Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/b43e5995-1d42-3060-a406-dc22db388cd7.roa
File:                     b43e5995-1d42-3060-a406-dc22db388cd7.roa (raw, json)
Hash identifier:          2T2V8mAY5dg8cp9AsLLkC2HKyrWxrOsGNQlX2YiQEuo=
Subject key identifier:   86:27:F5:55:15:AE:F8:DC:CD:18:10:3A:88:B1:65:FD:A3:B5:33:A2
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328576D51CC73C042CFC17074C67CD5
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/b43e5995-1d42-3060-a406-dc22db388cd7.roa
Signing time:             Mon 24 Feb 2020 01:18:50 +0000
ROA not before:           Wed 17 Jul 2019 04:00:00 +0000
ROA not after:            Sat 28 May 2022 04:00:00 +0000
asID:                     64200
IP address blocks:        209.126.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:74:c6:7c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jul 17 04:00:00 2019 GMT
            Not After : May 28 04:00:00 2022 GMT
        Subject: CN=412012ee-cf69-4918-a33e-70b89cc1df94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:81:32:aa:86:f1:9a:fe:8b:4b:01:3c:15:
                    b5:96:00:38:3e:b9:f7:5f:65:b5:4a:da:ef:fb:88:
                    76:a3:04:b6:ca:f8:1e:84:f8:5a:bb:8e:cb:e7:27:
                    b0:1b:95:7e:da:68:c7:b1:71:e0:71:d5:51:d2:48:
                    cd:81:dd:fe:f4:61:de:f2:e1:37:d1:7a:fe:37:f6:
                    e5:d4:10:eb:83:6b:56:e9:bb:7f:77:ca:43:6c:09:
                    95:2b:b1:6d:6d:59:c3:19:64:ab:66:47:77:ac:fa:
                    a4:34:a5:b1:ac:f8:d4:03:68:4a:a3:1b:ca:ac:16:
                    a0:86:f8:b7:83:89:36:9f:24:af:47:55:83:70:4d:
                    ae:c1:60:1e:53:ac:eb:57:e8:e7:4c:3b:25:ba:8e:
                    05:21:53:4b:68:e4:06:01:5a:b3:bc:eb:d3:65:f3:
                    ee:3a:cb:36:9c:4f:e5:7d:c0:8a:10:42:e0:b4:f8:
                    ed:f7:eb:e3:66:79:2f:42:a7:67:f0:a1:66:e2:f0:
                    2f:a4:56:a0:98:12:10:f6:5a:e2:61:8b:c4:bb:d8:
                    6d:d5:eb:43:22:8d:16:bd:0c:5d:40:90:be:18:e3:
                    91:a7:6c:82:40:c1:60:cc:91:c7:85:fc:07:2b:c6:
                    88:95:2d:4a:c9:2b:34:01:3d:5b:d7:e3:fb:56:31:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:27:F5:55:15:AE:F8:DC:CD:18:10:3A:88:B1:65:FD:A3:B5:33:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/b43e5995-1d42-3060-a406-dc22db388cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.126.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:e9:58:43:46:91:07:bd:4f:af:fa:3d:3d:77:18:75:fc:40:
         88:af:8a:a4:fb:d0:b0:b6:d3:ee:0b:7c:ad:17:76:d8:ab:92:
         c4:9f:a1:9f:72:23:23:30:c5:bb:fe:c2:a1:99:ff:7a:c5:be:
         55:b0:1a:04:bf:bc:72:41:9d:97:62:9e:91:28:fe:9f:2c:44:
         6c:b4:a6:a9:9b:9b:1a:a9:f3:b1:69:01:26:96:23:fc:51:15:
         eb:e2:2e:7e:f1:a8:f9:6b:81:c8:24:cf:19:3c:78:9b:25:e8:
         de:08:18:a8:04:0c:84:e4:ee:24:a5:74:69:dd:33:29:1f:34:
         56:3b:5f:f4:61:e5:f1:7f:e3:5f:ab:66:8c:94:c6:ee:fa:27:
         9d:20:c5:c8:c9:3d:55:f9:59:72:18:b4:20:26:03:9b:8f:27:
         23:8f:bb:57:9a:02:a1:b2:6e:d1:fb:d2:1f:12:47:22:2a:f4:
         03:a1:9a:4d:2a:4c:d1:2c:18:d0:3a:35:3c:b7:bd:d9:9f:13:
         de:31:0c:62:c3:15:6c:3e:7c:36:c8:1d:c4:55:53:3e:22:36:
         77:e4:ea:85:c7:9f:10:7e:66:6b:db:7b:50:65:5c:18:08:62:
         2f:c7:95:fd:ac:12:ab:2b:9f:50:31:39:b5:b4:62:67:3f:5c:
         0e:54:fa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----