Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b50d4f80-878d-305a-9a71-2572401e47ab.roa
File:                     b50d4f80-878d-305a-9a71-2572401e47ab.roa (raw, json)
Hash identifier:          vQ0PgI+sVy3zK5IPGjZeNAbpqwQ2hUcNQA/8/xZgCS0=
Subject key identifier:   D2:50:8F:97:78:0F:A6:14:14:CE:5C:BA:1D:31:11:1B:75:F1:63:C8
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC1733067748B
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b50d4f80-878d-305a-9a71-2572401e47ab.roa
Signing time:             Wed 08 Jul 2020 21:49:13 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Tue 11 Oct 2022 04:00:00 +0000
asID:                     13760
IP address blocks:        208.117.207.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:30:67:74:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : Oct 11 04:00:00 2022 GMT
        Subject: CN=46630ade-6ace-4114-ac4b-c1d756510b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:8f:d8:06:27:4c:87:63:e3:bb:d4:9b:bd:
                    ff:22:e2:e9:ec:e8:e3:86:34:9d:03:d5:2c:d0:aa:
                    20:e4:a2:0a:19:31:00:2e:85:e9:a8:1c:cd:97:96:
                    9f:47:35:13:33:a7:37:98:cd:c7:21:92:8e:e3:f2:
                    15:de:71:de:29:9e:d3:fe:0e:84:4d:18:45:a1:06:
                    12:c5:b7:08:52:e4:cc:4d:c7:93:c6:7c:b7:01:01:
                    e4:b6:b7:53:fb:ad:be:56:01:03:36:aa:2e:db:4a:
                    96:4b:cd:08:94:be:f9:c4:cf:13:cb:b2:4a:22:da:
                    8b:80:6d:7c:2f:c8:1d:4e:c1:ec:f9:70:60:31:33:
                    39:0f:b7:09:44:f6:be:94:b9:ed:30:34:78:47:9a:
                    0a:0a:d9:f0:7f:e5:b1:c5:58:3d:54:6d:94:9c:49:
                    d2:60:31:56:35:be:11:fe:88:97:6f:6d:72:ca:ca:
                    8b:82:9a:8b:bc:03:fb:a1:69:a3:d5:67:0f:4c:5e:
                    44:85:04:c7:85:bb:45:d0:c3:b5:3c:04:dc:e8:70:
                    e4:22:d9:df:77:09:52:a9:ae:7b:5f:97:e0:31:ad:
                    7a:9b:4d:94:cf:0b:e4:b1:f6:fc:a7:1a:fa:57:fd:
                    aa:fe:03:f8:41:6d:ef:ec:29:f3:96:e0:54:14:e2:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:50:8F:97:78:0F:A6:14:14:CE:5C:BA:1D:31:11:1B:75:F1:63:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b50d4f80-878d-305a-9a71-2572401e47ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:e5:09:03:ef:dd:fc:9b:02:ff:43:a7:75:fe:b1:70:65:51:
         d7:cb:ea:c5:19:74:15:34:92:69:59:7b:a1:a5:40:cd:cc:5c:
         02:67:de:28:9c:27:a3:0e:9d:69:5f:36:42:41:97:fc:89:c6:
         0f:60:d2:70:e9:3f:10:95:96:86:20:0c:39:b8:06:d7:bc:06:
         31:71:9b:71:8a:10:c9:84:20:3e:c4:d5:3a:67:34:a3:98:cb:
         eb:8d:0f:f6:0c:23:3e:d2:76:9c:9e:43:25:5b:f7:f9:b3:20:
         84:3d:b8:9b:d0:cd:70:81:0c:91:03:00:a2:98:76:70:57:5a:
         3c:8e:84:d7:28:6a:81:b0:0b:83:fd:d4:fa:19:48:08:2f:ed:
         a9:96:da:da:c5:de:be:10:b2:9f:59:06:ef:84:cb:6e:05:a9:
         49:4c:15:56:9c:7c:ab:7e:11:72:69:17:84:e3:69:08:89:a5:
         e5:c7:7e:36:93:ec:73:d2:f7:15:2a:66:19:2e:a7:97:d4:38:
         b2:ba:49:82:c2:f7:26:78:6e:74:9c:7e:3b:51:b3:25:1b:2a:
         61:f5:64:a6:90:64:56:e9:37:13:1a:21:de:5d:fc:47:ff:e9:
         70:56:13:f5:b4:19:13:78:b2:40:b8:ba:5e:f8:20:06:52:3d:
         20:94:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----