Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b19d88ef-c5a0-30d5-ac77-85ee9d6c92a3.roa
File:                     b19d88ef-c5a0-30d5-ac77-85ee9d6c92a3.roa (raw, json)
Hash identifier:          9IwGBx1cOSd5fvBWcLR9hrCF1pFXio190D1/xnV2mlM=
Subject key identifier:   1D:77:A8:CC:3A:AD:F8:26:C7:15:EB:4F:D1:29:91:93:54:6C:D7:8C
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1729466979E
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b19d88ef-c5a0-30d5-ac77-85ee9d6c92a3.roa
Signing time:             Mon 08 Jun 2020 14:47:30 +0000
ROA not before:           Fri 10 Jan 2020 05:00:00 +0000
ROA not after:            Sun 11 Sep 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        67.215.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:94:66:97:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jan 10 05:00:00 2020 GMT
            Not After : Sep 11 04:00:00 2022 GMT
        Subject: CN=2e01f2d4-e533-4d6a-bfca-7582e7a2b9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c9:0e:27:5d:ad:46:42:87:18:56:17:f1:6a:
                    5e:d0:06:0b:c3:b4:82:ef:09:11:d2:6c:e4:d8:8f:
                    13:75:df:aa:c8:36:6f:17:32:1b:e9:99:73:bb:3c:
                    54:c1:8c:32:5d:5a:7b:01:4e:ee:8e:d3:6f:fa:0c:
                    6b:1b:73:d0:68:41:59:48:86:1c:9f:52:03:eb:d4:
                    19:a5:40:61:b2:35:a7:db:7a:cc:3c:67:74:4e:8c:
                    11:0e:e1:38:ab:f8:a0:dc:33:99:6d:b4:bd:e4:79:
                    5b:d8:fa:34:0d:db:b9:fc:0e:70:ae:53:f2:55:59:
                    8e:fd:b0:99:94:c1:92:d0:68:18:e9:a8:89:dd:f6:
                    5b:5d:28:a5:9b:7e:e7:f2:6a:2f:4e:de:5a:09:28:
                    c5:77:1d:f0:55:fd:84:fc:b2:53:90:64:72:a4:a2:
                    65:0e:e5:5c:17:dc:62:11:8d:53:51:91:9e:cc:d7:
                    4a:a5:44:44:1e:a7:99:a5:2a:31:05:96:e1:d4:49:
                    b9:9d:85:03:5a:74:0a:3d:65:9d:b2:20:f8:15:63:
                    67:24:78:8e:41:f0:27:51:9e:3b:56:52:b2:e2:cd:
                    0d:83:92:bb:c4:99:dd:0c:42:49:91:42:a1:cd:64:
                    92:4c:14:3d:ff:77:45:3d:78:e3:78:eb:bb:f9:ce:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:77:A8:CC:3A:AD:F8:26:C7:15:EB:4F:D1:29:91:93:54:6C:D7:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b19d88ef-c5a0-30d5-ac77-85ee9d6c92a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4d:28:7a:d6:4a:eb:05:a0:81:a6:c1:51:9a:b3:f2:89:c8:
         71:4c:94:4d:3f:65:d3:29:2a:39:57:9e:a9:b7:ec:f8:f8:99:
         03:e7:77:7c:99:2b:75:90:d4:9a:31:fd:10:e5:ed:a7:64:09:
         66:1a:bb:98:68:7a:d5:a2:bd:75:c1:ed:f6:f8:9e:05:60:30:
         82:06:f5:2c:68:2a:c2:20:78:1a:1c:9d:66:eb:26:6c:d5:a1:
         48:b8:87:98:56:d7:53:e1:62:d1:3d:9f:fe:a3:4b:34:3c:f8:
         1d:ec:b6:21:67:52:90:7a:31:68:7d:bf:2b:71:e2:0e:12:2e:
         53:37:13:e1:82:8b:60:63:75:41:3f:e2:a3:5b:ce:9d:07:ba:
         bc:d8:81:32:9e:44:b3:66:0f:4e:2f:f1:1f:c5:9a:06:4b:f2:
         ad:33:b0:a2:32:80:c7:3c:f7:b4:37:f3:18:78:91:9c:93:bb:
         01:c0:ab:e8:9b:69:86:15:4c:21:b0:97:64:f1:d0:31:e2:88:
         02:57:fd:d5:e2:bc:2a:78:24:b4:0e:b0:bc:78:9f:51:1f:b0:
         51:9b:92:6a:82:62:7e:9d:f5:9f:10:24:95:7c:b7:95:d9:46:
         7c:2e:a0:82:1c:3c:ae:d8:83:11:e6:3c:3f:df:ad:a2:6f:13:
         0d:62:f7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----