Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f16c74e4-3500-316a-8b35-71aeb286a93a.roa
File:                     f16c74e4-3500-316a-8b35-71aeb286a93a.roa (raw, json)
Hash identifier:          KXsDDQD7Rv1F3jJqMlDPkNc/GAhjdkSaBnVRhQxRTPA=
Subject key identifier:   8E:FA:BA:60:17:F4:17:ED:3E:AB:92:EC:ED:55:51:8A:70:97:71:D3
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328576D51CC73C042CFC173D970DF3E
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f16c74e4-3500-316a-8b35-71aeb286a93a.roa
Signing time:             Mon 10 Aug 2020 17:35:19 +0000
ROA not before:           Mon 24 Feb 2020 05:00:00 +0000
ROA not after:            Sun 13 Nov 2022 05:00:00 +0000
asID:                     53846
IP address blocks:        142.190.186.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:d9:70:df:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 24 05:00:00 2020 GMT
            Not After : Nov 13 05:00:00 2022 GMT
        Subject: CN=49c14f79-3f3a-4c10-a74d-4aa80fb1e898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:42:7d:99:27:ce:38:ac:fb:c2:00:03:2f:
                    8d:3a:5b:c2:3c:5e:82:0a:10:ba:cd:4b:39:61:8c:
                    8e:ff:00:cb:81:d5:a3:f9:84:0b:cb:cf:ce:8b:4e:
                    41:3e:19:56:7b:d6:74:62:4c:93:fa:1b:cd:bd:bf:
                    17:ca:3c:00:14:39:4e:c1:2b:4c:f3:13:ae:f3:c7:
                    cb:4d:32:f1:d9:9f:6a:87:75:41:06:58:ac:e4:7a:
                    35:92:a0:2e:00:17:36:51:06:fb:56:5e:c3:02:7c:
                    c9:75:dd:48:f0:d6:8f:e5:53:35:62:bb:77:c6:16:
                    12:e8:35:02:02:61:87:27:34:cd:ab:0a:b5:85:62:
                    fe:a4:a0:56:e9:0d:78:fe:0d:d5:90:2e:04:41:11:
                    72:bd:96:d2:ef:d6:57:54:40:ab:d8:e0:b1:4d:de:
                    15:f2:38:18:e2:95:77:fe:c3:1f:b2:d1:e7:2d:cb:
                    7d:81:89:d8:c2:8d:14:fe:28:9e:76:69:cf:7d:72:
                    4a:88:15:01:d2:eb:ca:5c:40:46:ed:95:62:45:60:
                    2d:22:ea:e6:b7:f7:27:e4:a9:e9:a7:a9:d9:d3:93:
                    0f:52:de:46:07:85:cf:ae:f9:b0:52:32:09:91:1d:
                    81:cf:a1:f3:c5:4a:5b:1a:c1:9c:5d:f0:9f:96:bf:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:BA:60:17:F4:17:ED:3E:AB:92:EC:ED:55:51:8A:70:97:71:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f16c74e4-3500-316a-8b35-71aeb286a93a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:53:6f:87:8a:7e:59:dd:a5:81:f2:a9:57:16:e2:a9:3c:1c:
         6c:02:d1:be:c8:f3:40:6a:fc:b6:ad:ad:61:f4:37:17:1c:9e:
         4a:68:2a:de:8b:98:35:98:23:51:34:91:33:9e:f2:39:53:d4:
         a8:2f:68:51:19:d5:59:3b:e0:28:cf:b5:81:7d:42:68:68:d2:
         71:2c:a1:12:70:5f:ff:3f:d1:ae:f8:a4:30:94:d7:c7:f5:18:
         29:e3:09:0e:a9:77:ef:5e:a1:e7:84:2e:84:16:a5:aa:a5:20:
         0b:e2:b0:3c:88:ef:76:5a:28:5b:21:19:b9:63:a2:b7:d5:ec:
         8a:02:49:2b:61:e4:99:b5:ff:8b:5f:e7:29:f7:4f:19:a8:1f:
         f5:a6:95:32:bd:f2:18:66:68:82:64:58:ce:34:16:28:76:ef:
         e4:16:09:20:fe:11:2c:d6:04:f6:68:9b:78:4f:0e:e0:8b:cb:
         08:b8:9f:03:d7:3d:08:95:02:7d:c7:c3:05:b5:b7:90:c8:a6:
         bd:3f:40:29:69:f3:a7:47:ed:fa:d5:eb:3e:20:e4:59:e1:9a:
         7f:21:93:6e:ee:5e:0e:c5:8e:2e:00:05:b5:a5:a3:1b:a3:6f:
         16:3e:f4:80:da:4e:b8:d7:f3:dd:d5:d8:8a:02:6e:b0:99:e1:
         79:f3:ab:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----