Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/fa3e1ee5-6391-3bc1-a5fe-45631087ce7a.roa
File:                     fa3e1ee5-6391-3bc1-a5fe-45631087ce7a.roa (raw, json)
Hash identifier:          GCF6AJSUzsiKe//JPzfz/ZkzwTyoF/vPVgHDhL20gLc=
Subject key identifier:   38:7E:99:AF:96:C5:54:8D:FF:D1:35:70:3A:2F:79:DC:E4:88:E1:C9
Certificate issuer:       /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
Certificate serial:       010D0C9F4328576D51CC73C042CFC17344CA819F
Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/fa3e1ee5-6391-3bc1-a5fe-45631087ce7a.roa
Signing time:             Sun 12 Jul 2020 20:49:48 +0000
ROA not before:           Thu 28 May 2020 04:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     397031
IP address blocks:        144.172.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:44:ca:81:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7
        Validity
            Not Before: May 28 04:00:00 2020 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=44fe9115-e700-46dd-8da4-5128bfdc0f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:87:2c:f5:84:c8:bf:93:a3:b6:85:15:c3:
                    00:bb:9f:8a:63:a2:a1:bf:bb:e6:df:78:99:bc:98:
                    6a:e3:5d:b8:90:c2:64:96:15:6d:a6:6f:72:d2:72:
                    53:50:9b:16:84:ab:6c:98:90:1a:94:01:98:79:37:
                    b5:fa:24:b3:1e:9d:a1:ce:bf:a8:ed:3d:3d:d7:1b:
                    26:e9:24:c3:89:3b:13:9f:ab:b2:ca:8f:92:ca:f1:
                    ab:ab:d6:1a:06:b4:5d:56:eb:7f:bf:67:90:87:74:
                    b6:02:e3:1c:a3:d5:be:b4:e9:a2:e3:39:59:dd:d3:
                    69:7a:f7:b6:9f:5f:76:65:90:e2:be:38:36:37:73:
                    a9:e6:2e:1e:f3:4c:4a:09:3b:5c:bd:8d:6d:cd:a9:
                    17:4d:b0:bb:87:48:90:46:5d:67:26:cd:45:74:a5:
                    c4:53:e8:59:4f:60:43:e4:2e:b3:4b:ef:5f:89:4f:
                    d3:e6:89:71:0e:f2:8e:75:55:58:62:cb:e0:be:36:
                    ce:99:eb:e9:ac:8e:be:5a:0d:95:09:bc:8a:f0:a5:
                    7b:8d:c7:08:35:ce:38:21:d0:57:6b:cb:48:59:72:
                    ae:a7:d6:7f:76:e3:74:c6:09:52:52:41:ad:82:05:
                    10:1c:b6:30:f6:88:cb:dc:f2:94:4e:0a:c2:7b:7f:
                    0e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7E:99:AF:96:C5:54:8D:FF:D1:35:70:3A:2F:79:DC:E4:88:E1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/fa3e1ee5-6391-3bc1-a5fe-45631087ce7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl

            X509v3 Authority Key Identifier:
                keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.172.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:5e:c4:11:88:2d:60:b5:b4:91:75:6a:63:b2:29:26:20:0a:
         19:e6:03:13:71:67:8c:e1:07:ad:5c:e6:cb:d8:43:b4:a3:86:
         33:83:64:8c:ea:fd:f9:26:42:b5:43:0d:96:0f:55:f3:7c:22:
         98:56:db:06:10:01:68:72:9e:fe:a7:55:7f:5c:8a:f5:9b:16:
         67:d7:ee:ad:80:54:7b:38:ac:b3:c0:f6:75:45:bb:10:7c:c0:
         af:33:68:b4:d4:04:c8:90:1e:29:88:2b:95:40:ac:37:77:72:
         fa:7c:d7:e1:dc:1c:63:3d:c0:4d:7b:7f:c2:40:38:7f:2e:e5:
         27:d6:00:e8:8e:04:0f:ca:0d:ab:d5:12:3f:25:08:39:cf:98:
         21:62:69:fb:ef:39:6d:4f:25:ac:8a:60:c1:af:7f:17:96:25:
         5f:df:b7:0a:b4:4b:da:7d:0f:9c:8f:67:df:40:13:eb:e3:ea:
         f5:f2:20:a2:c5:ec:65:a3:a9:12:43:69:18:f8:6a:89:ee:db:
         a7:16:38:4a:09:bb:9b:c0:1d:cd:9e:ef:d1:7b:67:50:73:15:
         16:5e:0d:9d:56:e4:79:ab:0f:85:3e:59:1c:62:b6:28:10:b8:
         3f:2f:b7:cc:6a:fb:f9:d8:bb:e8:14:b4:a2:57:b4:32:20:4e:
         f0:a2:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----