Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4b0bd8c5-a1ad-3b1c-80d9-f14ef649c699.roa
File:                     4b0bd8c5-a1ad-3b1c-80d9-f14ef649c699.roa (raw, json)
Hash identifier:          RCOpAW2z2R7jenmSR3hYQEYsT0TIBuFPo/6o+kxBG+I=
Subject key identifier:   6B:A1:93:D6:F5:5A:D6:AB:17:57:6C:F9:B1:81:BD:68:5A:1D:DC:EB
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC1733065EF60
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4b0bd8c5-a1ad-3b1c-80d9-f14ef649c699.roa
Signing time:             Wed 08 Jul 2020 21:47:33 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     10984
IP address blocks:        204.107.105.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:30:65:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=5c9cd1bc-b74c-474f-b42a-8688b785fcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:28:f3:0c:ba:a7:2e:f3:10:f2:25:38:47:
                    d2:a0:c5:8b:de:9a:6c:31:ab:27:59:a2:c8:cd:4a:
                    b6:0b:f4:32:99:b9:71:cc:97:e7:11:2d:52:fd:75:
                    17:a1:ab:9b:43:94:c9:2c:f0:8b:dc:c0:da:0a:6d:
                    f3:ab:36:78:e1:73:46:49:09:5c:ff:1d:4c:1d:6d:
                    a4:c6:84:c7:26:6d:dd:0d:e0:6b:ae:26:06:38:07:
                    9d:c3:31:43:05:a9:4b:ff:8f:81:3d:df:ca:40:9c:
                    9d:77:d3:68:d9:e6:a1:e7:65:47:b6:97:f7:87:3b:
                    32:76:6a:25:c2:7c:2a:a3:16:1b:c8:73:24:53:90:
                    14:89:34:8b:2b:a5:85:a6:24:35:fa:8d:f4:39:96:
                    a2:46:48:0b:b0:c8:e5:ad:ac:d7:b0:e6:25:f7:00:
                    94:cd:6b:c3:0e:b5:a8:cf:15:ac:d9:ca:f7:0a:c7:
                    98:8d:36:8b:96:d4:d7:7a:d8:de:57:97:17:b4:d3:
                    eb:9c:44:88:d5:2c:82:d1:ce:9f:61:a8:79:91:61:
                    25:2d:18:7a:b0:73:d7:2b:9c:7e:d5:61:68:22:c4:
                    90:ab:cd:9e:55:a6:32:43:e3:fe:38:67:2c:da:c4:
                    c2:2a:07:63:3c:92:e0:06:e0:eb:19:74:89:ce:ef:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A1:93:D6:F5:5A:D6:AB:17:57:6C:F9:B1:81:BD:68:5A:1D:DC:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4b0bd8c5-a1ad-3b1c-80d9-f14ef649c699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.107.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:62:6b:15:7c:76:fb:33:0c:14:3e:24:61:25:e5:6c:92:5f:
         75:e6:b3:35:5e:ac:bd:35:d0:c2:84:f1:bc:25:c8:b6:84:e6:
         29:c8:1a:0e:a1:b1:64:e6:09:8f:e9:9d:11:dc:70:c7:4a:8b:
         b9:71:5b:93:af:ec:f5:c6:5f:ac:89:e9:49:ab:b2:02:03:ac:
         98:34:ef:7d:c2:81:14:e1:04:a6:44:d6:5a:c4:23:2b:e0:67:
         48:c9:d8:38:0c:9a:1e:37:82:29:29:a9:36:48:bb:98:01:cd:
         0f:a8:dd:e4:90:ec:e2:2d:f9:c6:90:de:67:d3:b1:3b:89:eb:
         53:bb:53:dd:94:04:63:49:06:9f:36:5b:66:a0:58:00:4c:50:
         6f:13:7d:73:fa:fc:ec:2a:7c:96:79:5f:1b:41:9d:22:ff:5c:
         c7:eb:3b:12:c3:8d:56:67:92:fc:97:81:57:6b:50:94:a1:5f:
         b6:e2:d3:18:f6:8f:db:97:cd:76:06:35:46:67:dc:a0:be:8c:
         35:dc:0e:d2:20:e9:74:a2:db:d4:23:c6:53:93:bf:70:f0:1d:
         5b:a9:61:57:ca:38:31:a7:61:9d:76:40:eb:3f:e2:4b:f7:c7:
         c7:13:b8:50:a7:2b:28:af:ff:d7:2e:d5:08:1b:0a:8d:c4:43:
         91:25:43:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----