Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/89c4ba8e-fbfd-3ee4-93fb-b9ddb90ed751.roa
File:                     89c4ba8e-fbfd-3ee4-93fb-b9ddb90ed751.roa (raw, json)
Hash identifier:          N0f1ocgeH3ifmzoBXnuzz68kXCdKzB57oj8Fjykxrs0=
Subject key identifier:   1E:7D:2A:42:60:26:F5:D2:6A:2D:73:F3:F8:E9:1E:7D:0C:9B:AF:C9
Certificate issuer:       /CN=ceb51013-50fe-40c8-8358-fbacb2186cda
Certificate serial:       010D0C9F4328576D51CC73C042CFC1740872744B
Authority key identifier: 92:D2:A5:78:F5:5E:44:DC:2E:E9:2F:9A:B1:F2:40:C4:0C:81:13:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/89c4ba8e-fbfd-3ee4-93fb-b9ddb90ed751.roa
Signing time:             Wed 19 Aug 2020 04:00:00 +0000
ROA not before:           Wed 19 Aug 2020 04:00:00 +0000
ROA not after:            Tue 22 Nov 2022 05:00:00 +0000
asID:                     13460
IP address blocks:        204.107.64.0/24 maxlen: 24
                          192.111.38.0/24 maxlen: 24
                          2620:130::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:08:72:74:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb51013-50fe-40c8-8358-fbacb2186cda
        Validity
            Not Before: Aug 19 04:00:00 2020 GMT
            Not After : Nov 22 05:00:00 2022 GMT
        Subject: CN=db0ccd00-1935-45f9-acec-ad167e372cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2a:00:45:c6:68:c4:6f:7a:84:13:58:bb:4d:
                    69:c5:b5:06:93:f5:8a:45:bb:37:40:d5:4c:58:18:
                    b0:70:bb:78:f1:4b:e6:eb:99:39:17:fb:e8:5f:f8:
                    65:84:d1:cc:d1:bf:f1:87:42:84:96:cf:75:72:3b:
                    de:6c:92:ad:62:34:17:50:3a:c9:4e:4c:4d:73:46:
                    9e:a7:7d:3b:af:a8:21:9b:ea:46:c4:09:d0:1a:08:
                    e1:35:d3:11:b3:6e:96:cf:f9:43:18:b6:6e:98:7d:
                    99:dc:43:e1:19:ea:43:c8:ea:fd:9d:dd:88:ee:5b:
                    09:fe:a4:9a:9a:7e:94:4a:d0:fb:1d:99:b3:10:23:
                    a2:f3:9b:5a:ef:a3:64:3d:19:06:4c:88:a8:5e:29:
                    a9:97:8e:02:33:18:66:f9:6c:a8:0a:75:26:11:85:
                    47:4f:ad:ca:86:91:80:af:0c:9b:87:fb:7f:fb:56:
                    fa:b3:fc:1c:4e:f1:fe:21:4b:48:5e:08:46:46:8c:
                    37:50:3f:ce:29:d3:c0:0a:00:c8:4f:cf:fb:cd:83:
                    1b:99:3d:00:b4:90:32:86:bc:53:36:fa:5c:5d:56:
                    76:22:7b:0a:0a:4a:27:c8:71:73:7c:87:71:b4:bd:
                    69:f4:08:2f:93:33:5f:24:35:c6:f5:8e:61:21:23:
                    08:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:2A:42:60:26:F5:D2:6A:2D:73:F3:F8:E9:1E:7D:0C:9B:AF:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/89c4ba8e-fbfd-3ee4-93fb-b9ddb90ed751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda/ceb51013-50fe-40c8-8358-fbacb2186cda.crl

            X509v3 Authority Key Identifier:
                keyid:92:D2:A5:78:F5:5E:44:DC:2E:E9:2F:9A:B1:F2:40:C4:0C:81:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceb51013-50fe-40c8-8358-fbacb2186cda.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.38.0/24
                  204.107.64.0/24
                IPv6:
                  2620:130::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:e6:1b:f5:fd:da:78:73:ad:dc:a7:b2:77:77:fc:bc:bc:
         cd:09:e5:ea:ab:2f:fd:89:7b:7b:5a:bc:ee:00:aa:49:d9:8e:
         7d:04:5d:f3:d8:a3:1f:e5:2b:0c:11:e3:02:1f:7d:cb:eb:09:
         d8:7f:2e:bb:e6:da:ca:1d:84:a3:51:f5:5c:f3:30:d8:b4:f5:
         3f:ca:04:07:13:1c:37:69:c2:24:4b:3a:9a:1a:a7:71:56:fa:
         9d:64:8e:8b:31:ab:e2:8d:1a:cf:24:b1:5e:61:3e:11:36:33:
         44:8c:09:81:b7:c3:47:07:39:ee:57:96:23:fe:ad:9e:70:d6:
         00:38:26:bf:b8:58:8d:cd:c1:dd:76:31:75:6c:d6:d1:0c:2f:
         59:90:10:05:2e:25:85:50:e1:f0:e0:96:2d:24:65:b4:82:06:
         66:2d:d6:7d:30:28:6f:3c:f4:ad:0c:df:ea:2f:6e:a1:44:ea:
         9c:74:e0:96:8c:ec:3d:f5:a9:e1:11:11:50:f5:22:3c:46:df:
         aa:4c:c6:38:79:47:e0:e4:1d:72:e9:66:14:0f:82:7e:ba:88:
         c6:cd:d8:c5:a5:0b:a6:87:db:56:0b:cf:66:d8:a1:af:98:23:
         01:89:96:cc:cb:8f:31:2f:db:c7:66:19:5d:5a:0d:30:de:3b:
         84:a2:ac:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----