Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/da4b9f9a-1a3a-3340-bedf-0bd6091bb519.roa
File:                     da4b9f9a-1a3a-3340-bedf-0bd6091bb519.roa (raw, json)
Hash identifier:          NAJIw48zEl1pUBwzhqzztXPBSLRJtYM3Vc/y6AVul0A=
Subject key identifier:   84:B5:5C:FA:29:16:AE:D1:6D:A6:C8:5E:96:52:A6:49:CC:45:5F:35
Certificate issuer:       /CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b
Certificate serial:       010D0C9F4328576D51CC73C042CFC17077E852C0
Authority key identifier: 78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/da4b9f9a-1a3a-3340-bedf-0bd6091bb519.roa
Signing time:             Mon 24 Feb 2020 15:54:39 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        192.101.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:77:e8:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=dd52df68-94ce-4fa4-bd8e-8b15c35a9fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:ce:f3:54:f3:fe:ae:7a:36:3a:08:ab:34:
                    ac:ed:52:4e:a9:51:99:ae:c2:6c:e5:61:cf:ce:bf:
                    36:44:4b:00:02:26:f8:d7:5b:4b:4e:bb:26:b1:e5:
                    9b:be:82:1f:11:dd:bf:06:be:95:da:96:40:13:a7:
                    8d:9e:0b:9f:13:d3:2b:08:63:89:21:71:7e:08:b0:
                    08:0d:38:54:db:76:b9:1f:d3:5f:03:8f:c0:09:54:
                    16:d7:7a:fb:30:20:80:77:59:05:fd:e7:ed:f9:a7:
                    50:3f:7b:74:d5:fd:a1:af:a3:76:83:45:fa:80:63:
                    dc:d1:75:a0:9f:8e:75:51:e0:66:dc:19:f2:19:db:
                    a4:b7:34:9b:67:93:53:ca:b8:f4:34:b9:d4:fe:e3:
                    82:a3:d7:22:e2:97:03:4b:00:f7:22:dd:81:01:b4:
                    92:0d:4f:31:87:41:01:c6:29:22:9a:ff:94:69:7c:
                    3e:a6:08:5f:9b:69:bb:40:8c:20:4c:6e:5f:a9:4e:
                    0b:8d:8b:b3:64:9d:e0:ff:ec:b6:47:4c:94:cb:27:
                    25:12:60:78:26:8a:ac:0a:74:8b:f6:1b:fd:29:bd:
                    70:40:77:95:d2:47:15:b6:bc:6c:12:b4:b7:32:23:
                    4c:a8:7f:93:2b:37:b1:52:99:53:71:07:59:0a:7b:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B5:5C:FA:29:16:AE:D1:6D:A6:C8:5E:96:52:A6:49:CC:45:5F:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/da4b9f9a-1a3a-3340-bedf-0bd6091bb519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.crl

            X509v3 Authority Key Identifier:
                keyid:78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:45:8f:bb:3e:b2:3c:12:b8:77:8c:b7:aa:78:ee:7a:d9:29:
         e8:fc:73:c0:3b:d6:36:e7:fe:0d:eb:ec:2a:dc:3d:14:06:c9:
         ef:c4:3f:98:75:b2:a5:6f:19:04:8e:c7:31:60:b3:86:aa:9d:
         13:9d:fd:6a:3c:79:93:74:f3:b4:ce:4d:a0:0d:cd:a2:b2:b8:
         ab:ba:81:50:f3:92:30:9c:5a:67:51:87:54:07:31:16:86:31:
         de:83:c8:72:9d:9c:cf:b6:56:db:96:75:51:89:19:9c:84:6e:
         1a:08:98:24:1b:28:a6:0f:54:49:cd:7d:eb:39:88:97:0f:6b:
         f4:74:3a:11:7a:fd:23:2e:f0:dc:4f:ad:c1:35:c6:ab:1c:f9:
         6a:cc:df:1c:e9:3b:80:45:cf:3c:c3:08:90:f8:50:41:69:bc:
         71:45:22:6c:fc:99:9a:33:81:9f:13:b2:0a:93:39:58:b9:63:
         59:24:20:36:e4:5e:eb:71:7b:50:35:f8:ba:31:82:85:27:f6:
         42:27:39:75:e4:84:0d:b0:92:ae:02:35:3c:e4:df:0b:1a:b5:
         34:a1:9d:fe:87:a8:50:c2:62:30:5f:d4:e2:1c:97:33:78:80:
         c0:79:c5:15:bb:a1:1d:00:b0:de:6b:b2:b0:76:8e:ad:89:e3:
         cd:ad:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----