Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/26a2ab1a-8843-37af-9713-7690c73aecf3.roa
File:                     26a2ab1a-8843-37af-9713-7690c73aecf3.roa (raw, json)
Hash identifier:          hvS1GvjutFJD98gzL5Wlom55OMx41sMLcBB0vR/sqPI=
Subject key identifier:   63:B6:60:65:57:94:62:62:65:71:03:7F:67:51:F1:FC:49:47:1B:B3
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F4328576D51CC73C042CFC174085B6485
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/26a2ab1a-8843-37af-9713-7690c73aecf3.roa
Signing time:             Wed 19 Aug 2020 04:00:00 +0000
ROA not before:           Wed 19 Aug 2020 04:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     1443
IP address blocks:        74.117.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:08:5b:64:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Aug 19 04:00:00 2020 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=b412d880-e148-4d08-bfd8-c0bd8639dc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:21:af:43:6d:ef:3c:59:a0:cb:12:0c:2b:
                    e4:94:8a:6f:b1:96:d8:2a:ad:db:76:2c:da:e2:12:
                    8d:50:cc:d4:aa:90:02:61:89:c2:28:a2:44:10:02:
                    d2:2d:2d:65:ef:d5:f4:c7:cf:0f:0e:56:43:0e:0f:
                    7d:9d:5a:af:e6:b7:cf:d2:76:2c:a5:c9:5a:d3:0b:
                    b5:68:6d:13:50:ee:d6:89:e0:4b:55:79:f3:b3:22:
                    51:8e:d4:96:87:16:3d:54:67:7b:fa:ad:56:aa:f1:
                    9d:b9:3f:10:89:c0:63:0d:6d:07:f2:0e:ac:b1:bf:
                    d8:5f:05:ad:a8:47:94:41:cc:36:01:74:df:cf:1f:
                    65:f5:bb:0f:f8:c8:7e:a7:a9:26:cc:56:22:c8:4c:
                    2f:58:87:f6:f6:f9:97:94:4e:8e:e5:8b:1b:e1:4a:
                    34:aa:1c:a2:fc:32:05:a7:e6:41:44:3c:b3:a6:8b:
                    e0:d3:eb:28:29:da:9c:64:6f:1d:4e:85:0e:e4:c6:
                    b9:e5:0d:14:4d:e0:3e:21:d7:24:93:ba:68:61:90:
                    55:86:30:eb:63:28:ff:97:46:3a:a6:45:ed:73:51:
                    37:8f:12:96:95:43:94:ba:de:24:70:bc:cd:0f:0a:
                    f6:0d:c2:ac:57:13:4f:83:28:b9:04:50:f8:77:c6:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B6:60:65:57:94:62:62:65:71:03:7F:67:51:F1:FC:49:47:1B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/26a2ab1a-8843-37af-9713-7690c73aecf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:b5:e9:a8:8e:3c:56:ba:94:e1:af:26:81:b6:fc:c5:58:a1:
         3a:83:fa:a6:f3:68:d3:d7:e2:42:b1:5b:3f:0b:0d:19:b5:f7:
         48:e5:fa:84:05:4b:07:98:48:ab:47:db:ab:db:8e:dd:b7:62:
         88:1b:95:1b:50:a5:6d:9c:6b:75:84:7a:a2:9d:a6:86:25:f5:
         58:e2:bd:07:75:15:36:0b:20:6b:e7:08:81:4e:2c:6e:21:d5:
         79:90:a2:9e:d0:64:c5:ac:40:58:a7:c2:d6:f6:5b:25:fe:56:
         96:71:16:c2:eb:01:53:6f:66:c8:e2:64:b1:ac:ff:fc:a6:c6:
         c9:52:b0:e3:e3:86:36:63:58:28:5c:e3:9f:76:f1:39:42:45:
         ca:73:68:73:79:e4:1f:b3:c4:81:2c:d2:68:89:91:4f:18:93:
         02:80:4c:6d:31:44:2b:01:eb:01:94:96:84:0e:ab:a0:d7:b4:
         7a:21:dd:3f:27:ac:08:44:51:a4:5f:7c:01:5f:85:53:b0:61:
         5f:a6:00:57:a9:32:b4:1f:15:0a:81:8c:18:bd:5e:df:35:73:
         62:8b:26:65:3d:59:aa:3c:fa:8a:9d:9e:be:53:35:4f:7a:38:
         4b:c2:49:90:62:37:0c:0b:79:62:be:49:04:52:6c:e1:11:c9:
         6f:36:cb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----