Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b1d2f1dd-f1db-351c-a60f-e6d198848bee.roa
File:                     b1d2f1dd-f1db-351c-a60f-e6d198848bee.roa (raw, json)
Hash identifier:          0u/+ylVyG9C+nnKQPEj5FVMycL27xpg2QDW4812jbhw=
Subject key identifier:   AC:BF:2A:E4:A9:8F:71:44:16:2E:DD:0A:69:0D:4B:F7:26:8C:B1:81
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328576D51CC73C042CFC1702E51C396
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b1d2f1dd-f1db-351c-a60f-e6d198848bee.roa
Signing time:             Mon 10 Feb 2020 08:57:55 +0000
ROA not before:           Fri 24 Jan 2020 05:00:00 +0000
ROA not after:            Sun 15 May 2022 04:00:00 +0000
asID:                     3491
IP address blocks:        63.217.65.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:2e:51:c3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jan 24 05:00:00 2020 GMT
            Not After : May 15 04:00:00 2022 GMT
        Subject: CN=de7be7ce-19d9-44e5-86ab-493d744f9b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:7b:11:1d:f4:f1:9b:90:d1:be:5f:f8:c4:
                    a9:b4:45:5d:6f:d8:66:f3:0c:bc:94:76:4b:92:0b:
                    74:0e:67:c8:de:bd:a1:71:f1:07:98:8b:4f:31:93:
                    ae:b7:23:0f:87:e3:57:58:d6:a5:8a:f5:5f:ba:80:
                    a1:8a:59:4e:cc:f3:d8:ef:f6:28:c9:cb:6d:fb:33:
                    72:d7:c7:db:84:3b:2f:29:85:a2:f2:18:de:49:47:
                    f4:0e:d8:2e:d8:42:3b:09:90:13:a4:43:9f:d1:29:
                    55:f9:81:14:a9:85:90:1a:53:ef:b9:a9:bd:cd:d7:
                    58:84:52:3c:e5:88:be:6f:7a:f4:aa:26:33:af:bc:
                    09:b1:dc:d6:70:e9:4a:0d:b0:3e:eb:43:b5:d3:54:
                    7d:d0:a8:15:2b:eb:48:a3:03:0a:10:06:c8:bc:84:
                    4c:42:d1:4b:64:a5:5a:ad:e4:6f:fb:dd:e3:31:2e:
                    5d:0d:fa:ed:c6:cc:e7:64:36:5c:8c:50:b5:34:f8:
                    c0:55:3f:0b:d9:f4:c7:67:a8:8e:88:b7:f4:14:db:
                    c1:0e:ff:16:bb:70:0a:1f:a3:48:46:0c:0c:d2:1e:
                    eb:98:a8:5f:d8:2f:99:cb:48:11:ba:e3:06:e4:a8:
                    e2:30:dd:6e:08:66:f7:e4:2e:02:9a:7e:71:98:4e:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BF:2A:E4:A9:8F:71:44:16:2E:DD:0A:69:0D:4B:F7:26:8C:B1:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b1d2f1dd-f1db-351c-a60f-e6d198848bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.217.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ac:48:d7:48:05:a2:63:35:84:1e:5c:e3:e7:2a:ab:f4:ac:
         8a:fe:87:95:dc:0d:0c:37:4f:82:c1:a8:91:e5:ad:85:32:22:
         67:a6:7a:0a:59:80:59:9a:21:c6:c6:ac:f9:c8:58:db:d4:f1:
         96:ec:99:49:bf:04:84:10:68:52:90:08:5f:7c:7e:18:40:93:
         85:1f:18:54:46:19:d0:24:d5:28:a4:57:82:33:e7:f8:c9:c9:
         12:e6:65:92:cd:7f:74:01:98:5b:67:17:94:98:73:dd:d2:c9:
         f0:00:2d:4d:69:77:83:af:40:7b:53:ac:a8:86:34:25:eb:52:
         54:c1:83:eb:d1:da:26:68:6e:7c:0a:9e:d1:28:22:c9:24:ab:
         35:e6:86:a7:ce:69:cb:77:2a:b1:48:43:0e:a5:6a:ef:af:01:
         ce:af:d1:da:3b:0b:51:21:0d:18:c9:7a:1d:69:43:ef:02:54:
         94:67:db:f2:3d:ad:c6:64:f6:a5:df:52:ae:b0:e2:3a:fd:25:
         9b:9f:e5:4a:70:0c:08:07:aa:b9:55:51:70:ab:4e:39:fe:2e:
         33:26:e8:41:a6:5f:67:7b:0a:40:d1:8b:50:34:aa:1f:d0:7e:
         ec:07:69:f3:c7:eb:0e:c0:f9:62:75:f3:a5:4a:c9:c3:ee:f3:
         00:18:7c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----