Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/6196be56-ceb4-3941-a1db-3f80357868ca.roa
File:                     6196be56-ceb4-3941-a1db-3f80357868ca.roa (raw, json)
Hash identifier:          rkLhu+thba1CN6obFdZbZ5TB/4cgAZv8WyPIwh5W3iU=
Subject key identifier:   9C:30:8F:59:CE:E4:2B:B5:83:93:25:B6:FF:7D:33:A1:8B:7F:2A:88
Certificate issuer:       /CN=eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db
Certificate serial:       010D0C9F4328576D51CC73C042CFC173749E7B2B
Authority key identifier: C3:AC:70:BA:29:7A:37:17:8B:2F:8E:C0:BF:67:0F:AA:B9:0C:C9:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/6196be56-ceb4-3941-a1db-3f80357868ca.roa
Signing time:             Wed 22 Jul 2020 03:43:30 +0000
ROA not before:           Tue 21 Jul 2020 04:00:00 +0000
ROA not after:            Mon 24 Oct 2022 04:00:00 +0000
asID:                     46412
IP address blocks:        204.90.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:74:9e:7b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db
        Validity
            Not Before: Jul 21 04:00:00 2020 GMT
            Not After : Oct 24 04:00:00 2022 GMT
        Subject: CN=9bfad31d-b3e2-493a-b8bd-1ee0014703d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:d0:f8:46:6b:b7:36:64:01:c9:d0:bc:35:
                    0d:f7:ba:8e:75:8f:74:55:83:ae:23:bc:ad:87:cf:
                    4a:3e:6d:d0:ac:47:2b:6d:bb:d4:2e:8a:ff:b5:ba:
                    ed:2c:b5:e9:c2:d8:de:6c:ab:36:04:12:d2:3b:fe:
                    ff:37:61:26:17:e9:d0:9b:93:1f:73:82:1a:4c:33:
                    ed:84:f0:22:15:6d:11:d0:ab:b7:5a:a4:19:2a:b8:
                    57:a5:a6:c5:a5:bf:11:f7:7d:77:a0:0d:52:34:7b:
                    23:39:7b:c5:7c:01:83:14:0e:a3:3f:e3:7f:bd:e2:
                    0b:78:da:25:0e:f4:72:f0:99:7e:a3:f1:bf:7c:ef:
                    74:1b:06:eb:b7:b2:c9:80:fd:ef:fc:ee:7a:ae:a6:
                    a3:07:06:06:62:db:ae:b1:58:2a:50:bc:81:b6:ec:
                    9c:96:cc:89:34:dc:f7:a8:70:84:e8:78:8d:d9:62:
                    cd:3f:fa:ee:b8:7e:2e:a1:21:02:ee:18:18:d5:6f:
                    ff:26:21:52:9c:f6:79:c5:e9:89:5f:ec:9d:cf:b8:
                    49:80:7a:d2:f9:99:f6:c6:b8:cf:d7:c7:54:d5:f0:
                    bf:e8:08:cf:cf:8e:f5:fb:11:e6:62:64:dd:0e:5f:
                    ea:5b:88:61:fc:02:11:4e:9f:bf:f6:34:2c:a5:54:
                    38:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:30:8F:59:CE:E4:2B:B5:83:93:25:B6:FF:7D:33:A1:8B:7F:2A:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/6196be56-ceb4-3941-a1db-3f80357868ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.crl

            X509v3 Authority Key Identifier:
                keyid:C3:AC:70:BA:29:7A:37:17:8B:2F:8E:C0:BF:67:0F:AA:B9:0C:C9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/eaf9f3c8-8b22-4957-800e-2b4c3ca3d1db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.90.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:67:88:9f:b1:e2:46:d3:30:b5:9c:26:f4:b0:f1:a5:91:
         26:cb:14:a9:65:5c:89:4e:ad:41:2f:f1:53:92:16:25:4c:07:
         b2:8c:11:ae:86:6c:cc:41:47:5a:39:75:5f:cf:fa:86:d1:06:
         64:68:95:55:c2:8c:97:50:e4:61:62:55:00:ed:33:28:02:7b:
         0f:ec:31:a3:12:a6:b1:4d:80:34:ce:3c:4d:1e:6e:8f:99:7a:
         52:c8:db:14:11:d6:ac:42:42:76:57:04:84:8a:c8:0d:20:96:
         88:56:b3:fb:8d:9a:33:7f:d2:f0:90:03:76:57:ca:d9:2d:6b:
         3d:73:be:6f:cd:34:3d:60:ae:e9:1c:dc:0a:85:20:76:bc:c6:
         9a:ee:56:42:34:2e:24:ae:34:17:f8:0c:65:25:67:2b:f8:74:
         73:d4:6c:d6:20:a3:6f:74:57:b6:30:fe:f6:fb:ed:11:d5:5b:
         3f:25:75:05:dc:29:4c:fc:e4:3b:c6:a5:e2:52:6f:50:c8:6f:
         73:fb:52:de:80:de:aa:97:2b:1a:84:20:a1:9c:47:47:79:f0:
         e4:ed:cb:81:33:ce:d7:36:b5:66:79:1c:bc:49:a3:b4:a5:0f:
         47:27:aa:6b:e5:c4:d9:7c:7a:44:32:6c:da:99:b3:4e:b7:f2:
         c6:44:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----