Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/36dd913b-7b84-3c8e-9c08-f23b40fb8060.roa
File:                     36dd913b-7b84-3c8e-9c08-f23b40fb8060.roa (raw, json)
Hash identifier:          vITf9y0ywzNnJ/SVoX8wTc9ljuC07O+ccMJVw8pozPI=
Subject key identifier:   3F:E4:2A:E6:E2:DD:FD:39:0D:73:70:C3:4D:62:C3:A3:7A:5D:27:E7
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328576D51CC73C042CFC17344CB03B5
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/36dd913b-7b84-3c8e-9c08-f23b40fb8060.roa
Signing time:             Sun 12 Jul 2020 20:50:22 +0000
ROA not before:           Thu 28 May 2020 04:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     397031
IP address blocks:        144.172.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:44:cb:03:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 28 04:00:00 2020 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=e691b20b-eedb-444c-9c65-b96e8ee3556a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:61:f0:59:b3:a1:df:f5:15:e4:df:9e:68:
                    2c:5b:72:69:c8:42:26:3b:05:62:ef:a8:0f:f7:a9:
                    3b:1b:98:94:08:b4:35:10:df:cc:41:79:03:95:c1:
                    17:84:6e:f7:a3:fa:92:52:64:e6:96:a2:90:81:cb:
                    bc:bd:84:6b:c5:f7:c4:73:7e:a0:6f:6f:83:b1:5e:
                    81:9e:90:1d:5a:ab:55:72:0d:ed:9e:8d:2a:b3:f8:
                    d3:66:07:21:be:d4:3c:27:a6:68:fa:fa:7b:fe:71:
                    a2:64:c5:de:a3:4e:7a:ac:87:21:5e:55:61:01:30:
                    9f:f9:de:c1:56:1c:62:3d:5c:06:0b:4e:0c:80:e6:
                    8a:9a:2f:43:3b:00:ba:cb:78:b5:7b:4b:f9:ec:05:
                    02:a4:7a:b0:26:ff:03:53:b9:e8:a5:08:cf:96:6e:
                    07:fb:3a:51:fa:22:8f:17:e9:1c:93:1a:2c:67:29:
                    20:b6:e6:c0:b3:95:2d:83:d4:c9:ca:70:52:ea:96:
                    a0:8b:cd:dc:62:45:bd:09:74:44:6c:62:ba:e7:65:
                    ed:c0:b1:b3:03:73:fe:22:42:82:0f:bb:13:bb:0c:
                    89:11:5c:8c:13:fc:de:bd:31:b0:fd:fd:3e:d7:3e:
                    92:54:73:5f:5f:21:b2:25:93:ea:53:4e:4b:63:f8:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E4:2A:E6:E2:DD:FD:39:0D:73:70:C3:4D:62:C3:A3:7A:5D:27:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/36dd913b-7b84-3c8e-9c08-f23b40fb8060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:df:c8:20:ad:9e:ca:c8:f7:37:06:40:ff:bb:ec:84:3e:a3:
         ff:85:0f:67:44:be:34:2c:8c:cc:dc:02:63:04:99:1b:19:09:
         e1:9d:98:86:ae:d1:8b:ec:28:51:d2:8b:ce:5d:4c:75:e8:6f:
         7d:f5:30:1e:a5:43:65:96:9e:43:8a:df:f7:f6:07:e6:3e:dc:
         43:b8:7b:ae:4a:3e:9a:d0:76:79:6f:78:49:d7:88:c7:72:cf:
         68:a9:7c:fa:79:c8:87:f8:26:c6:97:37:dd:0c:2a:03:9f:be:
         2c:50:b9:d8:e7:11:af:2a:53:a0:0e:31:b2:67:14:40:da:fd:
         42:0e:af:df:c4:b4:77:8b:b4:4b:6b:ca:e7:e7:06:cc:4e:92:
         8f:45:33:25:67:fa:89:25:d1:cf:41:e0:bc:88:89:80:43:be:
         58:ad:02:c5:e1:30:50:32:4f:5a:97:5f:e7:63:e5:56:93:80:
         da:96:10:17:df:c7:7d:2f:cc:77:65:76:6e:8f:c9:38:a4:4a:
         a8:63:c0:00:5f:2a:1a:b0:43:cc:65:20:81:91:c4:b5:4f:24:
         c4:1d:3b:2b:88:5b:cb:1f:0c:d8:68:dd:3d:cb:05:88:f2:d0:
         8d:12:16:fc:3f:c4:6c:da:9e:0f:40:b3:d1:b7:8b:b2:ee:b0:
         5f:d7:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----