Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/b36cb820-f407-398d-9ec8-ca2602d820b8.roa
File:                     b36cb820-f407-398d-9ec8-ca2602d820b8.roa (raw, json)
Hash identifier:          dhsOGUjceEO/ZRokBnAXdhDf6DWxOoxsSLRgpbHDAEw=
Subject key identifier:   82:10:D4:7A:1B:4C:EA:03:CA:24:83:F9:71:4D:CF:4B:72:58:1D:A8
Certificate issuer:       /CN=e729e81c-d76a-426a-a543-5254046b0d89
Certificate serial:       010D0C9F4328576D51CC73C042CFC1730B8C636C
Authority key identifier: 0C:84:8D:80:66:70:8D:05:BA:67:4A:D6:48:62:C0:26:EF:19:50:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/b36cb820-f407-398d-9ec8-ca2602d820b8.roa
Signing time:             Wed 01 Jul 2020 18:03:36 +0000
ROA not before:           Wed 01 Jul 2020 04:00:00 +0000
ROA not after:            Tue 04 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        98.158.236.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0b:8c:63:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e729e81c-d76a-426a-a543-5254046b0d89
        Validity
            Not Before: Jul  1 04:00:00 2020 GMT
            Not After : Oct  4 04:00:00 2022 GMT
        Subject: CN=5a85ce37-67dc-422d-848e-bd71bfddb8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:55:5a:20:7c:7b:d8:61:89:00:0e:a5:67:
                    14:75:61:2a:c0:d6:c3:7a:33:8b:0b:b7:35:db:48:
                    e8:17:dd:1a:ff:ce:34:4f:60:e8:2a:7e:2b:4e:0b:
                    22:82:16:3a:70:02:5e:73:33:c9:7e:cc:aa:56:89:
                    7e:f5:8c:34:44:1b:8c:72:e5:4f:05:ba:2f:40:b4:
                    80:aa:f0:4d:6c:cb:a7:ee:a0:a5:39:6d:45:45:f2:
                    5b:1f:4d:10:cd:c2:70:88:b6:76:5e:67:75:c0:39:
                    da:48:de:07:1f:e4:54:57:ec:06:da:aa:95:62:1d:
                    c1:0c:c6:86:38:b1:53:7a:83:74:16:61:89:b2:ef:
                    cb:2c:a5:3c:7d:c5:43:de:ba:6c:a5:c3:5e:c1:ba:
                    6e:a2:25:8a:01:92:cf:7b:fd:cc:ff:f2:57:c7:14:
                    69:07:c0:c8:3d:af:3b:87:21:ee:f6:2f:fd:b4:95:
                    10:38:05:58:22:87:a1:31:f0:23:ec:f8:26:3d:8c:
                    39:9a:7b:f9:4f:7c:99:89:8a:e2:7e:31:3d:41:ef:
                    40:64:cd:f7:4a:e4:1e:a2:6d:e1:ae:36:99:b1:68:
                    67:61:70:2f:b2:5f:c1:ed:3b:24:56:40:e2:b3:ee:
                    0f:23:c6:62:50:80:6f:e8:25:4f:06:e5:a4:82:0a:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:10:D4:7A:1B:4C:EA:03:CA:24:83:F9:71:4D:CF:4B:72:58:1D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/b36cb820-f407-398d-9ec8-ca2602d820b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89/e729e81c-d76a-426a-a543-5254046b0d89.crl

            X509v3 Authority Key Identifier:
                keyid:0C:84:8D:80:66:70:8D:05:BA:67:4A:D6:48:62:C0:26:EF:19:50:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e729e81c-d76a-426a-a543-5254046b0d89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:40:28:45:93:b3:07:2c:cb:19:dd:c6:6f:00:f9:45:5e:dd:
         e7:7b:d8:b4:60:26:41:6a:1b:ab:de:95:fc:0a:a4:f1:c0:b7:
         d7:d2:47:11:0b:39:96:66:1f:5a:97:18:b1:93:d5:0c:a0:b6:
         70:a1:6e:72:70:fe:54:d8:38:62:a9:ef:e6:b5:2c:78:8f:18:
         18:3b:1d:f7:c0:9c:d3:84:19:33:11:ed:ce:c7:0c:fd:da:7f:
         13:fa:0f:ae:75:f7:12:49:b4:9c:a4:c3:b6:ce:ec:1f:12:e2:
         14:a5:6c:f8:3f:a2:e4:36:13:74:33:24:79:87:2b:1e:d5:7c:
         5c:ea:a8:a0:03:41:21:06:77:ec:c3:e3:7b:26:6c:2b:c4:4a:
         52:e8:30:8a:21:5f:81:2d:28:eb:ba:fc:ea:42:ff:4e:39:43:
         20:0c:ce:b4:7d:74:f6:10:3c:55:a6:fc:64:cc:d4:cc:b9:e1:
         d0:99:f9:3c:23:6b:2d:c6:3c:0a:43:1c:11:05:bf:43:72:d6:
         fb:c9:6a:c0:08:72:23:e4:9b:87:40:37:b7:31:e9:c4:b5:d0:
         07:cc:7a:10:c0:eb:a0:03:0f:50:32:83:01:2b:a2:08:f4:4f:
         49:47:0d:03:d7:b6:93:5b:a7:68:85:3e:28:71:4c:0f:63:ef:
         de:a7:bd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----