Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/5b596715-7943-3b0b-83b0-027b75727670.roa
File:                     5b596715-7943-3b0b-83b0-027b75727670.roa (raw, json)
Hash identifier:          s6gnILEVBkrZwuperZaUJHoF0uWth+Zm7hp6/ETbjEw=
Subject key identifier:   4E:CF:4C:16:60:E6:D9:DD:73:36:F0:48:4E:6E:9D:DF:EF:93:C2:F0
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328576D51CC73C042CFC174224A2632
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/5b596715-7943-3b0b-83b0-027b75727670.roa
Signing time:             Wed 22 Apr 2020 04:00:00 +0000
ROA not before:           Wed 22 Apr 2020 04:00:00 +0000
ROA not after:            Sun 27 Nov 2022 05:00:00 +0000
asID:                     46450
IP address blocks:        104.129.136.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:22:4a:26:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Apr 22 04:00:00 2020 GMT
            Not After : Nov 27 05:00:00 2022 GMT
        Subject: CN=e51ffa44-120f-436d-ac77-8b8ddc87d88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:c2:b7:89:1e:67:3a:b5:9e:7b:f8:4f:fa:
                    b0:bf:8c:be:e9:fb:40:0f:5d:ee:d6:0c:3e:77:f5:
                    16:6e:4b:be:c5:68:f7:a4:3a:b5:94:4d:5b:f4:ff:
                    cb:aa:b4:41:72:fd:8c:79:3d:64:22:f8:fb:11:41:
                    a5:57:2e:8b:9f:5f:2f:5e:aa:bd:47:1f:d4:30:d3:
                    16:7b:cc:d1:51:ac:45:fd:95:b5:e3:7a:78:36:8b:
                    fd:19:eb:df:5d:ae:a5:52:b4:8b:04:e7:7a:fa:6f:
                    2f:e6:e6:aa:36:d8:02:a8:b0:92:84:0a:62:34:aa:
                    e2:2c:b7:ac:d5:bb:c3:77:f3:35:10:0a:74:be:ef:
                    94:5f:91:98:ba:f2:07:78:c8:55:4b:e9:50:91:29:
                    03:df:d1:e7:67:2d:4f:75:92:ea:de:0a:55:75:54:
                    8f:25:87:06:4b:90:4d:d0:01:1e:69:fe:d8:53:d1:
                    ce:6d:76:a8:61:0b:43:6a:da:48:ac:29:29:2e:ff:
                    3b:6f:09:b5:82:ad:f6:6d:1e:4c:b7:f1:92:e8:a7:
                    f1:05:70:07:09:bd:20:37:05:9e:5c:df:17:ce:f4:
                    1e:6c:0c:21:e9:40:e0:9a:fe:68:58:29:b7:f4:8a:
                    75:a4:b2:ae:67:c9:69:77:01:97:b0:05:db:e1:4d:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CF:4C:16:60:E6:D9:DD:73:36:F0:48:4E:6E:9D:DF:EF:93:C2:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/5b596715-7943-3b0b-83b0-027b75727670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:04:fe:e8:a3:a8:b3:52:40:cc:f5:0a:37:6f:7e:8d:46:
         03:59:c8:29:a6:06:4e:6e:4d:a5:e4:8b:2d:08:f6:78:6e:a5:
         de:73:c0:2a:6f:44:69:a7:41:53:c8:ed:f0:33:4e:7b:45:d9:
         28:b1:5c:2c:2e:f5:02:72:53:32:0d:18:d4:26:c4:cb:e2:51:
         6c:ab:6b:56:fd:4c:c0:71:d4:b9:81:a9:a0:b7:eb:17:29:b3:
         1b:04:17:e5:24:75:61:91:45:a1:19:8d:8e:1e:90:f7:57:dd:
         e8:94:59:43:dc:83:1f:fe:b5:a0:89:fc:93:28:82:46:bb:05:
         bc:2d:fc:44:3c:0a:3c:b6:a3:24:f1:45:c3:5f:2d:d8:d9:30:
         67:ff:cb:d8:c1:69:d4:09:57:c1:68:a8:5e:2d:2f:9f:e8:69:
         95:ef:4d:6a:fd:48:2e:8b:36:bb:0c:2e:de:eb:de:21:02:49:
         71:eb:21:e3:7d:a7:67:26:31:4e:d0:59:8a:ed:d3:23:6f:10:
         cc:23:0b:77:8e:1b:26:bb:65:4f:96:d2:d9:7b:f7:ef:d3:d0:
         fe:ac:22:3a:f3:f7:f1:b0:fd:ea:81:5d:ad:2d:1d:1f:bd:65:
         e7:42:be:5a:31:70:e5:22:7f:a4:b9:a6:35:e1:33:6b:8e:5e:
         0e:82:a6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----