Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/332b72fb-c4bf-3eba-8071-ee86d3d1829f.roa
File:                     332b72fb-c4bf-3eba-8071-ee86d3d1829f.roa (raw, json)
Hash identifier:          j2FL0JSCQTohYtRbEJW6VSjbZNdD7UZKumtqHXoJQPY=
Subject key identifier:   7B:90:BE:B6:AD:56:5D:12:EE:CD:97:25:0A:63:AD:92:1F:79:14:29
Certificate issuer:       /CN=dca47667-8bdb-4edf-b1d2-ae7dd968e70f
Certificate serial:       010D0C9F43285839451B3E526C4858CCC1264240
Authority key identifier: 42:CF:67:98:1E:6C:E9:A7:72:1D:BF:52:1E:7F:8F:1B:C9:4B:5D:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/332b72fb-c4bf-3eba-8071-ee86d3d1829f.roa
Signing time:             Thu 14 May 2020 04:00:00 +0000
ROA not before:           Thu 14 May 2020 04:00:00 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     31783
IP address blocks:        198.59.146.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:45:1b:3e:52:6c:48:58:cc:c1:26:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca47667-8bdb-4edf-b1d2-ae7dd968e70f
        Validity
            Not Before: May 14 04:00:00 2020 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=2bcaa4dd-0057-444c-a24d-217bcfa005a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:47:11:fb:7e:e4:a1:09:f0:a3:86:bf:74:
                    09:7c:3a:b8:95:64:31:79:dc:24:01:b6:d3:74:b5:
                    77:44:f1:67:32:cb:41:f5:a8:96:f1:b0:7c:1d:69:
                    3d:86:16:1a:27:de:ef:44:5d:d2:d8:d9:b6:5f:3f:
                    d4:fe:db:a3:d3:1d:33:e5:67:82:4a:af:cd:6d:25:
                    a8:9e:5c:ee:e3:d9:d2:25:33:ee:3d:92:ec:80:1b:
                    7b:42:a5:a3:59:a6:20:e1:34:52:52:85:dd:ce:fe:
                    38:f0:84:f4:d9:48:7b:39:d1:e4:39:09:1a:76:1c:
                    61:aa:06:ff:54:63:95:8d:38:17:57:88:3c:ae:29:
                    5a:19:36:4f:4a:96:e2:15:fb:0e:cd:25:59:de:fc:
                    86:79:09:03:be:c6:cc:30:98:28:c2:21:a9:02:ab:
                    f2:21:d3:5c:4a:e9:60:f1:40:e5:7f:e0:b4:de:6c:
                    86:e0:b2:75:96:d3:b5:60:f0:69:c9:27:1c:58:0f:
                    5b:31:fd:60:55:6c:2b:9f:95:49:35:7f:66:cf:3e:
                    f8:69:6f:84:17:bc:b6:22:5b:61:8a:63:8c:a3:e0:
                    71:ce:b6:cc:d3:17:86:53:42:82:f1:c7:29:60:c0:
                    05:68:f6:a8:91:c1:b7:f8:78:fa:9b:9d:f1:cb:96:
                    21:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:90:BE:B6:AD:56:5D:12:EE:CD:97:25:0A:63:AD:92:1F:79:14:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/332b72fb-c4bf-3eba-8071-ee86d3d1829f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.crl

            X509v3 Authority Key Identifier:
                keyid:42:CF:67:98:1E:6C:E9:A7:72:1D:BF:52:1E:7F:8F:1B:C9:4B:5D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dca47667-8bdb-4edf-b1d2-ae7dd968e70f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.59.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d5:cd:97:5c:87:8d:29:04:e1:e7:37:38:4a:d7:4d:97:16:
         26:5b:d9:75:34:0e:38:fc:c2:c0:ee:a8:41:44:78:4c:74:b6:
         38:34:a3:bb:44:b2:d4:45:1d:6d:55:2d:0b:96:7e:6d:08:c1:
         54:d4:9c:1b:08:72:1e:c2:95:c3:4b:93:e7:00:00:b2:b4:25:
         e3:1a:bc:49:fc:3b:e1:b1:b7:48:e3:68:c0:72:22:cf:df:18:
         08:96:f0:00:71:36:be:e7:4e:bb:9d:b1:48:6c:75:bc:ca:7b:
         8e:71:4d:be:8e:8f:5e:1a:5c:66:ff:7c:53:26:1d:ff:b2:83:
         c8:e4:cf:55:3c:7e:c1:c3:c3:8b:62:cb:7f:85:74:50:2c:23:
         43:be:5f:19:84:d4:89:8b:56:d7:99:63:31:cf:eb:df:d4:14:
         d7:14:e9:67:5b:30:93:9b:56:ab:1d:97:62:1c:95:dc:d8:6b:
         38:db:99:ac:bb:8d:dd:fe:df:1a:02:05:85:d1:25:b2:34:34:
         da:47:21:b4:a5:fc:8d:87:b1:22:c9:c0:78:9b:8e:e5:e4:76:
         db:d0:2a:72:59:36:e2:dd:5d:26:d5:fd:15:14:29:f2:01:e5:
         6e:00:53:b0:61:78:af:26:6f:f3:93:b1:12:69:92:14:58:47:
         31:c0:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----