Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/21d389e5-9886-395a-9865-246657a6a787.roa
File:                     21d389e5-9886-395a-9865-246657a6a787.roa (raw, json)
Hash identifier:          HWQ9VffGEth/pZq2pEWvZfgQ0r++NY/MFQD16KZKRwo=
Subject key identifier:   81:05:DB:FB:47:57:23:DF:5D:B5:81:B0:CE:4D:0B:9A:37:A3:D4:51
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328576D51CC73C042CFC17344A95AC5
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/21d389e5-9886-395a-9865-246657a6a787.roa
Signing time:             Sun 12 Jul 2020 20:13:36 +0000
ROA not before:           Thu 28 May 2020 04:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     53667
IP address blocks:        162.244.92.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:44:a9:5a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 28 04:00:00 2020 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=45934c7e-5630-4410-8e78-7c202b7e8cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:62:d3:40:15:87:a6:c2:bd:f4:a7:6c:dc:
                    fe:17:45:e2:d6:64:aa:c2:50:b6:d7:71:e4:d3:6d:
                    20:d9:d1:7b:6a:ad:80:3a:57:f0:b6:74:b4:31:fb:
                    c6:35:1e:8c:a1:cc:e5:00:59:e6:b3:3f:85:2c:af:
                    cc:85:3f:94:fa:a1:da:03:23:33:cc:36:20:0d:ea:
                    09:57:5d:67:e6:ff:a6:5f:5b:47:f7:0a:44:d1:25:
                    4d:09:8f:d6:1e:f2:fd:14:d0:96:bb:fc:9f:00:5c:
                    40:10:0c:c3:ad:11:4e:43:41:4c:7b:8f:5c:7b:51:
                    a2:07:53:5a:89:df:dd:b5:81:d0:04:7c:e1:72:da:
                    a9:7d:16:a9:31:5d:e1:0f:bb:d0:ce:1f:32:70:98:
                    51:cc:46:16:7c:5a:f5:ab:f7:95:8f:f9:d8:d9:8b:
                    f2:33:c2:42:d5:48:a4:8c:c8:c5:a0:e8:07:ea:d3:
                    ea:6a:15:8d:92:a8:98:0e:7d:26:0b:e3:28:09:95:
                    b5:f3:63:08:39:f6:8f:46:55:3e:2c:1a:79:f6:97:
                    fd:05:09:70:fd:37:c6:b9:11:a0:b0:44:33:c2:b0:
                    5a:05:94:34:6a:89:d4:c7:08:1c:12:7b:57:c9:3b:
                    79:f8:f8:1a:d9:00:9e:af:ea:94:94:86:e9:e1:3a:
                    26:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:05:DB:FB:47:57:23:DF:5D:B5:81:B0:CE:4D:0B:9A:37:A3:D4:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/21d389e5-9886-395a-9865-246657a6a787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7c:5d:3d:8b:06:64:8d:e3:a9:34:74:e3:2a:4a:6b:39:ab:
         ff:85:d6:0f:cf:83:bc:2c:02:c4:d9:27:b1:98:9e:64:a6:02:
         87:9b:7d:ef:07:35:b9:47:ab:2b:38:5a:a2:8b:27:9c:a4:aa:
         d9:ee:20:af:db:d4:72:f3:5d:eb:02:67:18:f8:f3:25:36:92:
         24:e0:d8:f9:dd:45:1b:0f:47:5b:0c:19:92:71:cb:5d:73:53:
         8c:f1:e8:04:dd:18:f3:a2:7d:f0:91:ce:39:5a:57:d2:48:e8:
         b9:3c:81:ff:ae:ce:ad:b1:51:58:24:ab:51:15:e3:19:67:72:
         94:4f:9d:97:25:8e:03:58:54:7b:92:6d:34:ad:ee:99:88:eb:
         c3:e3:3c:28:85:31:11:ce:dc:7f:3a:42:1f:ad:57:af:7e:f4:
         c3:5d:87:91:b6:62:89:aa:e9:da:66:81:61:8d:11:d5:13:e4:
         d9:c6:40:4b:24:8c:ca:ec:5d:5b:4e:f9:36:08:f6:d1:10:99:
         42:a8:9c:7b:2e:7e:1f:30:f4:34:2d:82:ae:55:38:0c:2f:d6:
         f0:bb:4b:32:56:f7:c5:70:68:71:05:89:9a:2b:6d:9d:ea:a9:
         d2:d9:60:e3:b5:2a:5b:d9:4b:d4:b5:ca:8d:13:08:4f:46:4d:
         d0:f1:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----