Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8d5fb729-a09b-3ab1-ad3f-58236d6cef11.roa
File:                     8d5fb729-a09b-3ab1-ad3f-58236d6cef11.roa (raw, json)
Hash identifier:          YKMAvNrJacMJls1afh1BNr8SmB6oMD7ATtivuGZV8Z4=
Subject key identifier:   85:92:3F:DD:EC:CE:21:07:05:36:2C:1F:D1:1C:6F:A2:D5:87:1A:D8
Certificate issuer:       /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
Certificate serial:       010D0C9F4328583859D8EFB508229C756393C440
Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8d5fb729-a09b-3ab1-ad3f-58236d6cef11.roa
Signing time:             Mon 08 Jul 2019 04:00:00 +0000
ROA not before:           Mon 08 Jul 2019 04:00:00 +0000
ROA not after:            Sun 26 Mar 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        130.137.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:59:d8:ef:b5:08:22:9c:75:63:93:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769
        Validity
            Not Before: Jul  8 04:00:00 2019 GMT
            Not After : Mar 26 04:00:00 2023 GMT
        Subject: CN=91bd0dde-0e10-488b-9eb8-be4223cf91d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:0b:12:3f:d4:43:3f:a7:01:2b:fa:a8:e0:
                    58:c6:27:02:f6:5f:6b:0f:d0:80:5d:10:f4:83:b8:
                    ec:aa:33:36:df:85:b6:84:49:31:fc:ef:e9:26:1e:
                    5f:a4:0a:5b:15:16:30:88:95:dc:55:81:b7:1f:07:
                    b2:9e:9e:39:56:f9:b7:a0:c5:01:b5:1b:99:97:f7:
                    a4:39:64:a9:17:86:f4:78:3f:53:91:17:0b:43:06:
                    4e:17:33:cd:60:ab:ef:f2:3b:b0:64:43:66:8b:ba:
                    5f:04:59:48:f5:e5:ba:50:9c:e4:b8:95:f2:1d:92:
                    74:63:98:2b:41:85:94:31:cf:e1:f7:6b:79:ef:e0:
                    a9:fb:46:8c:0f:be:27:23:93:20:40:95:14:07:1a:
                    6f:a9:46:cd:de:3e:54:f7:33:05:8a:1e:5b:c5:41:
                    16:4e:76:2f:75:47:2e:71:f7:36:c7:ff:83:a0:4e:
                    e2:86:9a:e8:51:5e:f7:f7:c8:7f:f3:26:6f:03:f2:
                    be:fd:bb:8a:81:29:63:28:c2:ed:ae:9c:24:49:b6:
                    28:f3:63:89:67:ba:44:ea:1d:dd:b7:ff:7f:00:33:
                    23:9d:e2:71:2b:db:a9:56:58:7b:e4:2d:97:9a:9a:
                    06:9e:a3:71:d4:ed:43:8e:76:5e:e8:f9:7f:7c:d9:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:92:3F:DD:EC:CE:21:07:05:36:2C:1F:D1:1C:6F:A2:D5:87:1A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8d5fb729-a09b-3ab1-ad3f-58236d6cef11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl

            X509v3 Authority Key Identifier:
                keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.137.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ea:60:5c:d6:d4:44:39:ae:cf:b9:48:08:81:44:18:58:ca:
         3c:3b:0c:a7:04:cf:2b:6a:11:34:d2:55:3f:bd:d6:4f:69:b2:
         d6:cf:66:b7:2e:ad:2b:e8:b4:9a:38:50:da:7a:a3:95:5a:51:
         f0:55:f0:3d:49:67:21:c6:97:f8:a8:9b:82:52:f1:08:40:3b:
         3f:4d:b5:8f:ee:0a:36:2c:77:4a:b6:e8:9e:a5:78:55:99:90:
         f2:e4:f9:e0:44:b8:54:bc:ea:f4:04:c8:0f:d5:21:d6:73:6f:
         fc:f0:f9:af:f8:4c:8f:99:1d:af:c8:69:4a:c5:00:ca:c8:57:
         88:39:6e:8d:d4:d5:df:ac:cf:33:9b:1f:3b:84:94:d0:e3:c1:
         5b:55:73:f9:6d:4f:dc:8e:f2:7e:96:dd:1d:51:0d:b7:51:91:
         bb:bc:8c:90:09:af:06:28:63:11:57:df:c4:9c:13:80:32:5a:
         06:47:0e:09:f5:cf:23:7c:02:a5:fd:ba:22:16:9f:2e:f6:e4:
         cc:3d:88:37:a2:64:1d:a4:f5:1c:b5:5e:ba:0c:04:ed:84:15:
         8a:c4:20:9d:f9:97:91:3b:23:4b:8a:60:c1:82:7f:a9:f9:59:
         3d:01:b0:38:63:c3:17:40:83:47:6e:30:bb:b1:9d:02:e5:27:
         d4:97:26:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----