Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/83e97f99-3400-3bea-b456-14a08e61abe9.roa
File:                     83e97f99-3400-3bea-b456-14a08e61abe9.roa (raw, json)
Hash identifier:          qxpfYNqYtUSp9ICzRxYHwVGhnBz5Q6SRZVdXsS2JJWQ=
Subject key identifier:   B6:A3:58:40:4F:36:16:44:AE:47:6F:76:06:47:57:2A:37:0A:39:6D
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC170785539F1
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/83e97f99-3400-3bea-b456-14a08e61abe9.roa
Signing time:             Mon 24 Feb 2020 17:53:36 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     13760
IP address blocks:        170.249.156.0/22 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:78:55:39:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=92e8a010-aae0-4eb5-8ff0-3e148b646e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:8b:2e:f5:1f:2b:53:cc:f3:78:d7:19:89:
                    d5:3d:3b:19:d6:72:36:69:59:00:9d:19:e8:44:90:
                    d6:9f:19:9a:92:f8:11:e1:18:a7:ae:34:1a:4b:1e:
                    29:ac:04:6c:37:6a:45:c1:27:ae:79:b3:84:ba:50:
                    aa:1d:49:0c:a0:f4:76:db:74:98:c3:f5:3d:63:6a:
                    7a:f7:d8:cc:70:76:fc:48:6d:0a:7c:3b:1a:50:5c:
                    fb:11:96:01:58:af:c3:5b:31:13:c0:e0:b1:ee:62:
                    0b:e1:be:a0:26:70:35:85:06:75:6d:c6:32:36:72:
                    86:a8:1c:b6:b1:33:5b:94:58:c4:b2:13:a2:19:f7:
                    0d:7c:82:5a:4e:08:57:b4:fc:99:2e:49:0c:01:f4:
                    79:7b:8a:b5:ca:da:a2:0b:73:fc:43:66:83:f6:7c:
                    c5:e5:7d:09:a7:75:c7:6a:c0:72:ff:24:50:04:85:
                    d8:3d:42:bd:b2:58:a0:6f:3b:01:de:51:fa:f3:a1:
                    59:d1:3d:87:ee:43:30:0f:56:f6:c3:39:b6:2d:78:
                    ef:11:78:de:aa:22:df:ce:e8:ff:28:2c:c1:d7:18:
                    c6:10:8c:5e:f3:c7:45:c2:2a:8c:5e:58:c8:ec:9e:
                    cf:59:05:fe:ad:ff:64:f8:38:f7:9d:f5:19:64:e6:
                    af:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:58:40:4F:36:16:44:AE:47:6F:76:06:47:57:2A:37:0A:39:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/83e97f99-3400-3bea-b456-14a08e61abe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.249.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d5:8f:97:85:5f:99:10:e0:c9:3f:84:b8:79:d6:f3:40:40:
         3c:7e:e1:e3:69:26:4a:69:2c:8a:68:c6:05:29:d7:dc:43:8a:
         24:11:07:c3:24:11:f7:10:5c:c9:29:82:87:7a:cf:e0:2d:54:
         14:1a:45:78:f7:78:61:cc:85:94:93:81:ab:56:fd:17:04:b6:
         33:eb:27:14:50:21:af:90:66:fd:c0:b8:e8:2f:d2:37:b1:f2:
         08:55:5b:f2:37:24:68:32:4d:6b:a0:3b:70:4d:94:c9:d9:01:
         ae:b7:d1:c2:60:f2:4a:87:da:af:dc:25:12:d2:d5:04:84:20:
         95:ef:2a:7a:91:94:22:8a:10:b4:24:68:0e:d6:b0:7d:3d:e9:
         16:7d:68:44:e0:70:80:e3:8b:a9:52:98:b1:c5:50:f4:81:1f:
         40:f8:4a:c5:21:34:02:ba:54:f8:06:c8:fd:f4:84:60:cc:bd:
         b4:39:b8:fd:8e:74:3b:45:18:6b:56:b4:bc:bb:df:9c:7a:16:
         0c:a2:cb:12:c5:e1:17:21:1f:ac:31:4d:f2:96:fc:ec:50:21:
         ec:66:d0:8b:f3:f5:be:59:9f:9b:7a:7b:02:52:a8:26:24:7a:
         db:74:f7:13:16:38:e9:b0:e2:9b:cd:5c:86:57:00:2a:b1:2c:
         4f:5d:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----