Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b3adad6a-7fd3-3249-b4e6-de809c2f35a1.roa
File:                     b3adad6a-7fd3-3249-b4e6-de809c2f35a1.roa (raw, json)
Hash identifier:          jsyn+IK12/gzVxvO6HyjNkSK31limzNPxkY6nk5f98U=
Subject key identifier:   87:76:4F:0C:43:5B:2E:9A:A7:F2:53:52:D5:07:F0:CE:4E:0D:31:59
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC17330699F17
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b3adad6a-7fd3-3249-b4e6-de809c2f35a1.roa
Signing time:             Wed 08 Jul 2020 21:51:35 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     32592
IP address blocks:        206.40.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:30:69:9f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=051343ee-098b-4b77-ae90-7d96ff986b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:42:9b:88:fc:b4:90:f8:3f:ac:a5:e0:80:
                    93:ee:f3:b3:64:15:30:7d:dd:9c:d1:0e:55:f5:b8:
                    4c:cd:44:18:8e:65:83:16:fa:a8:07:9f:16:8f:1a:
                    b2:fd:9c:c4:1d:5d:aa:7e:15:6f:86:d1:5c:a2:37:
                    8b:47:a7:ef:91:cc:76:8b:14:f5:fc:21:67:35:fd:
                    50:23:68:10:da:9c:d5:21:22:06:3e:c0:45:c7:40:
                    19:4f:d2:71:c3:43:c4:6d:8e:03:99:b1:d6:60:2b:
                    05:b7:e0:0b:3c:53:c9:a8:70:12:fc:51:12:f6:b8:
                    3a:19:44:b0:de:da:62:7f:9b:88:cc:47:e2:8c:7d:
                    78:2e:5d:f2:10:cd:a3:6a:c8:21:4e:db:7a:af:8b:
                    2d:a8:ab:b6:08:f9:d2:89:bc:3c:2d:6c:79:38:9c:
                    2e:09:42:9d:41:78:0c:68:e9:1f:69:cd:09:e2:67:
                    1a:80:2d:de:52:da:d1:b5:08:be:61:a6:ab:15:20:
                    e6:2e:fd:ae:9f:b5:3e:4b:fe:dd:fa:7a:0f:7c:1f:
                    d2:d0:79:88:ed:14:3c:99:66:a8:85:3c:cc:ad:3e:
                    f9:bf:79:59:c1:92:5f:f3:07:2e:d2:ff:9b:d3:c4:
                    11:91:1a:7f:a3:cb:87:ef:bd:06:1c:34:e6:81:eb:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:76:4F:0C:43:5B:2E:9A:A7:F2:53:52:D5:07:F0:CE:4E:0D:31:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b3adad6a-7fd3-3249-b4e6-de809c2f35a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.40.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:29:86:8c:95:97:8e:a2:23:d2:6b:cd:05:6a:93:d7:d6:01:
         73:bc:6d:1b:45:88:92:7b:77:d1:09:3f:69:eb:10:3e:9c:b9:
         f6:23:63:df:22:68:dc:35:6a:85:0a:af:86:5b:2b:f0:33:ff:
         35:0f:fa:51:f1:1a:83:c2:a6:01:30:31:36:e1:4d:49:8d:e4:
         dc:51:80:9b:c7:18:fe:51:26:e7:2d:08:93:7c:10:ab:b9:63:
         e3:73:4f:ec:98:a7:ec:ee:61:66:ef:d5:2b:e8:cc:ab:f3:f8:
         46:41:23:93:71:49:10:9c:2d:eb:77:33:a3:8f:41:df:89:4a:
         32:8c:57:c7:fd:e8:e6:8a:08:40:9b:c9:ac:7b:e8:80:60:0b:
         72:e5:44:b9:82:ba:d6:df:e3:d8:3c:53:d8:23:03:8b:c1:66:
         6b:ba:bf:3e:c9:a5:65:64:1a:9c:ca:98:3d:25:dc:8b:0f:00:
         6c:a0:52:eb:79:39:26:70:20:0c:e7:45:cf:a4:ad:51:f1:bc:
         49:42:b3:2f:e6:41:08:46:39:f7:52:f5:35:f6:a4:ee:3e:cb:
         ed:35:1a:b8:7e:97:aa:72:3a:c6:2a:be:16:af:38:2e:12:c0:
         6e:fb:f3:81:d5:33:0b:5c:78:67:1d:8b:a6:ec:b2:f3:52:22:
         32:b9:13:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----