Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/8d4948d0-abe9-37f0-af1e-bf612be04023.roa
File:                     8d4948d0-abe9-37f0-af1e-bf612be04023.roa (raw, json)
Hash identifier:          TfV+VdBZNb7oki5uj5/hGMQINHL9GF627pYUh47Bw9M=
Subject key identifier:   82:4B:DC:16:4D:43:F7:AE:23:22:03:93:D9:22:BC:F4:8E:BB:31:DD
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1729465276A
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/8d4948d0-abe9-37f0-af1e-bf612be04023.roa
Signing time:             Mon 08 Jun 2020 14:45:56 +0000
ROA not before:           Fri 10 Jan 2020 05:00:00 +0000
ROA not after:            Sun 11 Sep 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        67.215.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:94:65:27:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jan 10 05:00:00 2020 GMT
            Not After : Sep 11 04:00:00 2022 GMT
        Subject: CN=8ffd3a4f-0ff0-45b0-ac79-1bb7c86495d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:1f:df:d0:95:00:b3:fb:2a:4e:2d:86:48:
                    15:e7:79:35:b8:a3:d2:db:a5:69:95:5f:61:28:89:
                    43:87:ae:6e:7a:cf:90:7f:3c:80:af:b1:1d:9b:06:
                    bf:5f:97:7e:98:7e:76:ee:68:8f:48:7f:a6:51:e6:
                    f6:da:9f:ae:7a:71:1d:05:ec:49:c6:39:ce:87:71:
                    86:91:3e:02:1c:70:c2:95:f9:ca:41:fa:bf:c1:68:
                    06:3f:2f:bd:4f:91:06:d2:38:e5:92:55:9f:93:03:
                    da:f9:9a:df:59:eb:0e:7f:8a:99:b3:91:ef:ab:ae:
                    71:c1:0b:95:b7:19:8d:6b:4f:c1:69:95:93:3f:70:
                    28:d1:ce:fc:a3:36:75:f9:70:f7:e5:ca:6c:56:99:
                    69:29:a8:70:9c:0a:5b:4d:9b:ee:8c:bd:71:42:fa:
                    84:37:d6:8d:71:22:cf:00:b8:e0:3d:a4:aa:22:7d:
                    25:86:37:4a:d8:a2:06:e5:4e:af:ea:e8:7c:ab:b6:
                    0f:0a:42:36:8b:51:00:64:5e:82:04:69:40:6e:80:
                    73:91:41:35:41:be:02:3e:95:64:77:56:c3:b6:61:
                    21:c3:6c:74:89:bc:1d:83:c3:a8:8f:e9:9d:ba:28:
                    18:e5:25:ee:fe:e3:76:00:0f:05:c8:3c:15:cd:c2:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4B:DC:16:4D:43:F7:AE:23:22:03:93:D9:22:BC:F4:8E:BB:31:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/8d4948d0-abe9-37f0-af1e-bf612be04023.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:8e:fd:73:f6:8a:a3:03:8b:56:33:d1:3c:46:6a:dd:7d:84:
         20:9d:d3:13:9c:71:92:f8:f0:5f:f8:a3:1a:18:ff:ed:e9:a5:
         19:ff:ed:d7:78:54:dd:30:49:ba:9d:23:1c:da:a2:7c:9e:e6:
         b2:1b:ff:02:e4:ad:c7:8f:0d:18:e0:d7:00:9f:18:45:ad:32:
         85:af:21:cb:66:f2:fb:0f:f5:7e:f0:ae:38:29:f2:ff:ab:64:
         8e:0f:44:d1:9b:75:b1:62:f5:1d:b3:87:00:b2:d7:0a:7f:74:
         ab:4b:b7:52:1b:07:c0:bd:b9:73:8a:89:1f:b9:ef:b0:ca:a3:
         88:ee:af:a7:41:90:90:19:01:53:2c:58:fe:e4:d6:dc:f3:6d:
         23:12:d0:09:87:ce:76:24:5c:ba:19:d7:21:e0:1b:38:31:31:
         f2:b2:0c:54:9e:58:52:16:00:69:aa:c7:df:3d:20:ec:39:56:
         2d:0e:c9:89:40:cc:3e:4c:6a:31:f3:16:3a:3d:39:ff:57:f6:
         01:5b:8c:38:f9:1e:21:42:36:fc:88:3e:22:71:7f:48:52:de:
         00:c5:5e:f6:83:87:54:4e:bd:2b:c3:15:c1:fb:0c:e0:f3:76:
         37:65:33:2f:8b:57:de:8b:32:09:c6:70:78:79:a9:2f:03:4b:
         69:87:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----