Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/a3f131f0-2ae1-32f5-967a-cd23a7eff31b.roa
File:                     a3f131f0-2ae1-32f5-967a-cd23a7eff31b.roa (raw, json)
Hash identifier:          fsJ2Dj9R58/EOHFoOpIyoTkmG8ITlEl2Gi6K3+OdLgA=
Subject key identifier:   9B:E9:94:A7:A5:BD:C5:46:71:46:DB:F5:BC:13:3A:4A:9F:96:F2:7E
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC17330615911
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/a3f131f0-2ae1-32f5-967a-cd23a7eff31b.roa
Signing time:             Wed 08 Jul 2020 21:42:32 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     397103
IP address blocks:        199.187.141.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:30:61:59:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=a3fc9dc4-46a6-46bd-822a-ece04946cbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:58:fa:9a:56:85:f3:eb:d7:d1:eb:39:5a:
                    09:25:92:eb:66:db:5e:6c:ad:82:16:44:86:7c:c0:
                    7e:4e:76:0e:ec:75:b4:ca:06:c6:d4:19:78:84:6f:
                    51:27:16:cd:f2:bd:d5:ed:74:83:3a:68:43:4e:9b:
                    2d:cc:ad:2d:9d:93:ae:2a:da:68:26:66:91:60:09:
                    9c:f2:7b:1e:ca:6a:b6:e9:aa:84:17:c4:c4:a5:0a:
                    f9:a1:11:7e:3f:d7:44:1e:9e:18:71:09:52:e7:87:
                    9d:e6:64:5e:b2:0d:46:58:58:52:74:8e:ad:6e:e4:
                    7e:87:a2:ba:01:a2:58:e2:9d:98:24:7e:20:08:03:
                    c4:df:52:6e:99:bc:4c:28:05:f7:55:46:9f:08:e8:
                    44:4f:57:d7:bf:cb:9c:3a:f2:5f:55:d1:58:a3:6c:
                    d6:12:12:21:f2:0f:8b:f1:b0:a7:7e:49:3e:ac:52:
                    3d:b0:55:80:57:d5:79:2e:1d:52:95:08:ce:8f:51:
                    1f:96:35:72:a1:e9:c3:17:cb:0a:cd:99:d7:b5:7f:
                    88:3e:6e:7d:55:f9:28:7e:47:6e:e5:9b:db:d3:8a:
                    79:a5:2e:5a:89:57:0b:2b:03:f6:80:21:e3:c9:fe:
                    ee:b1:2c:e1:10:2e:4e:7a:15:8e:9f:f9:10:60:fd:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E9:94:A7:A5:BD:C5:46:71:46:DB:F5:BC:13:3A:4A:9F:96:F2:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/a3f131f0-2ae1-32f5-967a-cd23a7eff31b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:89:20:5f:f3:35:14:97:b9:52:9a:d7:12:d7:13:1b:b6:b7:
         b3:ac:81:c3:66:3b:3c:aa:74:35:57:a4:a0:ac:cc:45:64:ab:
         b7:10:ab:e1:f3:3e:ae:88:d2:47:14:70:e1:f8:7b:96:04:c6:
         69:d3:e9:3e:42:64:d7:eb:8e:8b:a7:99:dc:8a:d8:34:bb:d0:
         a0:51:d8:52:df:02:c2:40:df:e4:78:c6:bc:9f:bb:8f:23:3d:
         3b:19:97:c0:bd:ba:db:75:2c:48:74:50:ff:74:42:ec:5b:f7:
         c2:10:62:88:6e:ba:74:3e:46:66:32:18:70:16:ae:54:c6:1a:
         12:81:d8:e6:d5:21:5b:95:16:0f:fb:23:8b:e0:cc:28:2d:01:
         8c:62:6c:4c:44:ed:a4:46:d4:09:70:03:61:aa:85:5a:61:24:
         96:c9:c6:fa:3f:0e:36:cc:33:73:8d:1c:c5:c0:da:7c:29:d2:
         82:e0:c5:f2:03:6a:24:a0:cd:1f:6b:a2:68:50:fa:02:58:0f:
         08:32:62:58:39:43:a4:f4:52:d7:dc:1d:38:75:9b:38:c6:b1:
         c8:53:d0:9f:f6:7f:c6:59:4b:45:6d:09:a6:cb:db:ce:8a:ed:
         a3:06:75:7f:bd:b3:5e:42:7c:b4:1b:1c:f5:cd:8c:d8:b3:e0:
         70:c4:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----