Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/d2947b77-1e9a-3d10-a666-95e587c0b927.roa
File:                     d2947b77-1e9a-3d10-a666-95e587c0b927.roa (raw, json)
Hash identifier:          KDsGrBFmKKJjqHURi7iS82+zKrez61jd/IOp4sgmssc=
Subject key identifier:   92:93:A9:AE:0D:E1:74:33:18:FA:A4:E8:8A:DF:8B:34:D6:67:3F:A1
Certificate issuer:       /CN=b97dcf28-5160-4073-b534-4d59060c438c
Certificate serial:       010D0C9F4328576D51CC73C042CFC172B9AD122D
Authority key identifier: 80:45:68:7A:7B:47:75:E1:8F:66:1C:3C:8B:4B:97:A0:C0:31:AC:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/d2947b77-1e9a-3d10-a666-95e587c0b927.roa
Signing time:             Mon 15 Jun 2020 20:30:26 +0000
ROA not before:           Tue 12 May 2020 04:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        192.81.98.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:b9:ad:12:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97dcf28-5160-4073-b534-4d59060c438c
        Validity
            Not Before: May 12 04:00:00 2020 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=02d21d09-baf4-4e08-8242-631199064024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:ca:f7:54:01:fb:87:ba:51:ab:17:8f:d8:
                    81:4d:2c:82:37:8c:02:0c:fc:c3:4b:e6:50:20:14:
                    16:66:41:1e:15:10:55:cb:2d:1e:92:1b:7c:96:36:
                    86:d8:01:98:2f:f2:34:50:fa:4a:08:1a:fe:46:e5:
                    c6:ab:dc:9c:00:45:9d:6f:5d:24:ed:af:9d:c8:2b:
                    fb:f5:77:3f:7c:de:57:d7:f0:90:96:be:48:b8:01:
                    45:5d:db:b8:86:de:41:90:7b:91:49:28:04:50:f0:
                    76:f5:f2:8d:6b:1a:77:e5:05:05:8c:ae:17:81:14:
                    4d:f5:a4:94:97:b5:01:e4:08:e2:9e:b2:52:bc:06:
                    92:33:30:07:36:0a:2b:2e:7f:85:1d:a0:28:93:6b:
                    5c:87:12:2b:95:a0:86:89:3f:bb:d7:e7:32:ee:19:
                    e0:8e:d8:d6:74:4a:2c:80:a7:d2:30:c7:39:1b:70:
                    3e:9e:6f:c3:cf:b3:00:e7:20:a9:cf:df:1c:88:af:
                    2b:b3:01:0e:71:a8:b7:db:7c:29:d4:67:a9:29:22:
                    f7:3e:9d:87:45:85:fc:ac:86:15:a5:a8:31:36:58:
                    51:8a:b1:3e:4d:d5:05:b9:c8:f1:02:38:07:ea:f0:
                    17:6d:d9:2d:94:86:09:89:8b:a6:d6:c4:84:6d:a5:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:93:A9:AE:0D:E1:74:33:18:FA:A4:E8:8A:DF:8B:34:D6:67:3F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/d2947b77-1e9a-3d10-a666-95e587c0b927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c/b97dcf28-5160-4073-b534-4d59060c438c.crl

            X509v3 Authority Key Identifier:
                keyid:80:45:68:7A:7B:47:75:E1:8F:66:1C:3C:8B:4B:97:A0:C0:31:AC:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b97dcf28-5160-4073-b534-4d59060c438c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:2e:2b:98:db:35:f1:1a:40:a6:99:f5:8f:07:d1:c4:ec:ae:
         70:4a:48:9b:43:ad:3e:b1:0f:be:83:28:2f:c9:4d:d9:7c:91:
         4e:f7:f9:83:3e:11:d3:59:02:77:1c:d2:8f:5c:bb:9f:08:8b:
         97:42:7b:d8:a1:d5:7d:38:d3:a2:0e:b0:ea:a4:75:6f:0c:77:
         57:dc:0d:51:73:13:82:ae:30:e5:4a:3e:44:c5:6f:70:0d:18:
         6d:b6:b6:f2:47:77:38:0b:2d:b7:98:be:25:5f:7e:2a:3b:68:
         9d:ca:15:a6:5d:dd:3e:3e:76:fb:47:35:d0:ee:8b:fe:27:a1:
         6b:08:3b:58:af:21:06:ba:3d:0c:86:5b:03:66:73:3c:cc:7b:
         ea:eb:ff:92:21:6d:85:64:4f:17:d2:b1:10:f7:9f:95:69:54:
         ce:cf:fc:d1:56:cd:09:44:c7:f3:5d:e6:ff:9d:ca:d4:6e:0e:
         20:9a:6a:2f:59:a7:50:96:f0:d7:99:95:16:3b:96:41:c5:e2:
         27:17:a1:e3:54:d9:00:bb:14:2a:4b:e6:99:9c:3c:0d:03:b0:
         5f:30:57:95:8c:77:75:a1:e5:e3:38:59:46:72:f2:12:1a:95:
         02:ed:6a:82:ea:72:55:1a:46:45:ab:86:fb:45:b5:9c:b7:06:
         a2:34:fd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----