Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4dc8275b-bf04-39a9-8320-3317bf36d6d5.roa
File:                     4dc8275b-bf04-39a9-8320-3317bf36d6d5.roa (raw, json)
Hash identifier:          QZ7/ocQKFjFMFDjL9cCKVGh3R8XnfCxkzhQQIo3OxPU=
Subject key identifier:   A2:ED:CC:ED:F5:D0:C9:50:AD:58:A4:45:26:FE:FE:65:25:E9:E3:51
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328576D51CC73C042CFC172290F6BB3
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4dc8275b-bf04-39a9-8320-3317bf36d6d5.roa
Signing time:             Mon 18 May 2020 18:32:55 +0000
ROA not before:           Tue 28 Apr 2020 04:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        207.202.20.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:29:0f:6b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Apr 28 04:00:00 2020 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=567dcad3-6acb-4d80-807c-f7d70a186ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:62:1b:94:54:87:bb:7c:1f:94:54:06:ba:
                    bc:76:f3:ba:a0:b1:16:d6:c9:b1:80:62:b8:33:20:
                    ae:68:dd:b6:d0:8f:88:bf:09:23:66:05:dc:d5:44:
                    78:f4:b4:e7:fc:86:bb:c0:14:14:ba:b6:87:b8:9e:
                    31:6d:74:c6:05:3e:ef:95:6c:c2:87:b5:ff:34:5f:
                    19:52:c5:fe:a1:ab:cf:01:1c:63:5d:95:d8:25:eb:
                    c2:ab:85:f5:55:4f:20:82:84:c9:e5:2a:a8:ab:c8:
                    23:42:dd:3f:5f:2b:a3:c8:af:fc:5d:10:bc:7c:cb:
                    ce:75:54:34:d8:f8:85:23:52:5e:e6:55:c8:94:4c:
                    75:ff:17:bc:c7:a4:d9:96:40:f7:92:e4:5e:29:b4:
                    32:68:f6:cd:2b:77:8c:71:7a:f9:52:38:37:67:87:
                    1c:0a:83:d6:8a:2e:52:87:63:90:9d:c7:68:30:ca:
                    0a:e6:0e:78:c0:c4:ec:96:e7:27:4f:74:f7:b7:30:
                    5b:b2:38:9b:54:37:6c:20:a1:66:5e:4a:ee:b2:b4:
                    39:e1:b0:11:11:cf:2b:1f:ab:f5:fe:e1:4c:d0:72:
                    88:1b:b9:42:ce:51:d0:19:ce:8d:b0:3c:8b:e0:57:
                    5e:ac:9a:1b:a7:30:d7:87:cb:2c:84:11:29:cd:03:
                    8f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:ED:CC:ED:F5:D0:C9:50:AD:58:A4:45:26:FE:FE:65:25:E9:E3:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/4dc8275b-bf04-39a9-8320-3317bf36d6d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:33:9d:21:ed:4b:87:4b:ee:21:31:e5:9d:2b:45:41:f6:89:
         c3:8b:73:1d:52:48:fc:54:03:0f:47:eb:9f:ce:0e:bb:7a:ad:
         17:0a:41:67:9e:cc:bb:a1:a6:0d:d8:b4:87:93:8e:a7:d9:75:
         ac:dc:af:36:5e:59:29:55:90:3c:bd:89:7d:15:90:be:81:51:
         7c:38:21:9d:eb:49:69:a3:5e:ae:d2:63:da:52:3e:e5:55:5b:
         02:d1:7e:0d:53:ee:11:32:85:bd:ec:34:68:d1:db:c3:ab:30:
         7f:48:9d:9b:7e:be:47:a3:df:31:fe:ce:86:5e:5a:1c:10:ac:
         17:c9:29:85:a8:9c:53:dc:f6:6e:88:0d:98:49:3e:65:5c:95:
         32:76:55:d5:ea:ae:c1:db:16:b1:83:d6:2e:ac:f1:6d:b0:55:
         b2:89:86:5a:bc:cf:1c:37:bc:15:3c:88:19:af:7e:88:58:b3:
         b7:0b:82:71:d3:ea:73:f8:cc:14:14:4e:29:e6:8d:08:e8:e3:
         3c:85:76:f8:2c:b2:65:31:64:80:1e:03:4e:1d:86:dc:d3:dd:
         1f:88:89:76:7f:cb:01:9f:83:56:5b:85:49:09:82:fb:d6:79:
         b8:af:63:0e:de:33:9e:e9:d2:c4:26:4b:18:f9:14:2c:20:6a:
         53:ee:27:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----