Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/6fb3d3a3-6f62-362d-aa4c-fd6972603122.roa
File:                     6fb3d3a3-6f62-362d-aa4c-fd6972603122.roa (raw, json)
Hash identifier:          N44BlRrHNg+nVMt3c0YXMg2EkHLNi24QLaGP5k+MhSY=
Subject key identifier:   3A:62:02:0D:73:C4:7E:47:5C:09:45:A8:FA:FA:0F:2D:40:A5:6C:D8
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC173306B10E8
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/6fb3d3a3-6f62-362d-aa4c-fd6972603122.roa
Signing time:             Wed 08 Jul 2020 21:53:09 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     398126
IP address blocks:        199.187.138.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:30:6b:10:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=d2336b25-f3d6-4ffb-ac29-90c561925ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:48:d3:c3:60:44:92:e6:d1:03:68:3b:e3:
                    29:b1:44:d7:22:27:16:fa:ef:e7:dc:0f:e8:b7:92:
                    73:4e:30:cd:59:96:64:03:8c:86:70:58:0d:75:2a:
                    05:c9:b1:b8:8b:03:96:6e:05:63:7c:48:5a:93:da:
                    84:c5:2b:3c:dd:14:39:0e:a3:64:07:ad:b8:77:71:
                    33:c6:8d:5b:94:24:6e:0b:bc:d4:96:57:a2:46:d7:
                    57:71:42:a9:df:37:d6:c1:14:bb:12:e8:d9:03:6c:
                    e1:68:64:61:d5:6a:f4:5f:62:03:b8:87:86:fa:0f:
                    b2:c0:6b:dd:49:ea:7c:1a:99:30:cc:8d:26:2b:39:
                    30:41:de:30:ef:69:06:a8:54:20:58:0e:98:88:8d:
                    8b:61:95:0c:3c:0c:3f:62:f0:75:0a:e3:99:ae:b4:
                    05:7b:bb:4f:5a:22:f7:8e:cd:12:72:ee:55:ef:6b:
                    f6:91:ed:33:a6:9a:cc:5b:17:8d:93:81:a0:4e:d2:
                    54:58:80:93:6f:8d:0a:a6:7d:85:f0:26:43:e5:5d:
                    3d:1b:95:93:ca:b6:09:74:f4:61:99:42:a5:de:b4:
                    c4:29:54:00:be:1e:9f:59:26:c3:ba:a6:39:16:91:
                    53:9c:9e:75:9c:95:5e:0b:c6:f2:cc:57:31:ff:7d:
                    78:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:02:0D:73:C4:7E:47:5C:09:45:A8:FA:FA:0F:2D:40:A5:6C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/6fb3d3a3-6f62-362d-aa4c-fd6972603122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:16:35:49:bc:b7:a5:b8:ec:57:5f:df:9f:f3:5a:11:5c:59:
         91:ee:82:4e:49:1f:ba:5c:c7:91:c9:97:e3:fc:75:de:8d:03:
         06:bc:72:2f:c2:e8:9e:76:80:fb:1f:9c:13:03:c4:57:06:78:
         5b:64:0d:ab:fe:5c:ac:54:b7:6c:55:d3:df:e4:60:19:6d:5c:
         75:28:51:9b:6f:9d:d0:6c:8a:ae:86:bc:08:af:c7:7d:2f:e9:
         80:b3:5c:7b:10:a8:fd:4f:6d:f0:6a:1c:92:33:1a:da:5e:b8:
         f7:45:17:6c:e1:b3:49:d9:c8:10:b9:20:c3:ec:ae:fc:f7:45:
         07:a6:f5:63:5e:51:90:69:25:14:83:a2:bf:c8:87:31:9f:31:
         16:84:1b:84:d2:ed:2f:7a:12:38:62:94:b5:ed:75:2b:dc:7f:
         cc:41:8e:a0:c7:53:77:35:11:d7:28:43:f1:73:13:62:23:f2:
         91:21:da:05:b3:65:be:32:f1:53:27:6d:3d:05:d6:06:10:84:
         6b:47:bf:d9:37:a0:81:be:d9:4e:4b:9e:4d:a2:cf:3f:79:06:
         74:b9:92:90:f3:55:83:65:63:83:1c:8b:74:00:78:8d:aa:d7:
         56:56:53:e4:fb:23:6f:bb:2a:15:0b:09:0b:ad:2f:f2:3f:bc:
         f5:2f:fc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----