Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/4f1ed30b-e8c6-32ae-8e41-63bd28d3cae9.roa
File:                     4f1ed30b-e8c6-32ae-8e41-63bd28d3cae9.roa (raw, json)
Hash identifier:          tVVAY5i64diKmJNSeT1w26gGag4+634uB+kw884HPVw=
Subject key identifier:   D0:E3:BD:8B:09:AE:FA:02:7D:61:FE:F2:2E:59:A2:97:DB:2B:7F:77
Certificate issuer:       /CN=f639f2ac-d645-4aae-9b08-738d5297eda9
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735CE7C5A8
Authority key identifier: 90:4E:88:BE:74:FA:85:78:7D:63:5D:8E:74:62:79:C1:32:38:B2:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/4f1ed30b-e8c6-32ae-8e41-63bd28d3cae9.roa
Signing time:             Fri 17 Jul 2020 13:12:40 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Thu 20 Oct 2022 04:00:00 +0000
asID:                     393949
IP address blocks:        192.67.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5c:e7:c5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f639f2ac-d645-4aae-9b08-738d5297eda9
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Oct 20 04:00:00 2022 GMT
        Subject: CN=f6c44460-6f95-488a-addc-5bc76db88866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:be:78:37:04:aa:d3:db:a2:30:e4:3b:29:
                    d5:ce:89:5c:86:ec:3c:18:67:a0:39:f6:4a:7c:f0:
                    f7:56:ed:e7:c7:38:43:40:22:fc:2c:06:ed:60:92:
                    cd:0e:70:89:0f:51:04:b7:32:2a:aa:15:75:72:e5:
                    d5:d3:d4:23:8c:69:e5:a3:b7:31:c3:f9:ec:07:7f:
                    43:e9:e8:f5:84:8d:ea:d5:49:6b:4a:34:3f:bd:7e:
                    84:ff:06:db:df:89:0a:72:4b:16:24:94:1f:2d:77:
                    d6:1f:71:15:db:2e:b5:f2:1a:41:48:fb:56:08:a0:
                    fb:e9:f8:da:cd:a1:75:0a:3f:e4:8e:fe:d6:81:b4:
                    97:b6:f4:8e:c6:d0:b5:c8:c1:e8:55:fa:f8:4b:7f:
                    75:7f:29:35:a6:57:cc:49:30:6f:68:62:86:e5:81:
                    ad:91:b6:30:b2:ac:c2:8e:90:df:b7:d4:32:70:65:
                    5b:83:5a:23:41:ce:3f:b0:e3:55:69:4e:a4:ef:82:
                    ea:ae:d0:b4:7e:1f:ee:09:d2:e5:9b:15:54:14:65:
                    58:9b:0d:ba:37:07:c3:fa:bd:ae:ca:f9:42:0c:45:
                    b2:15:c0:fc:d1:3c:9e:25:30:45:59:71:2f:88:a6:
                    05:f4:f5:68:ac:3a:a2:ad:04:74:1c:b3:08:b7:f0:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E3:BD:8B:09:AE:FA:02:7D:61:FE:F2:2E:59:A2:97:DB:2B:7F:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/4f1ed30b-e8c6-32ae-8e41-63bd28d3cae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9/f639f2ac-d645-4aae-9b08-738d5297eda9.crl

            X509v3 Authority Key Identifier:
                keyid:90:4E:88:BE:74:FA:85:78:7D:63:5D:8E:74:62:79:C1:32:38:B2:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f639f2ac-d645-4aae-9b08-738d5297eda9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:f3:bd:92:8d:dc:1e:49:1e:f2:e6:58:44:1a:64:13:7c:
         91:70:81:c4:d7:50:34:86:04:5d:fa:dc:7c:2f:ce:18:b1:b5:
         e8:34:08:36:7d:25:19:4d:c0:43:3c:b1:e0:68:1b:7a:04:30:
         a3:33:77:20:1c:79:99:b3:d7:db:86:16:b8:24:72:c6:a0:e4:
         d3:a4:7a:1a:65:e1:6b:df:b5:f2:da:1f:f1:cc:62:37:a9:d2:
         5e:0c:55:77:cf:15:55:71:cc:4e:9b:dc:4d:c7:db:86:0a:2d:
         e6:b5:ca:6d:3c:94:2c:5d:51:38:50:d5:45:bb:e9:e2:8f:f3:
         4c:06:58:9f:67:1c:cf:fc:ab:22:63:76:2f:a3:2a:cf:eb:a2:
         3f:43:78:30:43:d7:cf:85:3f:14:59:38:69:7c:fa:2c:97:34:
         4a:49:65:aa:eb:f9:eb:aa:7b:d8:47:b5:60:6b:29:bd:42:da:
         2c:83:33:97:9c:ea:07:97:96:bc:66:fb:c5:1f:18:11:ae:b9:
         0c:c0:c5:d6:e4:e9:64:ca:5d:98:21:9c:40:89:8d:d0:f0:df:
         d2:af:b2:e3:ee:40:75:1a:04:38:14:23:c1:fd:71:59:06:e1:
         55:75:ae:1c:8c:35:e7:68:61:3f:79:ba:82:78:5b:07:32:4e:
         63:95:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----