb:
         0f:85:5d:6e:4f:79:23:39:5f:1e:38:c7:5e:e8:04:96:a2:f0:
         52:ce:b9:b2:01:e8:c8:63:cb:72:4a:2e:6f:59:92:3e:65:e3:
         8d:16:06:dd:e3:6a:ce:7a:7b:47:78:ad:34:77:c6:7f:38:b4:
         f5:8b:c4:2b:03:32:62:05:ea:db:ec:c5:54:1a:e3:4f:a8:f8:
         3e:00:1c:f2:5c:02:44:90:2a:5d:25:62:6b:d9:c7:ab:cd:ad:
         5d:00:b7:dd:fd:ae:b7:b4:d2:b4:37:33:9e:3f:b4:d6:7d:34:
         c4:30:17:b3:98:e2:7a:49:14:49:07:dc:3a:1b:73:ff:1d:29:
         8e:a0:b8:cf:35:45:d4:35:e0:0f:b4:1d:f8:75:65:af:05:5d:
         f3:e4:01:e2:96:40:4d:f1:78:4e:6c:c1:66:00:8c:4a:32:d2:
         5d:42:23:29:67:57:ff:d6:fc:cd:a4:e4:44:5c:05:e9:88:76:
         38:7b:32:c5:e4:76:2e:f0:fd:d1:97:ed:87:fa:3c:09:38:cf:
         54:ea:86:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----