Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/2ff0568a-3c32-3520-8c54-98271e36ec7a.roa
File:                     2ff0568a-3c32-3520-8c54-98271e36ec7a.roa (raw, json)
Hash identifier:          WmWiNcC4sPO0cD9D200OKdlWcY+3qFArQQ6Nx8QHWYs=
Subject key identifier:   21:73:76:79:3E:D3:05:9E:E8:10:DE:99:96:4C:7B:EF:CE:20:DB:51
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328576D51CC73C042CFC170F46F11FF
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/2ff0568a-3c32-3520-8c54-98271e36ec7a.roa
Signing time:             Thu 19 Mar 2020 20:14:44 +0000
ROA not before:           Mon 10 Feb 2020 05:00:00 +0000
ROA not after:            Wed 22 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        158.51.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:f4:6f:11:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Feb 10 05:00:00 2020 GMT
            Not After : Jun 22 04:00:00 2022 GMT
        Subject: CN=45fb7304-e034-40bc-b515-77a74b56feb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:d3:2b:94:4a:b4:ea:9f:f4:a5:cc:f8:50:
                    b9:dd:c3:f8:bb:53:fa:09:c8:64:63:fc:06:08:5b:
                    d1:30:87:66:cd:74:c2:52:b0:e7:e9:be:b6:f9:47:
                    83:e6:bd:17:87:58:bd:b0:3e:ba:ad:51:ec:06:66:
                    f1:fc:6e:7c:87:a7:3e:69:3a:25:6a:af:d4:dc:d2:
                    c8:9a:59:86:ed:c2:cc:57:06:64:53:a0:68:d8:13:
                    5b:a4:7f:95:38:3f:a1:e1:ca:6d:6b:d2:70:33:56:
                    4d:94:80:b7:aa:8a:4c:c6:09:31:5f:33:55:fc:53:
                    44:c7:0a:84:af:12:15:2c:f2:5d:a3:bd:86:b3:60:
                    4c:23:d9:f1:d3:e2:54:24:23:2b:41:81:3f:08:9d:
                    15:fe:9d:33:6e:4b:63:3a:f9:63:d5:ba:9e:f2:53:
                    77:d2:cf:7d:b6:51:ec:4c:e4:fb:cf:5e:12:c9:ac:
                    28:0a:45:0d:b5:1d:83:b7:1b:db:ad:4a:22:95:92:
                    23:a8:56:17:d3:46:06:1d:20:68:41:ee:aa:b8:bc:
                    d2:bd:18:7e:9f:4e:1c:d0:19:45:18:4c:7f:7e:a0:
                    b1:23:6a:59:a2:6b:db:ac:cd:b5:50:20:49:69:a3:
                    08:29:9d:58:a3:ce:4c:1a:c2:3e:d4:2e:cc:cf:3f:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:73:76:79:3E:D3:05:9E:E8:10:DE:99:96:4C:7B:EF:CE:20:DB:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/2ff0568a-3c32-3520-8c54-98271e36ec7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:63:28:69:aa:48:65:b0:89:c0:77:48:00:39:6b:ea:0b:77:
         08:d5:33:0c:f1:40:c9:0c:4b:ab:d9:b0:43:45:7b:f0:30:1c:
         b2:7e:fe:c6:f1:af:6f:bf:32:e2:5e:7c:8b:3c:a0:d6:c0:3f:
         e7:a6:a6:6f:8e:ca:5e:a9:c3:0f:4c:2c:84:a5:b8:02:2f:02:
         e5:50:18:24:7f:27:dc:93:c7:b6:82:3e:42:68:bf:9c:5b:12:
         8b:4b:d8:f0:40:c2:7d:76:8b:0d:0e:37:23:4f:d9:80:13:44:
         81:29:74:53:ac:b3:74:ec:01:ea:fd:ce:1c:b6:c4:82:ce:05:
         5e:dc:fe:8f:a8:14:d3:78:1f:d2:c4:78:7d:8a:11:03:89:72:
         3f:8b:46:14:8a:55:80:ad:b5:b6:f3:b8:69:d5:6a:ef:39:32:
         17:c7:54:f6:44:56:85:51:e0:a5:88:2d:79:25:a6:85:9e:1c:
         c9:1a:62:bb:4e:61:55:4b:25:3b:ec:7c:09:d3:07:9c:4f:d7:
         6e:cd:7d:67:a9:25:ff:9c:e4:12:1c:00:bc:e4:8f:5a:38:e0:
         d3:2a:59:6c:89:5d:a3:1b:0a:55:2e:d9:19:68:9f:ee:86:ce:
         aa:86:9b:44:e7:ec:e4:6d:32:95:0e:c7:90:b3:b4:65:54:32:
         9a:f3:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----