Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/1b9b649d-2152-3ad2-976a-92f719aae6e8.roa
File:                     1b9b649d-2152-3ad2-976a-92f719aae6e8.roa (raw, json)
Hash identifier:          B/DCZR8vjA7PzgdJbD7YQZxj6zvM2YUfZyWCo2PBOtM=
Subject key identifier:   51:C7:DE:FC:66:64:19:4E:1B:F9:37:26:97:02:90:C8:52:29:60:9E
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F4328576D51CC73C042CFC17256587D76
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/1b9b649d-2152-3ad2-976a-92f719aae6e8.roa
Signing time:             Wed 27 May 2020 13:35:39 +0000
ROA not before:           Thu 23 Apr 2020 04:00:00 +0000
ROA not after:            Tue 30 Aug 2022 04:00:00 +0000
asID:                     36230
IP address blocks:        208.71.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:56:58:7d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Apr 23 04:00:00 2020 GMT
            Not After : Aug 30 04:00:00 2022 GMT
        Subject: CN=7d3f299b-5c0c-46c2-9fbf-1da889473e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:b8:12:3b:55:cf:a4:19:40:37:66:f5:d3:
                    0f:70:38:2c:8a:e2:18:1f:59:05:fa:1d:31:0d:dc:
                    ff:61:20:5e:11:78:fe:80:62:d6:ab:97:88:03:fa:
                    78:b7:ef:b0:dd:29:9c:a4:99:a2:16:d6:22:10:cb:
                    91:2c:2a:3f:15:17:fc:79:13:60:7f:54:8d:e9:05:
                    aa:39:dd:a5:f2:34:8c:dc:44:12:fe:4a:c0:19:0b:
                    5e:46:0a:e0:bb:48:26:41:c2:8a:b1:4b:88:3d:4d:
                    86:26:89:16:29:9a:da:f5:34:36:0d:ee:38:86:f4:
                    da:60:c6:61:58:96:c7:a0:69:4f:8c:ed:42:a1:53:
                    d6:2a:3d:03:55:11:1a:48:4f:e0:fd:3c:cc:1c:13:
                    30:ad:15:45:5f:e5:bb:d9:e7:7d:e5:26:85:87:23:
                    c0:99:89:f4:67:12:3d:70:38:b1:f0:52:3d:55:50:
                    55:f0:e6:e8:a7:de:95:00:37:36:db:1e:1f:94:46:
                    5d:9a:38:04:aa:44:63:c6:14:5a:d8:2e:b0:e9:b7:
                    cb:25:f4:36:1d:7c:df:0d:c7:84:2b:06:68:50:44:
                    f0:33:3c:ad:07:b1:80:4c:c0:5a:51:05:99:07:bd:
                    0d:28:b7:cf:95:d0:52:24:21:3c:c9:e4:c9:a7:d0:
                    55:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C7:DE:FC:66:64:19:4E:1B:F9:37:26:97:02:90:C8:52:29:60:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/1b9b649d-2152-3ad2-976a-92f719aae6e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:28:75:81:36:09:9c:8e:68:05:b1:11:79:b3:ce:b5:f6:e9:
         6a:99:54:5a:8b:fb:72:8f:53:9b:a6:95:74:3f:ad:6c:e7:5a:
         84:65:f6:79:d9:e6:ff:b4:3b:c1:79:ba:46:b2:55:78:82:98:
         51:3c:93:11:99:f3:9a:a5:19:d6:4b:8f:13:24:01:1c:b8:c4:
         d4:00:4c:4d:77:69:97:4f:36:b3:96:18:6a:dc:de:c4:4b:b9:
         19:83:3a:6c:61:67:3d:c4:e6:d0:f5:95:fa:c6:04:26:79:19:
         d8:02:81:64:37:fd:66:d1:3a:9d:e1:36:5e:bb:f3:13:30:14:
         a9:b9:93:63:95:43:47:6c:c6:fb:65:a0:96:42:b2:7f:f6:59:
         b5:0b:cf:52:9d:c6:10:1d:90:56:1f:86:b0:54:4c:38:38:26:
         5c:26:64:0d:07:3b:38:e9:5f:40:17:62:4e:0b:a4:82:8d:17:
         06:b0:76:0a:8f:a0:9c:d8:bc:7b:7e:0f:d8:1e:29:f6:54:ab:
         7b:87:1e:ef:ab:7f:cd:84:bf:e9:cd:b4:ff:fb:b6:c6:a9:f5:
         b6:8f:f6:a6:e9:fb:23:0c:ca:62:41:a5:bf:f0:98:92:9d:eb:
         6d:38:60:30:fa:66:35:8e:9d:20:f9:69:9d:09:2d:9a:2d:7f:
         84:ad:89:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----