Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc122ef-81fd-3328-b505-4160fab05c54.roa
File:                     3fc122ef-81fd-3328-b505-4160fab05c54.roa (raw, json)
Hash identifier:          fMiX5GERQpXx54GjVEpufmrGIWiDQ7xsyUlyF4jXAf0=
Subject key identifier:   45:25:72:B0:F0:5C:A3:6B:CD:A6:58:17:D4:C1:43:72:28:AA:B8:0B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DFDF7196B
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc122ef-81fd-3328-b505-4160fab05c54.roa
Signing time:             Thu 24 Oct 2019 13:31:32 +0000
ROA not before:           Thu 24 Oct 2019 04:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     393560
IP address blocks:        72.52.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:fd:f7:19:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 24 04:00:00 2019 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=1f4a6e0d-d530-4b82-ae0a-781122487690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:68:9c:0d:f2:1e:8e:72:75:48:b6:59:6e:
                    44:ed:fc:f5:c3:2f:47:eb:eb:a5:f9:ea:b0:4e:ed:
                    09:db:57:08:43:e0:0b:b0:80:88:26:5b:4f:97:20:
                    a7:79:63:f9:92:96:7a:d2:d3:6f:bb:99:84:7e:c8:
                    0e:ff:a1:40:5d:51:b8:a1:98:37:0b:cc:4e:ed:7a:
                    16:83:ea:97:6e:ef:35:5c:62:9a:68:2f:11:a4:91:
                    a6:bb:f7:1a:85:6a:68:65:37:0d:8f:d1:7d:26:98:
                    42:d4:7c:ab:d8:50:16:c2:ce:aa:c9:31:54:de:3c:
                    69:63:68:d6:69:54:29:d9:3b:84:98:e3:fa:92:03:
                    d5:73:39:0b:8d:ec:de:f3:2c:ec:09:b5:e6:d4:83:
                    07:51:20:20:d2:22:e1:a2:e2:80:ea:18:7b:f9:35:
                    e6:42:b0:f5:e2:49:c7:f0:02:44:8a:44:4d:44:65:
                    33:6e:ae:43:8e:77:a9:c4:06:86:80:c5:cd:b9:fe:
                    13:2b:9e:b5:62:57:29:6d:46:a0:30:54:1e:60:cd:
                    a1:1e:90:f6:3d:1a:50:bc:bb:52:b3:fa:8f:ea:00:
                    ff:ff:81:a7:a1:0a:44:5a:5d:53:b7:9f:ca:32:32:
                    2c:ad:a5:b1:23:94:75:e4:6d:2e:6a:b9:91:3d:58:
                    df:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:25:72:B0:F0:5C:A3:6B:CD:A6:58:17:D4:C1:43:72:28:AA:B8:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc122ef-81fd-3328-b505-4160fab05c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.52.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e0:12:bd:ba:7b:40:87:8b:e9:c9:20:77:91:51:45:f6:89:
         f9:bb:1f:86:91:4e:08:23:5f:fa:3e:17:e3:e6:95:f0:36:6b:
         72:a4:54:43:02:82:b8:c9:59:13:f7:5c:1c:85:49:e1:bf:e7:
         6b:52:5e:b2:ef:28:52:95:29:69:9a:ea:2e:bb:13:ff:e9:83:
         39:ee:3b:ab:a0:78:dc:01:35:91:59:4b:f7:c9:63:25:96:00:
         b3:09:97:98:2b:60:63:1b:56:56:7a:6a:2b:da:26:51:5c:41:
         0e:d9:41:70:04:b1:38:64:c3:99:d0:4d:63:e1:7c:c2:17:72:
         3a:f9:60:36:20:3e:be:22:5a:de:f5:bc:08:5e:ac:d2:b1:48:
         68:53:be:13:b3:25:1a:c6:b6:07:61:b3:a3:3b:05:19:1e:96:
         d6:31:ec:ec:6e:aa:eb:eb:6c:8d:2b:1c:8a:da:c4:06:71:88:
         09:ee:d1:b0:68:ca:fe:5d:6e:c5:9d:e0:f4:f6:8d:50:a9:1a:
         5d:25:5a:f3:e8:9a:36:e0:fa:72:78:df:7a:46:60:b9:b5:ab:
         32:7d:98:d9:17:e7:54:4c:3d:17:a8:57:e4:3d:9a:23:02:16:
         54:de:5c:7f:8a:27:fb:6d:c4:ca:67:1f:f1:80:96:28:1c:15:
         2d:21:65:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----