Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b08877a3-8522-36a0-b5e1-f0e553095dbd.roa
File:                     b08877a3-8522-36a0-b5e1-f0e553095dbd.roa (raw, json)
Hash identifier:          t5zTGWI04aasLnVw99hf/s/ZavW9jhdomV8wdvhTz9A=
Subject key identifier:   1B:DE:21:0C:6C:69:11:FD:A8:93:30:B6:4D:13:0B:09:1E:6E:FE:80
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC1707858D901
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b08877a3-8522-36a0-b5e1-f0e553095dbd.roa
Signing time:             Mon 24 Feb 2020 17:57:33 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Sun 29 May 2022 04:00:00 +0000
asID:                     62632
IP address blocks:        142.190.62.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:78:58:d9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : May 29 04:00:00 2022 GMT
        Subject: CN=7fcb7478-3ce6-4195-80e7-f114f3a826e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:d1:0f:9d:a2:6d:13:ee:15:cc:69:d1:b7:
                    4b:88:22:f2:1a:2b:85:0c:f8:a3:9d:39:4e:de:1b:
                    83:d1:fb:5d:ad:cb:49:b1:f8:62:33:d3:96:40:da:
                    2f:b6:c8:61:47:76:d1:1a:0a:b1:00:6b:c8:e3:04:
                    ca:b3:54:95:d0:ef:67:58:ae:de:fc:71:24:3c:12:
                    35:52:7a:08:5a:67:45:94:a6:d0:1c:a4:59:c4:2a:
                    8d:3f:11:ec:79:9d:dc:13:01:f8:49:a1:68:86:1e:
                    59:14:35:fb:2e:7e:05:2f:19:45:d4:52:e7:26:70:
                    de:3b:b2:ca:4b:ea:2d:90:d2:d6:cd:88:04:f2:80:
                    d4:1c:22:79:26:e7:dd:87:cd:6e:e0:e5:a1:98:80:
                    7b:79:3f:f6:59:2e:2a:8d:f8:2f:72:d4:fb:2f:a0:
                    20:69:b5:9b:2f:5a:c7:12:1a:12:1d:25:73:d1:87:
                    b1:c7:8a:f1:6e:88:26:5c:19:66:f3:59:9d:f6:0c:
                    e1:30:44:9b:db:3b:31:97:e9:9a:3d:4e:eb:22:a0:
                    6b:75:4b:a7:f6:1b:36:6b:d2:57:fc:17:24:35:29:
                    fe:50:5e:1e:50:0a:43:c0:b1:43:3c:05:63:a2:48:
                    cf:88:56:ae:ec:4a:f4:0f:fa:0c:6b:c2:54:c7:22:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DE:21:0C:6C:69:11:FD:A8:93:30:B6:4D:13:0B:09:1E:6E:FE:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b08877a3-8522-36a0-b5e1-f0e553095dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:de:a0:80:1a:b8:f1:93:bf:59:9f:c4:ce:e9:14:ec:d9:
         fe:b2:34:67:8c:a5:98:30:b3:a7:74:fa:fc:1b:d1:0e:b1:db:
         ab:b0:7e:85:d1:22:b8:de:a6:a9:52:46:c1:39:a3:b7:aa:3a:
         cd:73:fd:1b:e7:46:5d:99:56:f8:95:69:a9:ab:c5:2d:a3:e6:
         3c:ad:40:32:5d:2d:75:d9:d9:8b:f0:62:ba:76:0c:bb:52:01:
         54:d2:8b:8a:62:24:21:52:55:d8:5d:55:a6:19:02:06:0f:77:
         d5:eb:dc:a5:86:8d:a2:e5:76:d4:e0:ab:18:69:5c:78:19:57:
         c9:fe:33:49:37:50:a4:e2:14:2d:23:8b:b4:30:2a:53:0b:d6:
         bf:5e:36:3b:65:e9:a9:7d:9d:23:89:cb:5d:3d:50:5f:aa:65:
         16:46:14:7b:26:1c:dc:a3:1b:44:ac:b3:78:03:2e:2b:e8:f9:
         27:52:43:b7:c4:ca:a4:fc:b2:dd:ac:68:bc:bd:d1:ee:a7:33:
         18:70:ca:2d:a0:41:d2:d0:bf:2f:76:5e:10:53:e6:03:93:3b:
         3f:54:28:28:e2:36:eb:ac:2b:e6:b6:da:92:ee:6b:45:66:ae:
         8a:4c:a2:ad:c6:d8:ae:65:43:0d:ba:bd:2f:a7:1b:37:7c:c0:
         25:06:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----