Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/830ff3fd-1443-3de3-8ebf-ca7dd68a0474.roa
File:                     830ff3fd-1443-3de3-8ebf-ca7dd68a0474.roa (raw, json)
Hash identifier:          4Izp7/U3il4GI+aq74h7blUIXE4uqlSi9fdET07KvsU=
Subject key identifier:   76:89:AF:29:83:18:74:89:55:38:15:EF:FB:77:DE:EC:67:A7:95:3F
Certificate issuer:       /CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
Certificate serial:       010D0C9F4328576D51CC73C042CFC171C8775868
Authority key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/830ff3fd-1443-3de3-8ebf-ca7dd68a0474.roa
Signing time:             Thu 30 Apr 2020 00:23:16 +0000
ROA not before:           Wed 29 Apr 2020 04:00:00 +0000
ROA not after:            Tue 02 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        216.152.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:c8:77:58:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
        Validity
            Not Before: Apr 29 04:00:00 2020 GMT
            Not After : Aug  2 04:00:00 2022 GMT
        Subject: CN=ffda4cd1-6f93-4ab9-9f61-01899c1d35fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:64:60:e0:b9:e2:43:dd:11:04:61:94:f7:
                    60:0d:c1:32:91:b8:35:44:42:5d:39:bd:91:8d:92:
                    2b:94:fb:f2:02:34:7d:05:83:ac:f3:54:c1:b8:e5:
                    f7:96:44:f3:51:7c:ac:32:fb:0a:88:4a:63:76:b4:
                    e3:20:35:2b:a2:1b:45:52:56:5f:a5:54:e1:f4:aa:
                    5c:35:53:d1:28:bf:37:47:b9:30:89:23:21:10:1c:
                    a2:db:ec:1c:c2:a8:8b:d4:04:37:d9:90:22:c6:a5:
                    61:1b:76:9a:5b:19:b6:55:5a:38:37:0d:9b:65:8e:
                    29:93:9d:84:c9:00:8f:24:08:bf:b6:fb:b7:e5:44:
                    f0:6c:5e:cc:54:3d:d5:56:18:a6:a6:c6:54:38:fb:
                    98:52:34:18:a6:8e:fc:78:9c:dd:4e:20:9f:e1:3f:
                    ec:47:dd:3a:39:e6:da:5e:bb:57:73:66:fd:26:85:
                    47:f8:05:11:90:7a:40:17:a1:9e:26:d0:e1:92:d8:
                    e6:e8:fa:f4:28:d3:67:de:93:02:7d:8e:ab:e1:45:
                    b0:b2:ce:35:44:a3:46:1b:95:88:63:8f:69:dc:d2:
                    a4:d3:d4:34:d3:80:95:1d:30:e2:c6:b8:4b:68:65:
                    28:a9:ad:6f:58:c2:81:5a:6b:bd:b7:c2:f1:fa:42:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:89:AF:29:83:18:74:89:55:38:15:EF:FB:77:DE:EC:67:A7:95:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/830ff3fd-1443-3de3-8ebf-ca7dd68a0474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl

            X509v3 Authority Key Identifier:
                keyid:BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:f8:32:da:ef:13:1b:48:0b:61:e1:19:9a:2b:12:e4:41:
         ba:d2:48:e8:52:48:58:90:ca:f3:6c:de:14:c0:fe:67:10:b2:
         3a:95:fc:76:87:99:ad:53:ea:80:c6:0c:c2:00:0f:81:20:a1:
         7c:69:61:83:ac:79:94:a3:f2:7f:2e:dc:24:5e:b0:48:f4:56:
         0c:c0:9d:83:e7:51:24:78:2f:d3:3f:ce:a4:8a:ce:7b:ea:8d:
         60:f1:d1:8d:65:94:67:79:b2:01:40:86:a1:eb:7f:78:ab:dd:
         da:df:eb:d5:99:bc:70:1c:f9:a4:c9:0a:d9:6a:45:ed:d3:a9:
         ea:69:2a:0e:be:ff:c0:87:ef:90:1b:00:4d:86:84:3e:2a:5f:
         27:0a:ed:bd:f1:d2:11:3b:d7:86:20:fd:26:ce:37:7d:65:e1:
         04:59:6b:1c:11:6b:6b:a0:b3:b8:7a:3b:26:f3:7e:68:e7:a6:
         0c:bb:52:15:b7:9c:cf:04:ee:82:75:09:bf:2d:23:fa:3e:e3:
         aa:70:88:93:06:ff:c2:d1:22:7e:dc:c8:76:9c:26:6e:6a:25:
         10:0e:5b:fb:d8:87:89:5b:10:69:e1:e6:29:bb:da:a2:95:2c:
         a0:b7:82:0c:08:b0:11:cc:10:19:d1:8c:d6:d7:a4:92:67:50:
         ff:9b:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----