Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/3fb1d6ce-288f-31b8-9ab7-a8ecc9b4edef.roa
File:                     3fb1d6ce-288f-31b8-9ab7-a8ecc9b4edef.roa (raw, json)
Hash identifier:          VEnkSqSAXqsnBo4j38UYuAHBPBS8CJsRmyI1m7ANMVI=
Subject key identifier:   49:D7:D3:E4:81:1A:CF:DC:11:B3:51:A6:BD:5E:A6:A7:F4:89:30:2C
Certificate issuer:       /CN=242dfd71-e9f9-4bbe-9709-0f3709fafbbb
Certificate serial:       010D0C9F43285837D3E7712EFC95AA053560D480
Authority key identifier: D0:5B:A6:8F:0A:83:8E:79:0F:F2:CB:AD:F1:51:BE:C1:52:E1:A2:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/3fb1d6ce-288f-31b8-9ab7-a8ecc9b4edef.roa
Signing time:             Tue 03 Nov 2020 05:00:00 +0000
ROA not before:           Tue 03 Nov 2020 05:00:00 +0000
ROA not after:            Mon 06 Feb 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        23.158.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d3:e7:71:2e:fc:95:aa:05:35:60:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=242dfd71-e9f9-4bbe-9709-0f3709fafbbb
        Validity
            Not Before: Nov  3 05:00:00 2020 GMT
            Not After : Feb  6 05:00:00 2023 GMT
        Subject: CN=b54b89a8-0c18-47ff-a6f0-b6789a327ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:f2:4e:71:7f:f7:6d:04:4e:e8:b0:1a:78:
                    69:74:93:1a:cb:8c:56:70:b6:4e:4d:80:c8:35:42:
                    12:27:f9:b0:3e:a9:cd:cc:98:5d:41:c4:02:81:70:
                    2b:1e:79:36:e2:4c:d1:35:bc:30:6a:a9:c0:a7:47:
                    c0:e4:b4:4a:e1:72:a5:bf:f9:ca:ca:46:95:9a:4e:
                    25:7c:ab:d1:09:ab:ea:14:eb:89:5b:24:fa:f4:df:
                    07:36:c5:15:5e:54:e3:3c:b9:12:d0:58:0a:c7:6a:
                    8c:f3:8f:4e:fd:e8:b0:ab:35:41:18:cf:47:4a:af:
                    92:8b:bd:46:57:64:b8:14:e0:ac:47:d8:b7:81:7e:
                    ea:45:e4:74:b7:cb:9e:e8:d9:06:b0:79:fa:53:78:
                    7f:d5:66:61:3b:11:cd:2b:28:4d:59:34:48:83:da:
                    06:30:7b:c4:6d:36:d1:88:d5:9a:01:a7:b1:18:a1:
                    95:d5:9c:ee:74:cf:80:07:11:1b:92:6d:55:ac:1b:
                    cf:a9:94:cf:72:06:b9:f8:34:cd:be:39:72:89:2a:
                    8c:e5:12:cc:a5:ba:43:df:d9:3f:92:0d:e3:92:1f:
                    66:48:ff:f6:83:26:55:9b:e7:14:be:7e:ff:35:78:
                    da:76:fb:9a:22:13:7d:af:e0:58:a5:a8:a0:75:15:
                    c0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D7:D3:E4:81:1A:CF:DC:11:B3:51:A6:BD:5E:A6:A7:F4:89:30:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/3fb1d6ce-288f-31b8-9ab7-a8ecc9b4edef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.crl

            X509v3 Authority Key Identifier:
                keyid:D0:5B:A6:8F:0A:83:8E:79:0F:F2:CB:AD:F1:51:BE:C1:52:E1:A2:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:36:73:84:9f:0d:c9:c6:d0:52:4c:4d:a5:2d:07:37:1a:7e:
         2c:3c:5a:88:bc:b3:f8:d2:9f:c9:ac:56:8a:5e:27:81:65:1c:
         cb:ec:5a:c1:9b:1c:76:89:24:c0:be:c7:44:eb:38:a5:02:d0:
         4d:46:66:08:ca:0d:55:18:74:17:ef:98:d3:fd:d0:5d:b9:d2:
         aa:05:5a:3c:1f:02:c3:d7:cb:4a:cd:80:d2:cd:90:ff:28:3a:
         e7:dd:9e:0c:36:9c:f9:4b:44:3b:c4:85:71:56:5f:47:f4:f3:
         48:48:07:77:c9:9b:26:dd:0f:87:f9:80:69:51:c6:53:a7:85:
         cc:1b:7e:32:98:3b:c0:d6:96:2e:e7:a6:03:ea:d3:99:8b:14:
         2f:82:17:cd:f5:e5:79:b9:68:eb:6e:85:b3:df:f6:f0:37:35:
         82:b3:d7:c4:44:2a:18:16:53:2b:50:60:36:42:32:be:88:ec:
         4d:b4:ba:4a:59:f9:a7:9a:bb:a6:2e:16:9d:81:30:9e:64:3b:
         bd:37:37:46:e3:ec:03:c1:6d:bc:9e:8d:a5:03:6b:bd:a9:1a:
         35:83:26:88:53:1f:a4:18:59:e0:e7:f3:a2:6c:bd:fe:d5:b2:
         9c:63:91:da:14:61:10:af:83:f5:60:6c:00:ad:1b:0e:e9:3d:
         e8:ed:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----