Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b64f97e9-0bb0-3387-affb-21216707c410.roa
File:                     b64f97e9-0bb0-3387-affb-21216707c410.roa (raw, json)
Hash identifier:          lCPb3mE+SZ/8pTgPuJItJh0o1L4WKF8paRN9YEZN7PI=
Subject key identifier:   0C:3E:39:4E:3D:E1:8B:7B:0C:92:F9:03:43:99:C7:69:AF:29:94:06
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FFC8C7665
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b64f97e9-0bb0-3387-affb-21216707c410.roa
Signing time:             Fri 31 Jan 2020 17:01:01 +0000
ROA not before:           Fri 24 Jan 2020 05:00:00 +0000
ROA not after:            Thu 05 May 2022 04:00:00 +0000
asID:                     45753
IP address blocks:        63.216.57.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:fc:8c:76:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jan 24 05:00:00 2020 GMT
            Not After : May  5 04:00:00 2022 GMT
        Subject: CN=70b8ad3e-f32b-4dcb-896a-454ee2e17339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:55:d2:57:0c:2c:2c:3b:b9:9d:f1:a8:4e:
                    a3:ca:36:2c:18:b7:61:37:40:d9:9c:c9:11:78:c0:
                    6c:a2:4c:87:0a:74:23:00:dc:74:a4:e5:a0:d5:9e:
                    bd:0a:0c:4c:10:c3:3c:0a:a2:67:dd:5c:3f:59:46:
                    ad:8c:04:3e:61:c4:7c:ef:ed:6e:fa:0a:37:87:2f:
                    8d:42:1d:37:ab:92:0e:03:52:b4:47:76:85:81:a4:
                    c0:03:21:81:43:2a:22:5e:2f:a0:97:43:01:b8:ae:
                    96:25:26:d6:6a:76:ec:02:8d:fb:cb:bd:b8:a2:00:
                    db:5d:d2:82:24:43:e7:b9:de:db:19:73:02:a5:f1:
                    ec:0d:25:7e:04:69:dc:0e:a2:f9:a2:48:08:16:c9:
                    ad:e0:86:fc:28:d8:a0:de:bc:74:92:32:16:b9:5e:
                    b3:94:da:99:f7:11:be:89:45:43:ce:de:5e:6a:b0:
                    3e:3a:26:0f:b1:ea:fd:cb:2e:f3:99:c3:12:8e:f8:
                    e6:68:97:c3:40:18:84:df:8a:99:63:d3:ab:40:60:
                    5a:5c:45:69:30:ee:c0:f5:5f:1f:f9:62:57:f6:d1:
                    d9:18:13:69:25:6c:41:b1:8e:83:e2:e6:6f:72:78:
                    46:21:97:d2:fc:81:61:a6:61:49:bd:36:e5:be:1d:
                    90:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3E:39:4E:3D:E1:8B:7B:0C:92:F9:03:43:99:C7:69:AF:29:94:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b64f97e9-0bb0-3387-affb-21216707c410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:a6:08:af:c7:43:0d:85:e6:a2:ab:f9:83:9f:78:78:41:86:
         cd:39:44:a9:07:bf:d9:76:07:4c:20:3b:56:57:fb:3d:12:7e:
         07:39:0f:d2:27:a5:64:51:4a:e4:9a:1c:d0:36:46:fd:17:f9:
         58:8f:60:6e:e3:4e:2f:b0:45:b0:92:f9:ca:7d:2f:42:c9:f9:
         69:c7:d9:f1:1e:c8:51:82:a3:03:2a:c4:c8:09:27:cf:1d:e3:
         89:39:3d:fb:52:86:9f:50:be:17:2a:d0:c4:de:eb:e1:cd:d0:
         7a:3e:db:0f:98:0b:67:d1:94:d4:da:67:01:a0:f1:fd:d8:9a:
         67:d7:8c:1e:95:9a:40:fe:85:d2:09:71:0e:04:a2:f7:8e:6a:
         1c:03:ca:42:b2:5b:b7:01:d4:3b:88:91:28:75:3d:d3:e8:f0:
         4e:bf:de:ed:70:22:b4:7e:ff:88:7a:cd:a0:2c:05:74:c9:79:
         74:13:f6:47:6c:fa:84:12:2f:e8:54:5a:e7:3b:f5:94:6c:2b:
         cc:12:3a:48:88:87:9d:32:0a:18:12:93:84:0b:9b:b6:64:5f:
         fa:65:8e:5f:41:64:37:70:e0:13:ae:09:97:8a:b8:fd:e0:f5:
         82:9b:c6:50:13:79:d1:07:ae:85:33:a5:13:d4:d1:64:7c:5a:
         50:1b:72:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----