Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6a672ec0-d3ef-3e48-89af-0bc8ae118ab2.roa
File:                     6a672ec0-d3ef-3e48-89af-0bc8ae118ab2.roa (raw, json)
Hash identifier:          5eAMNWlw72DcvEG3KlJ4iWaxFw5NjvyU7le+uaCgg1g=
Subject key identifier:   9D:0E:31:F6:B9:C9:CD:FE:46:3F:B7:32:93:2E:B6:2B:46:AC:07:70
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735A7E5490
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6a672ec0-d3ef-3e48-89af-0bc8ae118ab2.roa
Signing time:             Fri 17 Jul 2020 01:58:15 +0000
ROA not before:           Thu 28 May 2020 04:00:00 +0000
ROA not after:            Wed 19 Oct 2022 04:00:00 +0000
asID:                     53667
IP address blocks:        144.172.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:5a:7e:54:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 28 04:00:00 2020 GMT
            Not After : Oct 19 04:00:00 2022 GMT
        Subject: CN=2ca6a5ae-c6e5-42fb-b031-a83ce5b55579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:9e:35:8a:8c:41:9a:af:9a:28:e8:83:14:
                    46:01:ec:d8:44:77:1b:b5:67:1f:2b:1e:09:18:b1:
                    08:69:3d:cf:34:e0:b9:4e:df:4a:e1:08:3f:db:b8:
                    fa:17:a9:6f:45:a0:5a:29:bb:1a:3d:2d:09:43:20:
                    69:ac:65:da:62:2c:a1:b4:8b:9c:f7:17:de:d6:cd:
                    69:60:ae:db:78:d1:ff:fb:f0:fa:eb:0c:5e:20:57:
                    de:51:d1:03:58:f4:12:a9:05:38:23:64:92:24:8a:
                    65:34:f7:ba:66:b8:46:e1:90:0b:c3:06:a4:23:e0:
                    99:04:10:81:31:04:23:ba:a6:21:dc:39:78:4c:ff:
                    2d:d9:9e:c9:1b:02:3a:d4:2e:57:5e:6c:20:0e:85:
                    d3:68:ec:aa:13:3f:56:86:fa:35:75:27:36:7c:d0:
                    41:58:eb:fa:e0:ac:e5:c8:8a:6b:51:0b:cb:d3:ab:
                    6a:9f:10:39:7f:72:04:55:00:99:6e:b5:00:c8:cd:
                    46:96:a1:ec:45:9c:09:ed:65:31:78:5f:e1:7a:bf:
                    a8:09:67:91:e1:af:e0:9a:7b:8c:eb:52:e0:1d:15:
                    5c:30:25:74:07:24:ef:27:50:86:31:ba:a6:0b:ab:
                    e1:ba:ed:05:a3:ba:92:88:c8:16:65:27:39:39:f9:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0E:31:F6:B9:C9:CD:FE:46:3F:B7:32:93:2E:B6:2B:46:AC:07:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/6a672ec0-d3ef-3e48-89af-0bc8ae118ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:d3:e9:09:56:f8:06:8b:4f:2c:f5:f5:7e:3f:91:b1:58:9e:
         b6:5d:bf:aa:ff:66:19:00:42:c2:0e:7c:d0:91:f1:76:7f:22:
         a1:81:4b:02:52:5e:8b:a3:cd:0d:6c:e3:36:9e:5d:30:1a:51:
         0b:aa:9b:f5:90:2e:c1:83:9b:de:20:4c:9a:8b:0a:ed:61:9b:
         2f:e3:6f:a1:d6:aa:14:bc:72:ad:49:28:c7:cc:71:49:95:75:
         00:b5:a7:37:45:83:e2:8b:31:42:53:69:a8:69:e7:2f:7c:31:
         10:b6:40:2e:9d:86:0c:00:2e:f5:9a:e6:d6:68:de:a7:f9:0a:
         9f:a8:b9:ce:7d:56:14:07:b6:12:fd:c5:10:ae:7b:2c:9b:d1:
         8b:2f:69:db:33:ba:17:c3:0d:8c:1f:d6:d9:dc:db:97:dc:8d:
         8f:5a:40:3d:0a:26:1a:99:e2:ca:13:a4:65:2a:8b:6c:64:97:
         0e:0b:a4:b0:46:55:e6:1c:5f:46:0e:75:b7:6b:19:c7:e0:64:
         44:72:87:ee:69:8d:e4:f7:78:f0:98:88:03:88:a5:10:8f:6c:
         5c:93:f0:aa:e6:31:f3:d4:4f:fe:58:52:60:5e:89:2d:80:8d:
         96:3a:e6:4c:14:e3:c3:15:96:bc:ac:2b:98:2e:e4:a3:20:c9:
         1f:d4:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----