Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0d071e3f-e35f-3276-804e-ee2f693d0896.roa
File:                     0d071e3f-e35f-3276-804e-ee2f693d0896.roa (raw, json)
Hash identifier:          gf+ai2PTP2z0hVuCe9PYb90AJYN+lIdmLxdO9zuBcCc=
Subject key identifier:   3D:D2:F4:67:35:C2:D6:9F:FB:86:1A:04:72:94:CE:FE:AF:9E:92:D2
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328576D51CC73C042CFC17344C8E217
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0d071e3f-e35f-3276-804e-ee2f693d0896.roa
Signing time:             Sun 12 Jul 2020 20:48:02 +0000
ROA not before:           Thu 28 May 2020 04:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     397031
IP address blocks:        144.172.70.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:44:c8:e2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 28 04:00:00 2020 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=5f0b9a2a-041b-43c5-8140-4b5f07934d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:12:59:db:52:2d:11:28:a0:1e:28:e8:f4:
                    2d:b7:76:f6:8d:3b:63:15:7c:2d:46:97:97:7d:0d:
                    22:63:a8:90:c9:db:d4:92:4a:2d:91:49:cd:e2:79:
                    72:82:e6:b2:b1:bd:9e:28:94:50:aa:7c:e2:b7:13:
                    0b:4b:da:11:3f:01:9a:68:6b:22:5d:4a:ba:56:60:
                    92:f5:00:00:05:56:29:ae:82:ab:d5:17:b5:8b:46:
                    d0:70:5b:3c:3e:99:dd:8a:6b:21:13:69:1e:38:fb:
                    84:2d:2f:33:36:98:c1:f6:a8:1d:43:d7:dc:22:69:
                    78:05:7a:d5:c1:06:a5:dd:ae:a4:a9:82:54:ee:d0:
                    ea:97:25:6d:67:dc:75:69:9d:61:37:3e:bd:89:12:
                    71:ae:b3:54:04:76:bb:d6:22:3c:7d:8f:36:ed:3e:
                    4a:59:f7:5b:07:38:ce:e7:c9:2b:f0:ce:b2:36:97:
                    7a:fb:13:27:01:c1:87:13:56:4f:4a:82:55:92:76:
                    4e:c9:7f:ff:fd:c2:2a:67:9f:94:bb:a3:1c:f8:9a:
                    30:a5:78:2a:a2:bf:df:11:0b:00:be:e7:9b:07:93:
                    c0:64:ca:81:8b:0f:38:11:1f:19:5d:1d:a1:44:d8:
                    17:d2:f4:0f:dd:75:3c:1b:e6:23:5f:05:a2:5b:f1:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D2:F4:67:35:C2:D6:9F:FB:86:1A:04:72:94:CE:FE:AF:9E:92:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/0d071e3f-e35f-3276-804e-ee2f693d0896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f1:8e:af:f4:32:88:32:ad:c0:59:90:d4:57:26:ae:4b:e9:
         1e:b1:f6:7b:08:05:b5:31:3d:a5:c9:7d:12:5e:24:15:e4:2e:
         fb:62:46:e0:84:37:e8:e3:98:bc:0d:9f:02:63:9a:3a:f5:0c:
         f0:71:24:89:f5:d1:7b:a1:9e:a2:79:ad:da:2f:5c:fb:2a:81:
         70:6b:a6:8f:6e:3b:96:fb:f6:2a:94:44:b8:4c:f8:93:76:b9:
         ec:99:16:74:cb:a7:c3:c3:a0:ad:69:49:1f:4d:ca:31:e5:d9:
         30:e7:68:a4:4a:ce:a6:a0:2c:1e:c9:45:35:92:f8:36:43:1c:
         98:1c:d4:9c:b7:43:1f:88:80:98:73:c8:37:26:a3:5f:c8:a5:
         a4:96:0c:ed:ae:bd:13:0a:55:b1:5b:a0:7d:b1:b8:11:df:cd:
         20:50:19:92:d9:c2:cb:d3:2c:7e:79:55:4c:ac:04:38:a2:98:
         42:f4:9e:74:91:49:c6:8d:f6:bc:bc:55:71:f6:0a:2e:a6:d2:
         46:8d:bc:4a:3c:1f:a7:e9:90:51:ec:65:f0:16:a2:aa:ec:e4:
         a7:f3:3a:94:13:9c:10:ac:b2:2e:7a:df:cd:5a:31:3d:88:9b:
         4d:4c:cd:62:fb:2d:ed:aa:f6:26:1a:16:a2:c9:6a:20:b4:82:
         ce:cc:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----