Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/de18c74a-e330-3cd4-b7fc-b46c9d17cf15.roa
File:                     de18c74a-e330-3cd4-b7fc-b46c9d17cf15.roa (raw, json)
Hash identifier:          l4HlEX/ROgKAMjSambZgOG2E5LF7W1K5To7vg0065MI=
Subject key identifier:   1D:BE:6E:A3:7E:EA:A9:30:84:FE:E0:51:C5:B0:31:C6:49:3E:60:F3
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F4328576D51CC73C042CFC17231ADF6F8
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/de18c74a-e330-3cd4-b7fc-b46c9d17cf15.roa
Signing time:             Wed 20 May 2020 10:43:04 +0000
ROA not before:           Thu 23 Apr 2020 04:00:00 +0000
ROA not after:            Tue 23 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        208.71.210.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:31:ad:f6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Apr 23 04:00:00 2020 GMT
            Not After : Aug 23 04:00:00 2022 GMT
        Subject: CN=3cf42567-ebae-4362-8d8a-e091e16bafb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:2e:6d:a8:e1:66:ea:17:04:91:65:62:ce:
                    11:33:0f:fb:bc:0a:e9:d5:fe:a7:e2:d9:88:0b:bb:
                    e8:31:cd:79:b2:46:5f:11:5c:65:0e:e3:a8:09:01:
                    13:b4:1f:1d:00:d8:dd:3d:4d:91:ac:76:19:39:0e:
                    88:34:1c:29:e2:b9:39:5f:6e:cb:df:ad:5c:61:6c:
                    a8:00:07:26:08:f6:27:81:fd:52:a8:0c:92:b0:68:
                    bc:6d:5b:b3:87:47:29:39:07:43:e3:4e:c6:45:88:
                    79:29:ce:da:6b:8a:71:dc:54:47:1b:27:0d:da:07:
                    6a:9e:da:b8:27:43:7d:3f:1e:c9:5b:12:24:68:3f:
                    64:c1:41:94:6a:5c:05:f5:2f:35:b8:dd:36:4b:ee:
                    9b:bc:a9:f4:38:17:df:92:61:41:fb:1b:c9:11:fa:
                    de:f3:a0:ad:c3:6a:4a:8a:a3:ed:07:bf:64:8e:20:
                    52:de:db:99:b1:f5:ec:97:f7:50:72:8c:a8:b6:5e:
                    5e:4f:44:04:4f:a3:94:97:62:8c:03:da:5f:5e:49:
                    b7:1b:21:42:71:bf:db:ad:84:77:e9:e7:55:19:b5:
                    80:ea:36:80:b6:a3:6d:ca:15:d7:09:d8:11:9d:55:
                    4d:c6:c1:56:8c:21:86:7b:37:ea:ba:7b:68:0a:71:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BE:6E:A3:7E:EA:A9:30:84:FE:E0:51:C5:B0:31:C6:49:3E:60:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/de18c74a-e330-3cd4-b7fc-b46c9d17cf15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:6e:e1:83:f5:a3:6a:67:e1:e0:51:ce:d6:a3:5c:ea:11:40:
         78:e3:83:cf:50:ec:5b:23:22:13:d3:68:8e:f2:85:88:3c:11:
         5c:53:e4:02:25:85:3d:c7:7e:9d:6c:fa:69:13:17:0c:4a:8f:
         10:d8:1c:19:a1:3e:72:07:ba:a7:43:93:03:82:93:ac:60:5d:
         90:0b:48:b7:94:ff:17:fa:f1:db:b0:19:b4:ed:27:0c:08:fc:
         f4:85:f2:07:84:31:99:26:be:a9:32:25:e3:e0:24:4f:c3:bb:
         1a:c3:2c:26:47:c5:c3:2c:30:62:1e:83:de:1f:ec:d4:0c:0f:
         76:02:ec:11:92:16:c5:86:e7:4d:a0:ed:a1:54:91:59:39:69:
         bc:2a:22:7c:1d:d8:c9:a8:04:7e:e5:97:2e:43:22:b4:e8:39:
         33:32:2b:a8:68:54:d2:2b:65:e0:e5:d4:bc:a9:43:f2:ad:9f:
         0c:55:cd:9c:53:d4:5e:18:be:3c:bf:d0:3c:45:95:10:b6:74:
         7e:22:94:27:4b:89:ba:69:1b:cc:17:57:91:7c:b7:3c:64:c6:
         38:5a:05:08:03:cb:79:bf:a9:5d:9c:63:0d:a4:99:ea:3a:6e:
         29:92:e3:25:60:b1:c7:a0:aa:0d:77:d5:ce:74:06:da:f0:02:
         a7:9f:1b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----