Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4ba54d61-b6cf-3a76-8acf-657e40553db6.roa
File:                     4ba54d61-b6cf-3a76-8acf-657e40553db6.roa (raw, json)
Hash identifier:          SJVydjw9oXhxMIDcQIjhjZlwHlXAC9Lq8SI6a2uY9NM=
Subject key identifier:   B9:0B:25:F9:70:E3:6A:50:5D:E5:03:F5:2D:66:D8:EC:A6:30:4E:3B
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC1733064B7E0
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4ba54d61-b6cf-3a76-8acf-657e40553db6.roa
Signing time:             Wed 08 Jul 2020 21:46:13 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     397103
IP address blocks:        199.187.142.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:30:64:b7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=5e753440-cf8b-489b-a9b1-f072fed3ad43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:40:5a:09:d5:10:3b:68:63:ff:98:0a:89:
                    15:30:fe:b9:6d:e3:20:6b:3b:fa:9e:84:dc:5b:16:
                    3e:3a:eb:dd:2d:c4:0d:55:52:70:3d:3c:91:06:34:
                    37:b8:1a:89:5a:6e:ec:91:8b:3f:9d:3a:b6:fa:d2:
                    5e:6a:a3:00:0e:8a:9b:13:4d:14:eb:04:56:76:33:
                    fc:57:15:99:a9:8c:89:2a:b4:80:33:a1:a0:84:02:
                    5d:e7:db:52:ab:21:7b:cb:82:da:59:fb:7e:00:64:
                    d8:43:8d:67:0c:50:5a:6d:b7:32:c3:54:02:16:4e:
                    59:09:05:24:78:a2:2c:4a:9e:72:84:2a:2a:ee:f8:
                    08:65:9b:d5:4f:db:85:f6:74:26:2c:d4:46:3a:08:
                    8c:d7:b7:c1:f3:8a:01:5e:96:a3:2f:9a:ea:f6:84:
                    c5:92:a0:b0:5b:06:c2:63:8e:9c:3f:99:ed:31:4f:
                    02:ce:9f:13:66:fd:ca:8b:da:e9:50:78:c3:e7:3a:
                    d2:85:0a:e9:4b:b4:61:5e:14:1a:e2:c6:35:98:c5:
                    e6:49:d3:78:b8:85:dc:ea:b4:56:5d:59:c6:c7:af:
                    91:97:14:d9:fd:74:0d:45:fd:9b:c0:a6:8f:dc:d9:
                    ec:7d:36:55:b3:c4:c3:50:2e:4c:c3:c5:83:7f:c6:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0B:25:F9:70:E3:6A:50:5D:E5:03:F5:2D:66:D8:EC:A6:30:4E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/4ba54d61-b6cf-3a76-8acf-657e40553db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0c:12:b7:81:f5:f5:49:0d:e6:4e:6d:b3:be:db:46:6b:b2:
         ae:e7:e8:c0:e8:75:f9:44:0c:a3:81:ad:cc:4d:76:80:63:26:
         b0:df:67:bd:b2:4c:85:3e:5d:16:37:a9:f5:01:76:54:de:a1:
         3e:95:54:17:d0:24:70:b3:92:f4:5e:69:c7:40:a4:5a:4a:41:
         23:6b:88:1e:f5:1c:ef:8c:34:37:e9:7d:df:02:fc:40:b1:07:
         04:37:90:f8:0c:b3:45:34:ee:72:0d:59:c5:b7:9e:25:19:1c:
         3f:ba:99:47:07:af:ef:4b:4d:f6:bb:bd:68:a2:e2:c2:4f:76:
         5b:b1:ad:c0:b7:a8:65:bb:ba:f9:ae:2b:40:77:f6:12:e3:7a:
         69:7e:60:87:14:8a:20:75:a5:67:13:30:e3:b1:fe:3c:48:c3:
         8f:5c:7b:09:77:2f:9a:31:3e:78:a9:bc:a0:66:19:67:40:2f:
         4c:ec:8b:a9:ad:a4:fa:42:9b:b9:02:48:4a:85:09:ab:c7:25:
         39:c1:b3:ca:bb:fc:ed:77:ac:c3:37:9e:8e:ff:40:7e:65:a2:
         f0:ec:52:ae:0c:78:b4:d9:a8:2d:56:9f:39:c4:9f:76:06:cd:
         57:51:21:8e:ec:5a:c5:34:66:c7:5b:fd:d3:eb:86:87:31:e7:
         f2:91:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----