Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/478b6450-dbd1-3d64-9bbc-74107a645937.roa
File:                     478b6450-dbd1-3d64-9bbc-74107a645937.roa (raw, json)
Hash identifier:          EL3bjURvJnouv/eqYr6tri7FMAD85vsvrZkanEaPEJw=
Subject key identifier:   D0:BE:CD:F2:DD:2D:0E:21:5E:49:C8:02:0D:A9:58:28:65:0F:B9:E9
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F432858383B1CF2949B3CB64C5CBD3900
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/478b6450-dbd1-3d64-9bbc-74107a645937.roa
Signing time:             Wed 22 Apr 2020 04:00:00 +0000
ROA not before:           Wed 22 Apr 2020 04:00:00 +0000
ROA not after:            Wed 15 Mar 2023 04:00:00 +0000
asID:                     398263
IP address blocks:        208.64.24.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:3b:1c:f2:94:9b:3c:b6:4c:5c:bd:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Apr 22 04:00:00 2020 GMT
            Not After : Mar 15 04:00:00 2023 GMT
        Subject: CN=84806bff-718c-4257-a4fd-ce84f977a7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e6:0a:75:4c:0e:03:d8:87:e1:5e:44:2e:c4:
                    23:e0:bd:6d:b3:11:ad:10:57:0f:1a:85:50:be:b5:
                    52:64:85:a1:97:f1:87:ce:78:ea:a8:ec:19:d1:6a:
                    df:4f:fe:83:27:8f:b9:fa:e5:69:3e:59:32:c8:45:
                    90:9c:3b:1c:0c:98:9a:09:ac:e7:a9:db:e0:f1:6d:
                    bb:ee:07:91:a6:28:9e:96:59:23:7f:3c:5d:69:29:
                    26:70:e5:d0:8c:ec:61:4a:4f:e0:0c:e2:f0:31:c8:
                    25:b6:84:e8:2b:a4:3a:06:6f:8e:eb:17:f6:2e:d5:
                    ac:7d:e5:3c:16:33:73:76:b3:aa:1e:17:97:2d:a8:
                    a5:17:cd:d5:fe:4c:a2:f6:10:c8:ba:0e:53:4e:9f:
                    73:93:f3:b0:08:ac:c9:03:6b:19:76:0d:9c:e8:92:
                    a9:55:c9:23:aa:5e:83:03:23:cc:ba:66:e6:cb:7a:
                    f0:08:1b:74:5e:f6:19:76:5f:97:27:b7:d2:db:10:
                    59:95:11:95:57:3c:38:e6:97:13:c1:c3:8a:39:e5:
                    1d:5a:80:06:0b:82:54:2d:c1:c5:f0:d6:f2:91:84:
                    da:84:61:a3:2b:dc:77:1b:26:44:82:dc:92:e7:13:
                    98:8f:77:de:ae:f4:0f:59:17:e3:dd:15:df:81:51:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BE:CD:F2:DD:2D:0E:21:5E:49:C8:02:0D:A9:58:28:65:0F:B9:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/478b6450-dbd1-3d64-9bbc-74107a645937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:52:93:b6:4e:c4:81:a9:cf:f2:81:2e:97:c8:36:46:8e:25:
         5d:42:7f:13:95:4f:8a:89:dd:b1:32:0d:51:67:5d:b3:a1:a9:
         2d:ff:b8:37:e6:fb:8f:e5:96:89:c6:53:76:ac:75:fe:e3:99:
         4a:ba:a7:a7:5f:58:81:90:cc:17:b8:83:ff:24:45:c3:db:93:
         59:cb:5b:55:da:f5:04:74:ff:6b:e0:7c:72:6b:8c:1a:ca:86:
         53:cd:52:d8:42:aa:a4:5b:97:5a:6c:b0:1f:13:05:47:0f:9f:
         27:bb:55:d5:60:54:22:08:80:ab:4d:a4:e0:ab:5f:a9:26:c0:
         85:b8:d5:fa:a2:fb:73:18:bb:79:fd:1d:90:d1:a6:28:af:29:
         32:b4:7a:fc:fd:3e:a4:a5:93:9a:fd:ee:a6:04:3a:7d:a2:00:
         91:4c:8b:5c:66:0c:cb:d2:93:7b:ff:78:2c:97:d9:8a:74:99:
         13:87:fe:2f:42:ef:f5:17:ea:df:a3:fa:01:e8:3b:63:8b:ec:
         17:a3:31:d4:8c:ce:1a:4f:47:88:c3:90:32:f7:87:59:4c:d5:
         ef:7d:db:ca:77:86:bd:fe:e7:c5:b3:52:13:a2:44:33:90:ac:
         40:9b:8d:d8:3c:4b:99:52:1e:99:80:0f:61:9d:47:db:bb:7a:
         e1:fd:88:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----