Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b817708b-f1e0-329a-9c5d-e9c4018fe1f8.roa
File:                     b817708b-f1e0-329a-9c5d-e9c4018fe1f8.roa (raw, json)
Hash identifier:          VtQLByw5vv/bf148l5hwchGTxeA1GiJ1pT/qzScmLLg=
Subject key identifier:   06:C6:85:D8:BA:5D:0D:98:91:6E:B9:B0:08:8D:2A:64:91:D4:72:2D
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F4328576D51CC73C042CFC17231AD623E
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b817708b-f1e0-329a-9c5d-e9c4018fe1f8.roa
Signing time:             Wed 20 May 2020 10:42:25 +0000
ROA not before:           Thu 23 Apr 2020 04:00:00 +0000
ROA not after:            Tue 23 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        208.71.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:31:ad:62:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Apr 23 04:00:00 2020 GMT
            Not After : Aug 23 04:00:00 2022 GMT
        Subject: CN=fb63d0a3-5a38-4d5c-b8b4-b0aba22c2877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:5b:98:cd:bf:1d:e7:8e:d2:8d:a2:69:c1:
                    d1:e8:f9:67:0b:2d:65:5e:41:24:e5:ae:bb:4f:03:
                    47:54:95:59:87:39:6e:c7:99:8d:53:9b:e7:21:12:
                    c7:b0:b8:63:1f:cb:7d:65:39:e9:92:21:54:e8:07:
                    5d:ed:60:94:62:a2:6d:1b:57:1b:d5:62:2b:3c:b8:
                    a0:ee:af:d1:b7:33:42:8d:cb:9e:2d:12:ac:9d:ec:
                    38:aa:02:50:b9:80:c1:e3:6e:23:1f:de:a9:0d:ff:
                    3a:44:e1:8f:71:7a:9a:d6:e4:67:09:57:98:63:25:
                    98:a6:ce:09:81:e0:54:4a:41:2a:03:17:e4:9a:df:
                    79:0e:bf:4a:5a:b5:c2:06:2d:38:ab:48:bb:e5:84:
                    e7:75:53:24:10:43:4d:b8:b7:c9:e8:61:5e:64:a9:
                    0c:9b:36:14:b9:01:59:54:e3:2a:38:96:b3:63:9b:
                    a1:75:55:73:8f:29:ad:4b:c9:a2:a8:45:a1:41:4b:
                    7d:9e:fd:c3:31:6f:c9:f7:7c:3e:7f:c0:d6:34:16:
                    b6:1e:77:00:16:cd:03:b0:dd:d6:23:77:ff:11:36:
                    79:5d:39:74:fe:76:fa:ee:f7:d1:7b:08:3d:71:9f:
                    f3:36:45:f5:d3:ba:ae:4b:a5:30:0f:6d:f9:62:a9:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C6:85:D8:BA:5D:0D:98:91:6E:B9:B0:08:8D:2A:64:91:D4:72:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b817708b-f1e0-329a-9c5d-e9c4018fe1f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:af:c4:ab:8d:20:f1:91:36:0b:4d:82:d6:df:59:08:1a:c7:
         6a:a7:d4:0a:af:d1:2f:40:be:f0:df:9a:9b:1d:0d:3c:43:9e:
         36:52:fd:71:e9:18:85:09:a1:a3:f4:e3:22:7d:0d:48:45:66:
         1a:ce:ff:ac:70:de:e4:20:47:5a:32:bb:5b:90:56:a8:30:e3:
         8a:84:e9:4b:0b:2a:06:ca:a8:1c:5e:9d:8a:af:f5:95:e4:70:
         d6:d5:da:e0:b0:59:e2:18:8b:e3:47:4d:86:d0:bc:a9:9b:89:
         ee:03:9d:f7:c8:c8:e2:ba:93:8f:c4:f2:97:fc:b8:54:96:e2:
         ee:c7:24:f6:d6:c2:03:03:96:5e:af:d6:89:2a:e5:46:b7:cc:
         69:2a:b0:84:e6:90:de:36:05:29:eb:27:7e:62:a4:86:e1:40:
         7f:43:18:fc:cd:31:a5:a8:42:88:a0:2a:0c:39:93:67:0f:a1:
         d8:34:4b:84:13:a1:2e:03:f6:a1:e8:cb:5f:63:f4:2c:33:62:
         4e:05:b8:6d:4b:40:5b:2a:70:7d:05:c4:d4:a0:62:77:48:63:
         84:84:17:54:b3:a1:77:5a:4e:53:d0:89:28:f7:57:d1:e6:92:
         fb:21:34:7c:6f:8e:05:50:e3:c7:6c:17:28:59:b0:6c:94:d9:
         c7:ed:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----