Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/6608d1ad-2846-368f-bfac-22727952bf21.roa
File:                     6608d1ad-2846-368f-bfac-22727952bf21.roa (raw, json)
Hash identifier:          MjR+ze6uYNNT2PNkd9ZsNbrlSKrwYx1iR6olh88hUUo=
Subject key identifier:   DE:BE:08:3F:04:06:DD:46:3B:44:6D:EF:89:E5:78:CF:6E:65:73:D4
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F432858394DFEC3B44E8536B0EB47D5C0
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/6608d1ad-2846-368f-bfac-22727952bf21.roa
Signing time:             Fri 27 Mar 2020 04:00:00 +0000
ROA not before:           Fri 27 Mar 2020 04:00:00 +0000
ROA not after:            Tue 21 Mar 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        170.176.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:4d:fe:c3:b4:4e:85:36:b0:eb:47:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Mar 27 04:00:00 2020 GMT
            Not After : Mar 21 04:00:00 2023 GMT
        Subject: CN=5e0a5142-51d7-4215-bf39-53c908116cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4a:45:05:ff:74:19:13:ba:b2:32:4b:97:45:
                    76:0b:ba:3b:a6:14:19:27:5b:35:41:6a:ac:2d:2c:
                    94:6d:90:e7:d3:ab:51:de:be:57:70:a3:8f:da:24:
                    a2:15:4f:b7:82:76:6e:2a:4d:5d:02:51:14:12:ff:
                    7f:0c:71:91:45:c6:5b:bb:8f:76:9c:5e:5a:e6:25:
                    3e:07:f4:16:43:00:3c:de:1c:51:1d:b1:a2:f6:3b:
                    76:1b:f7:af:1a:3d:93:25:df:cb:dc:4e:c1:bc:26:
                    95:c0:81:df:6b:80:5c:0b:06:25:d9:78:fe:88:f6:
                    45:ef:6d:87:f6:ca:13:0b:d5:0f:f9:3d:a9:36:35:
                    e6:68:df:5f:d0:71:7e:cc:47:e1:62:2b:8e:95:c6:
                    9a:05:e6:79:20:e9:d1:5e:fa:49:66:53:2e:ea:55:
                    f8:50:83:55:d7:35:79:9c:06:a4:fb:a0:85:fa:07:
                    ab:34:3e:d3:43:06:e5:18:25:ee:46:94:12:ae:cf:
                    b3:d8:e0:32:74:b2:c7:ea:b9:b2:cd:70:e9:e2:4a:
                    ee:05:39:ab:1a:a9:ac:86:57:92:72:6a:52:19:64:
                    28:d6:6e:8e:18:04:7a:68:12:2d:d6:e7:92:20:d8:
                    f6:56:ca:a2:87:f9:3f:14:45:16:38:91:24:62:46:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BE:08:3F:04:06:DD:46:3B:44:6D:EF:89:E5:78:CF:6E:65:73:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/6608d1ad-2846-368f-bfac-22727952bf21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b0:d8:d9:98:85:8a:61:c3:96:4c:f7:d1:37:12:80:de:d4:
         21:6e:5c:a9:45:5a:d8:3e:26:fe:50:12:04:ec:59:6b:3f:5e:
         a6:48:1f:97:d5:63:09:a6:fc:18:9b:23:20:4d:09:75:8c:d1:
         b4:8b:be:83:10:38:3a:51:1b:06:8e:59:98:c1:77:3c:e9:3b:
         1d:90:5e:c0:68:c6:a3:22:6c:c0:1b:bc:ad:e0:65:4e:9a:04:
         6f:db:49:7b:94:cf:76:cf:fb:8b:37:78:46:b7:d6:d7:34:26:
         57:f8:40:22:cd:16:cf:ee:ff:1f:5f:6d:16:f1:86:db:4f:3a:
         51:b9:b4:0b:d3:b7:73:4c:33:38:94:3b:ee:37:a5:71:a1:5c:
         f2:77:b0:c7:f2:ea:80:e1:f5:b6:98:1d:dc:da:63:41:60:c5:
         63:90:f8:dd:55:47:67:51:2a:6c:63:1b:ba:6c:08:1b:97:62:
         d7:5b:b6:39:d0:e6:f8:93:f7:50:62:e8:f3:c8:67:bf:2a:df:
         b9:0a:fd:92:cf:44:f3:93:7e:22:98:2c:1a:c9:61:a2:3f:2b:
         aa:ad:2d:3b:eb:e5:e8:66:ca:db:49:ad:e6:95:04:50:06:f7:
         6a:07:59:99:a5:74:de:e5:7e:e6:e7:14:34:8b:7a:a8:a4:2b:
         93:e5:86:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----