Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/e5558a7d-342c-3066-b8e4-ee90b5fbb4a0.roa
File:                     e5558a7d-342c-3066-b8e4-ee90b5fbb4a0.roa (raw, json)
Hash identifier:          /n3wlUEglEtuGuWTnICl1p61VBadUjYMcxvT8+6TfC0=
Subject key identifier:   4C:F1:79:77:F8:B2:FD:F7:4D:E9:10:21:6F:13:8E:61:62:4A:BF:B3
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328576D51CC73C042CFC172290832C7
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/e5558a7d-342c-3066-b8e4-ee90b5fbb4a0.roa
Signing time:             Mon 18 May 2020 18:25:02 +0000
ROA not before:           Tue 28 Apr 2020 04:00:00 +0000
ROA not after:            Sun 21 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        207.202.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:29:08:32:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Apr 28 04:00:00 2020 GMT
            Not After : Aug 21 04:00:00 2022 GMT
        Subject: CN=9741d526-3a72-46ad-885c-c37e82cdfb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:02:4f:64:ab:d2:13:f7:24:60:07:cd:9d:
                    81:8f:cc:73:ac:67:f2:06:3e:90:34:27:24:0c:01:
                    6b:82:02:20:1d:7e:fe:89:5d:a7:c9:80:93:88:53:
                    f1:97:e6:05:da:fe:de:2c:6e:47:55:c0:bd:d0:cf:
                    16:e2:21:44:1d:e6:13:95:a6:ac:f4:44:1d:21:a6:
                    13:84:1e:ec:52:dd:aa:6e:29:09:ad:7f:24:c2:63:
                    70:58:58:c4:e5:99:de:fa:6e:bb:a5:56:dc:28:1a:
                    9a:93:d7:99:31:3f:2f:ab:59:b3:96:9d:c5:b9:88:
                    c3:1a:e4:3d:af:4b:5b:08:61:44:79:e9:58:a8:2a:
                    b4:b1:20:30:fe:85:2a:0b:09:5c:12:52:6a:2b:46:
                    93:82:28:e1:19:05:9f:70:3e:b6:7b:56:da:1f:06:
                    00:22:83:66:fa:ac:0b:3e:7c:d8:0a:00:a8:23:55:
                    68:63:8d:0d:fa:25:1c:a6:c2:ff:68:cf:61:ec:e7:
                    5c:77:2e:3f:40:3d:c5:f7:b8:c8:4f:0c:8f:c5:78:
                    94:ac:44:a2:72:2b:97:2d:11:6f:e8:2d:fb:fa:64:
                    e7:8e:7d:65:28:3f:f2:ae:a7:6b:27:04:2f:97:b8:
                    e4:45:5c:97:2c:61:ad:cd:49:78:b2:bf:f5:f5:27:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F1:79:77:F8:B2:FD:F7:4D:E9:10:21:6F:13:8E:61:62:4A:BF:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/e5558a7d-342c-3066-b8e4-ee90b5fbb4a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0c:e4:b7:17:89:fa:15:d4:13:05:be:ae:dc:24:1c:c5:aa:
         18:b9:c7:af:78:e0:9a:e0:32:bd:3c:1f:e2:f4:32:61:28:39:
         c3:3b:40:65:bb:19:cd:f5:e0:2a:2c:56:de:66:c1:55:7a:8e:
         66:76:70:7c:c1:00:00:8e:88:2e:b2:55:64:80:61:4a:31:18:
         f5:a0:7a:63:d1:10:14:54:e0:ad:a3:c9:cb:59:77:78:ad:57:
         94:c6:59:27:d9:35:ec:8e:51:b5:fa:b6:8e:52:01:f1:9f:2e:
         bf:7d:bb:c5:fd:17:c5:9c:d7:fd:08:dc:e8:76:b5:c2:40:af:
         16:d4:9b:1f:bc:19:04:53:34:36:47:3c:d6:bb:60:d6:dd:61:
         7d:93:ca:52:99:70:8c:98:55:0c:7a:38:b8:7a:a1:14:16:df:
         bc:ab:59:71:2a:4a:a5:99:25:7e:b9:fd:65:c3:81:fe:e5:51:
         6a:7f:b3:ad:56:04:29:4a:10:47:01:51:5b:e4:16:a5:23:18:
         c1:6c:60:44:df:7e:68:58:38:05:18:00:a9:30:7f:f5:6f:6b:
         fe:08:42:2f:ff:75:ed:00:ea:a7:20:23:f6:c6:53:52:71:32:
         fb:57:94:71:83:45:88:0a:1f:13:02:bf:38:b4:5b:d9:29:24:
         40:16:6f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----