Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1642bea5-36a5-34ac-bfb1-5d40b332fd40.roa
File:                     1642bea5-36a5-34ac-bfb1-5d40b332fd40.roa (raw, json)
Hash identifier:          v8NMCvr26RLpNvTbuHyDB3J28LWBTi/44tjEVCgna8Y=
Subject key identifier:   A2:C3:CA:51:95:45:BD:B8:40:64:0C:A1:BD:43:BF:E5:98:BC:1D:13
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328576D51CC73C042CFC17344AC04BB
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1642bea5-36a5-34ac-bfb1-5d40b332fd40.roa
Signing time:             Sun 12 Jul 2020 20:16:30 +0000
ROA not before:           Thu 28 May 2020 04:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     53667
IP address blocks:        198.251.80.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:44:ac:04:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 28 04:00:00 2020 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=f69a0f87-14f5-4840-96ec-b14db9306948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:74:77:fa:f2:ce:e3:84:ff:b6:40:55:49:0c:
                    d1:22:cd:17:0d:5d:11:60:4c:9e:9a:bc:e9:da:3a:
                    68:23:d2:1d:a2:86:78:20:11:ac:49:9b:29:26:50:
                    f5:88:ad:86:13:3c:60:6e:20:67:b5:1f:83:60:d5:
                    29:89:8f:7d:e2:13:d4:f2:46:46:b7:a8:9d:8d:65:
                    47:ec:dc:e2:d6:ae:83:41:5d:a2:a1:ce:5e:22:77:
                    21:ff:db:96:af:81:3e:fa:41:d5:5e:f5:a5:88:c1:
                    85:4e:3e:5e:73:43:17:03:a6:e2:49:11:55:83:d1:
                    75:9e:bc:ab:27:18:34:38:35:93:fd:68:0e:3c:c1:
                    f6:18:54:19:f0:da:50:ff:1c:fb:bf:49:9e:77:28:
                    c3:26:1b:4c:99:10:06:cb:ea:20:fd:c1:63:b3:bd:
                    d1:fa:7f:ad:07:66:e6:50:f1:31:20:b4:17:cf:cb:
                    cc:b7:24:f8:7f:d1:98:64:7d:a4:f6:99:fc:bc:b4:
                    f3:06:4c:13:9f:45:22:92:42:e8:42:47:78:b1:41:
                    d7:4f:23:eb:2c:48:58:56:d8:09:b3:34:4c:ae:a6:
                    5b:b0:fe:cc:bb:7d:1e:95:0a:ee:11:26:d2:73:b4:
                    84:13:2b:cf:1a:02:1d:5d:e6:76:c5:71:02:d4:3a:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C3:CA:51:95:45:BD:B8:40:64:0C:A1:BD:43:BF:E5:98:BC:1D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/1642bea5-36a5-34ac-bfb1-5d40b332fd40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.251.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:f9:14:96:ca:92:75:05:35:38:55:c6:0b:c7:c6:03:ff:cb:
         83:2e:18:0d:91:06:71:d9:c6:31:1c:5b:4d:9d:40:db:a4:bd:
         08:3a:2f:9f:5a:4a:e9:ab:80:8c:d9:4a:83:1a:38:df:ca:dd:
         50:93:fb:40:22:bf:6e:51:05:3e:8f:c9:05:92:74:d9:51:0d:
         dd:b2:4d:19:6e:9d:f5:fc:66:a2:6d:15:1d:f5:22:36:d6:82:
         52:e2:8d:35:f8:8b:af:ab:d9:3c:b5:96:da:67:24:14:11:ff:
         af:7d:86:a9:66:d8:d0:1f:e1:1a:ac:e7:a8:be:6d:fa:f0:3c:
         e6:0b:d0:6d:0a:71:9f:25:1f:33:1f:4d:1d:17:a6:ef:94:1c:
         0f:67:5b:85:9f:a7:1a:ba:b7:9d:d9:92:c5:53:5c:e2:53:4d:
         ab:f6:61:65:34:9f:99:72:9a:32:ca:01:b4:80:0d:6c:2b:f3:
         00:97:f8:3a:98:53:6c:aa:03:1e:d9:c0:c3:f9:c5:12:34:af:
         7f:0a:9d:fb:b8:b5:71:85:ec:86:c8:43:4b:34:39:f4:95:d2:
         3e:bf:ad:97:c2:bc:f6:ef:2f:05:3a:19:75:bc:d4:89:ea:50:
         92:3d:68:9e:f7:22:f1:db:d7:a7:76:0d:7d:5b:c0:c7:27:71:
         ff:4b:ac:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----