Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/4e2a8904-bf45-38bd-b1de-2ac29e3acb0d.roa
File:                     4e2a8904-bf45-38bd-b1de-2ac29e3acb0d.roa (raw, json)
Hash identifier:          nfaw5rlEqLfT3e7vg+16ceivNEuZb8x776FzdZbYyaQ=
Subject key identifier:   B6:92:D0:A7:50:88:1A:51:69:8E:10:B7:AC:99:47:E8:C8:8C:0D:D4
Certificate issuer:       /CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
Certificate serial:       010D0C9F4328576D51CC73C042CFC17197DA2092
Authority key identifier: DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/4e2a8904-bf45-38bd-b1de-2ac29e3acb0d.roa
Signing time:             Mon 20 Apr 2020 13:49:47 +0000
ROA not before:           Mon 20 Apr 2020 04:00:00 +0000
ROA not after:            Sun 24 Jul 2022 04:00:00 +0000
asID:                     397546
IP address blocks:        162.249.184.0/22 maxlen: 24
                          2602:fde1::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:97:da:20:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
        Validity
            Not Before: Apr 20 04:00:00 2020 GMT
            Not After : Jul 24 04:00:00 2022 GMT
        Subject: CN=abbcf5fe-a1b7-4f2a-98dd-84f8da8fabd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b6:cb:a7:05:84:a5:3e:0b:17:38:ca:c9:e7:
                    d4:da:43:86:0e:f5:98:c9:ce:78:46:39:c5:68:16:
                    71:cc:c9:83:20:99:bd:47:21:31:10:dd:bd:eb:50:
                    2e:94:7e:76:04:8a:fa:3d:3b:3d:64:c8:d1:ac:37:
                    ec:e9:43:9d:62:b5:d9:bc:f9:4b:df:3e:2b:91:5f:
                    5f:20:bb:dd:68:6c:88:4a:90:2b:df:e7:38:22:f2:
                    91:e4:71:fa:fd:74:61:9b:53:4f:0b:9a:67:c7:b4:
                    bb:84:3f:7b:74:4b:d9:f9:f0:f5:5e:90:a0:f6:28:
                    1f:29:17:0b:49:37:b1:45:d7:70:ce:3d:e2:cb:52:
                    9a:57:9a:a5:8a:1c:6b:cf:84:4b:e3:d0:58:1c:20:
                    76:40:5a:00:cc:4f:fa:86:0c:97:fe:14:2a:b4:de:
                    d3:47:64:d3:a6:7c:00:7b:b3:f5:5a:e5:02:e8:7e:
                    55:7f:c6:eb:1f:b6:b9:50:4d:bf:53:e1:7d:35:fe:
                    86:2b:f1:c6:68:90:8f:25:38:96:01:af:bc:17:24:
                    90:b5:16:b8:3b:2f:84:04:c8:81:26:f1:54:a6:72:
                    5f:c7:ef:59:1d:4e:63:15:b9:7c:d2:52:56:f7:56:
                    54:2d:e3:6d:ea:64:a7:96:fa:10:28:e5:32:ab:8d:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:92:D0:A7:50:88:1A:51:69:8E:10:B7:AC:99:47:E8:C8:8C:0D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/4e2a8904-bf45-38bd-b1de-2ac29e3acb0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.crl

            X509v3 Authority Key Identifier:
                keyid:DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.184.0/22
                IPv6:
                  2602:fde1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:15:e3:eb:d7:42:55:a4:ff:9d:ba:10:f8:52:cf:6c:9c:08:
         a2:a2:ba:4a:50:4e:60:48:40:6b:c8:9a:a5:4b:1f:72:3e:28:
         7d:7a:7c:20:26:12:d0:82:f5:fa:0a:d2:54:07:f9:5e:ef:99:
         3c:28:74:71:dc:22:84:37:d1:94:3b:a2:fb:b8:c0:1e:eb:6a:
         ef:3a:71:a7:e2:c2:47:b8:45:20:c5:32:85:be:5a:19:5d:35:
         da:33:dd:20:df:77:2d:f4:fc:6f:6f:cf:b0:fc:b7:3b:1e:57:
         f4:c3:c6:73:e8:bf:41:f5:4c:5b:65:2b:88:fc:4d:a9:30:82:
         66:38:7e:6f:5e:69:fa:f7:69:0f:e1:43:a4:39:75:01:fb:43:
         72:04:8c:8d:22:00:f0:29:1f:52:20:63:1a:50:e9:a8:4f:ed:
         59:04:ff:ef:81:d4:b0:a9:08:bc:46:8d:87:fd:81:a9:99:76:
         4a:31:ce:c4:55:04:a6:05:cb:fd:7d:b3:42:9c:c8:87:6f:de:
         c2:99:ea:a1:66:76:53:75:88:8b:a2:1e:e2:8f:a7:dc:74:d0:
         83:ba:5d:05:9c:dc:cc:81:bb:c2:f8:a3:d4:95:b0:53:0e:34:
         60:3e:27:51:e9:df:f2:c0:69:35:9c:f7:db:34:7b:fe:ab:ef:
         30:af:e9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----