Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/595d9e36-0702-3f4d-92ff-912f07f75a7d.roa
File:                     595d9e36-0702-3f4d-92ff-912f07f75a7d.roa (raw, json)
Hash identifier:          X2wWo2QqNxktczbsvYL0TmtKmkl8gjw6MV75EqtZDX8=
Subject key identifier:   27:49:B8:40:58:A9:AF:BD:72:4F:CD:3E:63:6C:3C:B0:7C:AE:FE:1B
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328576D51CC73C042CFC1707FDD90B5
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/595d9e36-0702-3f4d-92ff-912f07f75a7d.roa
Signing time:             Wed 26 Feb 2020 04:59:51 +0000
ROA not before:           Mon 10 Feb 2020 05:00:00 +0000
ROA not after:            Mon 30 May 2022 04:00:00 +0000
asID:                     17045
IP address blocks:        158.51.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:7f:dd:90:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Feb 10 05:00:00 2020 GMT
            Not After : May 30 04:00:00 2022 GMT
        Subject: CN=1f2e9dfe-f3c8-45c2-aae3-6bace0f00cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:41:d8:a5:9e:5f:cc:59:88:2b:39:47:8e:
                    dc:7f:11:e4:05:aa:04:a7:71:c7:61:b3:77:69:81:
                    25:98:7e:ed:f6:01:d2:03:07:49:2e:7d:00:8c:eb:
                    c8:7d:21:f3:9b:73:b2:9b:e8:3e:01:d0:04:a9:95:
                    8d:37:c2:44:1b:9a:2a:a9:c1:b5:fc:e4:95:ab:bf:
                    26:5b:fe:e6:95:91:3c:85:5d:68:7e:46:ad:b7:07:
                    e5:f3:7b:22:e2:ca:d2:a6:7a:bf:4a:47:fd:48:9b:
                    fa:7b:ea:fd:6f:cc:ae:6f:ce:c4:c5:d5:81:02:b7:
                    1e:80:8d:82:70:0e:83:24:93:9e:11:f5:4c:cd:af:
                    92:73:8d:5b:92:76:6e:18:ad:c5:36:d5:5d:17:73:
                    e2:ac:e3:df:b0:07:5c:44:50:06:01:3c:04:da:4f:
                    ee:91:53:41:b9:6b:08:35:7d:8e:1a:7f:70:5d:5d:
                    95:6e:dc:c0:c0:d5:46:5e:d7:8c:3d:89:e6:56:d1:
                    48:ce:42:cc:e3:55:55:51:5c:63:67:e9:ff:c9:71:
                    9a:8d:74:85:c7:a1:92:e8:b6:8e:ac:ee:f5:a2:a4:
                    1f:45:4b:57:7b:2e:ea:8b:30:91:ac:9e:c2:4b:e9:
                    45:99:39:0b:2a:ea:bf:5b:0e:e4:8e:44:c4:12:db:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:49:B8:40:58:A9:AF:BD:72:4F:CD:3E:63:6C:3C:B0:7C:AE:FE:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/595d9e36-0702-3f4d-92ff-912f07f75a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:da:b0:78:75:8e:9f:05:dd:01:60:92:20:05:7c:56:ce:
         3f:d9:19:6c:09:ce:f2:75:78:29:30:7d:05:45:38:2f:48:79:
         9b:b9:a6:74:04:b3:4f:1a:6e:ec:7a:89:e2:d3:88:71:6c:80:
         8d:09:08:85:a7:ee:82:9a:da:75:25:2d:f2:07:06:d5:82:0a:
         84:0c:bd:71:88:8b:35:9a:02:bf:3a:e3:79:1f:07:6b:54:fb:
         8e:de:81:18:f4:e0:c7:ab:11:bd:31:55:10:3a:22:9a:5a:05:
         3e:36:8d:90:d4:ee:88:92:59:e0:d9:65:58:e5:04:2e:fc:3b:
         f5:00:c6:0d:c4:cc:1c:44:a3:98:4b:5c:83:a6:fc:0c:de:a0:
         c7:c4:d8:9a:67:46:ca:14:c3:8d:46:8d:10:29:95:2e:ba:a6:
         48:ef:13:ab:10:a0:17:a0:13:57:ab:b8:3f:f7:87:de:dd:38:
         67:b9:fc:16:49:a5:e3:d5:e7:c3:dd:7f:26:c1:3e:46:e6:27:
         17:d4:72:e8:af:1a:54:6b:13:ac:af:b0:50:c2:a1:ff:5e:e7:
         d9:37:82:98:63:0b:e5:62:fe:34:ad:df:77:b8:34:68:b5:98:
         e4:0c:e4:c9:09:ba:08:c6:12:e7:20:2d:d3:b1:18:e4:16:9b:
         0c:c7:e4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----