Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/2d7c50da-8830-3fac-9cc9-973e12f52094.roa
File:                     2d7c50da-8830-3fac-9cc9-973e12f52094.roa (raw, json)
Hash identifier:          LdQ0SxShlgjEtIYYiA1GRII+XDGZHBQYFmsScN6dZdk=
Subject key identifier:   11:3F:29:69:B0:35:65:A6:B5:C4:7A:3D:56:F5:E0:9E:7B:66:18:4F
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328576D51CC73C042CFC172A89A6D3F
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/2d7c50da-8830-3fac-9cc9-973e12f52094.roa
Signing time:             Fri 12 Jun 2020 12:56:32 +0000
ROA not before:           Mon 10 Feb 2020 05:00:00 +0000
ROA not after:            Thu 15 Sep 2022 04:00:00 +0000
asID:                     17045
IP address blocks:        23.153.240.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:a8:9a:6d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Feb 10 05:00:00 2020 GMT
            Not After : Sep 15 04:00:00 2022 GMT
        Subject: CN=c42065c0-5023-44a5-b091-46f1a043b571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:7b:0a:b5:7c:44:14:b2:e5:29:e5:ad:ed:
                    f3:d3:fe:cf:d7:6f:b6:cb:2c:33:23:4b:a6:08:e0:
                    dc:e2:bf:08:cc:ed:80:f9:3c:53:41:63:b0:ca:a8:
                    db:d6:64:cb:ef:18:31:b8:44:78:fb:96:cb:58:b8:
                    5f:de:7f:49:a7:00:eb:f6:b9:c3:72:58:60:3a:23:
                    93:ba:84:36:58:60:2d:20:68:22:ec:c9:18:9c:43:
                    76:84:ae:0e:df:a2:cb:b3:b7:4e:bb:88:4a:df:82:
                    6c:c2:18:53:4d:a4:d5:c9:22:ab:58:42:bc:b1:ef:
                    6d:79:08:89:91:13:43:cd:8d:1d:e9:ad:78:b3:8c:
                    91:d4:5e:29:a3:1e:12:9f:0d:67:87:70:c6:da:b5:
                    fd:d3:3c:d2:a7:53:a8:dd:a5:c2:7e:e0:8d:c3:fb:
                    dc:06:03:fd:aa:63:5b:4e:44:78:1a:f7:28:05:31:
                    8d:69:23:b3:03:f5:ae:b5:45:7b:0e:d3:09:4f:05:
                    d6:f0:b4:f4:bc:5b:be:cb:6b:9e:c0:5f:94:9b:76:
                    5d:fb:4d:e6:9e:cc:f4:7e:83:26:58:c1:11:9a:e1:
                    bb:a9:4f:72:76:31:c8:74:32:4f:be:40:4a:3c:8c:
                    ca:dd:08:fc:82:e8:bc:b5:50:94:ab:af:3d:2d:58:
                    77:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3F:29:69:B0:35:65:A6:B5:C4:7A:3D:56:F5:E0:9E:7B:66:18:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/2d7c50da-8830-3fac-9cc9-973e12f52094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:7b:20:53:d1:dd:7c:92:40:1c:bd:9b:18:ea:03:7d:3d:5d:
         99:52:ea:37:6a:f9:21:2d:f7:72:4c:56:be:50:1d:5d:c0:51:
         d4:57:17:d9:1f:e1:69:67:d6:02:80:92:5f:fb:f1:af:b8:e3:
         4b:3b:88:c3:a9:56:d2:20:e5:ea:af:85:8d:c2:0a:70:bc:5b:
         02:71:00:c9:55:0c:d2:37:dc:f6:4d:fb:89:3f:be:15:6c:81:
         78:4e:61:bb:65:76:de:d1:11:81:5b:dc:9f:af:17:5e:16:8d:
         58:b2:8b:90:53:9d:8d:11:58:23:06:2e:e3:2a:a9:87:d1:f3:
         6f:e7:a8:b3:a6:b5:75:6a:b3:9e:24:97:f8:71:a5:c9:35:b4:
         91:ee:4b:82:0b:ca:69:ff:a9:a9:be:b1:b8:1a:f3:ab:64:bb:
         27:dd:78:e7:c1:bf:30:62:42:04:e2:7e:85:ee:a0:36:fd:d0:
         36:75:f8:17:9f:55:c2:0e:08:54:0d:95:55:ef:1e:c5:ce:00:
         a7:0e:6b:c3:4f:aa:15:95:a5:15:8d:98:fc:79:ea:e7:06:8d:
         6a:7f:9e:ae:7d:09:17:51:85:92:fa:99:10:a1:a8:fa:c2:b3:
         47:10:51:c7:ec:5a:7b:73:9b:8c:12:13:7b:ca:28:c8:39:31:
         69:50:67:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----