Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/0bd7a485-7af5-3a0c-bbc6-cf8e3129b671.roa
File:                     0bd7a485-7af5-3a0c-bbc6-cf8e3129b671.roa (raw, json)
Hash identifier:          y5lo5Es+RXvZ5Y0z/ZxWoeCYms4ak0ZzVwiH1LFJRrE=
Subject key identifier:   24:C7:B8:89:19:BE:54:71:3B:33:EB:CB:F1:FB:18:3F:DD:8E:A7:7B
Certificate issuer:       /CN=8eaae964-4641-4ed7-82e7-85ca167b427b
Certificate serial:       010D0C9F4328576D51CC73C042CFC17111E31832
Authority key identifier: FF:7A:03:68:19:DF:9E:EB:E2:C1:D9:9A:9B:C4:2E:7B:77:F3:5A:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/0bd7a485-7af5-3a0c-bbc6-cf8e3129b671.roa
Signing time:             Wed 25 Mar 2020 13:30:27 +0000
ROA not before:           Tue 24 Mar 2020 04:00:00 +0000
ROA not after:            Tue 28 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        199.192.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:11:e3:18:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eaae964-4641-4ed7-82e7-85ca167b427b
        Validity
            Not Before: Mar 24 04:00:00 2020 GMT
            Not After : Jun 28 04:00:00 2022 GMT
        Subject: CN=69960a69-b05f-471e-ad85-9b38a44e707c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:78:1b:53:1f:28:3a:a3:d1:55:3c:94:c2:
                    b8:03:5f:b3:15:20:0f:25:ec:19:b2:10:91:38:a2:
                    6b:d0:11:67:c1:33:28:30:68:cd:64:1c:66:ed:5e:
                    90:bb:68:9a:7f:38:30:bd:ef:5a:97:04:36:4c:13:
                    ef:1e:28:99:71:7e:32:1c:9b:45:da:e7:1a:ab:95:
                    d2:86:01:d5:6b:d3:b5:9e:ba:03:6d:7a:9e:15:27:
                    94:99:19:43:cf:53:58:74:5e:24:0c:a0:b4:43:ef:
                    22:92:c0:f2:0e:72:3c:aa:0b:4b:e5:5f:ff:b1:70:
                    00:9d:4e:d9:a3:5d:37:44:cc:6b:84:2d:54:19:02:
                    f9:66:d7:73:53:b8:0d:3b:32:8a:67:3f:74:db:04:
                    4c:d8:31:fb:9f:7a:dc:f8:1c:7f:2d:e0:df:d8:c7:
                    89:80:51:b2:49:7e:1f:d3:a9:2b:e6:1e:ca:75:0d:
                    86:22:26:c0:c3:0c:d3:ef:fd:d3:bb:75:02:c0:7c:
                    c7:78:3e:fd:63:0b:fb:d3:d2:f2:4a:96:9d:e0:cb:
                    b0:11:d6:dd:3f:09:b0:c9:fb:64:39:c6:f7:9e:34:
                    9b:ee:dc:23:73:be:8d:e5:e4:40:67:73:30:b7:d2:
                    17:b7:45:37:6d:cb:77:fc:a8:f4:75:75:e4:f9:a8:
                    bc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C7:B8:89:19:BE:54:71:3B:33:EB:CB:F1:FB:18:3F:DD:8E:A7:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/0bd7a485-7af5-3a0c-bbc6-cf8e3129b671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b/8eaae964-4641-4ed7-82e7-85ca167b427b.crl

            X509v3 Authority Key Identifier:
                keyid:FF:7A:03:68:19:DF:9E:EB:E2:C1:D9:9A:9B:C4:2E:7B:77:F3:5A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8eaae964-4641-4ed7-82e7-85ca167b427b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:46:ab:ec:be:7d:40:d5:23:ea:91:b1:9b:d0:ef:85:8d:b8:
         77:66:e3:b1:e5:66:dd:7f:6f:b7:e0:ee:97:3a:be:d8:99:71:
         ae:3e:e8:f2:7a:ac:de:e1:2e:73:1e:5d:f1:d6:25:cf:f6:51:
         e6:9f:50:c9:3f:b6:db:29:8e:56:14:1f:62:ef:56:09:a9:fb:
         b2:62:5e:39:a3:a8:c0:86:df:5c:3d:2d:65:e3:cf:67:64:e9:
         d7:f3:32:09:c2:f3:06:40:5d:46:6b:d8:cb:73:79:b1:4c:41:
         93:35:2c:12:cf:36:e7:7f:8a:4d:23:bb:81:9d:fa:f7:ca:ff:
         2f:01:da:b3:cf:ee:fa:ca:e8:c6:c7:0f:34:4e:b7:c3:b5:3e:
         ad:e2:20:90:d5:ca:95:60:e7:cc:f1:23:0c:40:58:34:08:4a:
         0d:7b:c5:46:96:75:57:70:93:37:b4:85:39:04:02:da:3c:64:
         09:59:bc:59:72:3d:dc:20:2f:e8:f4:fe:e6:ec:70:cc:20:0a:
         cd:57:bf:13:37:40:3a:53:c5:bd:4a:66:a3:d7:68:b8:36:3c:
         13:2a:65:6e:3c:b5:bf:2b:81:85:9c:ed:76:a7:3d:56:07:a6:
         f8:8b:a8:a7:e6:a1:c2:04:ad:ce:1c:b1:3e:b1:89:43:b6:ff:
         fd:14:5a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----