Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/7995a5d6-7630-30bb-a8ac-19ca2c180103.roa
File:                     7995a5d6-7630-30bb-a8ac-19ca2c180103.roa (raw, json)
Hash identifier:          RmWh9fDAAVQwudDvjxZtxKlAYEB6tW6rwP9EjbEtQMc=
Subject key identifier:   47:2C:3F:94:12:6E:4E:2E:39:F3:E6:A3:99:94:08:48:24:2B:94:8E
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328576D51CC73C042CFC17344A8509D
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/7995a5d6-7630-30bb-a8ac-19ca2c180103.roa
Signing time:             Sun 12 Jul 2020 20:12:28 +0000
ROA not before:           Thu 28 May 2020 04:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     53667
IP address blocks:        107.189.0.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:44:a8:50:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 28 04:00:00 2020 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=7a38473d-3353-4f73-86a7-e24e50d4f69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:14:30:62:02:27:e3:5c:61:bb:df:4a:7c:
                    82:26:c5:13:3e:c7:82:4d:47:74:46:3d:76:96:32:
                    7b:bc:10:30:bf:18:ec:09:2b:25:84:a4:23:7e:76:
                    23:53:39:56:f0:2f:84:68:f0:84:ca:3d:59:fd:8d:
                    04:94:40:8e:b6:af:c8:94:07:20:e8:12:bb:d6:7f:
                    7e:85:c0:95:81:4b:eb:42:67:e9:af:04:b5:7e:ed:
                    5e:4c:21:d2:af:99:6c:0a:a3:9a:cd:0b:f5:51:a4:
                    a0:d2:85:d3:f6:ca:8f:6f:1c:49:77:16:42:14:f6:
                    85:a6:7e:36:ef:2e:87:58:b2:6d:3d:0c:26:a0:d8:
                    94:5f:3d:20:10:ff:ee:df:86:fb:07:cb:db:b7:73:
                    5c:44:bf:10:83:69:03:cd:10:c0:7c:96:f7:ab:95:
                    75:d7:48:00:47:89:4a:e1:5f:0e:17:cb:f5:b5:f1:
                    b3:e2:fe:43:6e:cb:79:9b:0c:f3:b9:19:e3:64:d1:
                    0b:18:ef:e0:09:29:fd:48:ce:67:9a:9f:50:be:d9:
                    9c:f4:91:a0:47:1d:23:8b:5a:a0:2a:ef:ce:4e:af:
                    7a:fe:08:cd:fe:9f:40:b1:a4:ff:8e:56:dc:2e:57:
                    ad:3b:b8:8c:74:c0:b0:80:d7:3c:91:b9:75:5b:ee:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2C:3F:94:12:6E:4E:2E:39:F3:E6:A3:99:94:08:48:24:2B:94:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/7995a5d6-7630-30bb-a8ac-19ca2c180103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.189.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:0f:9c:ab:80:56:50:2c:81:98:43:40:78:c8:0b:ca:41:79:
         59:75:06:5a:c7:75:21:cb:0e:f4:cc:df:f7:4d:47:a4:34:90:
         17:08:13:3f:91:b5:dc:90:65:f6:25:9f:2e:c3:e3:5f:4f:9c:
         3d:b2:44:be:b7:37:bb:5d:a8:17:8b:e5:fd:fe:10:80:64:54:
         93:ab:52:63:bc:91:83:dd:c5:b4:2b:a7:a2:18:f0:bd:35:46:
         2e:0e:f4:93:f5:8f:fa:3b:9c:e8:d9:a0:9d:73:ab:73:7b:9d:
         ef:fc:52:22:54:50:dd:79:2f:21:2e:1d:f8:1a:26:e8:d2:de:
         33:2c:71:26:e6:d0:e8:e3:44:3d:eb:4f:08:33:18:94:71:6d:
         74:0a:4d:64:c7:b9:94:07:d7:4c:0d:9a:f6:49:44:d4:62:2b:
         4d:a6:7f:8c:45:a1:b8:24:f4:b0:d3:3c:87:a7:1e:aa:51:39:
         0f:e3:dd:d6:e3:21:7b:6d:94:55:87:04:42:56:51:f5:51:5f:
         82:40:a2:32:35:3d:6b:ba:ef:5a:23:ac:06:4d:b4:73:2f:85:
         94:a5:3a:ce:bb:fd:a5:2e:7c:58:e9:f1:00:c8:41:ea:a7:63:
         1f:c2:8d:32:66:29:5d:03:7c:fd:cf:0f:dd:43:20:51:33:38:
         8e:4a:99:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----