Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8d13e08e-01c5-3ad1-a259-51dd0985afb6.roa
File:                     8d13e08e-01c5-3ad1-a259-51dd0985afb6.roa (raw, json)
Hash identifier:          Qg1ATCI9AHYMzNnKFTirELBmmOOQBtwS7cqCNdnK8Us=
Subject key identifier:   D5:70:75:CA:28:42:FA:42:D6:B7:DE:AC:4C:79:B6:C1:4F:62:B2:12
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328576D51CC73C042CFC1742250D7B0
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8d13e08e-01c5-3ad1-a259-51dd0985afb6.roa
Signing time:             Wed 22 Apr 2020 04:00:00 +0000
ROA not before:           Wed 22 Apr 2020 04:00:00 +0000
ROA not after:            Sun 27 Nov 2022 05:00:00 +0000
asID:                     46450
IP address blocks:        173.205.208.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:22:50:d7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Apr 22 04:00:00 2020 GMT
            Not After : Nov 27 05:00:00 2022 GMT
        Subject: CN=dbd3ca70-5471-4a38-b698-a397f979470d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:3d:7d:fc:bc:ce:26:e3:7e:72:34:b2:6e:
                    6a:a8:e6:de:c8:09:82:38:16:95:aa:24:3e:ca:c0:
                    6e:ef:84:8b:92:aa:13:e9:54:af:c0:5c:94:62:3a:
                    df:2b:81:60:a6:cc:c8:c2:0e:42:1c:2f:46:f3:f6:
                    63:93:3b:94:33:4d:44:3e:6b:2f:2d:2b:0b:11:53:
                    50:18:f7:08:45:5e:04:f3:88:2d:24:3f:74:a3:0e:
                    0c:89:a2:a0:a3:bd:5f:73:07:64:f3:bb:a3:b4:b3:
                    49:5a:e2:68:e5:4b:94:f8:40:e6:77:e6:dd:0f:36:
                    dc:7d:c3:95:f7:28:54:79:fa:3f:93:e8:72:55:37:
                    ed:5b:cc:72:b6:20:87:eb:f5:29:4f:87:a8:04:9c:
                    cd:6d:6e:54:03:33:93:f7:ce:b1:0b:b7:5c:6c:34:
                    71:51:c6:e6:52:34:e1:fc:f8:8b:73:e8:e0:ae:c9:
                    d0:47:d9:aa:76:12:e3:e4:34:8c:7c:57:33:de:09:
                    36:58:fd:94:82:b5:cf:27:31:67:0b:f0:b2:91:fd:
                    ee:a5:69:c4:fa:71:f8:86:4c:8d:10:a7:c2:95:d4:
                    59:6a:23:8c:2b:48:56:78:cb:ec:79:81:dc:0f:9e:
                    40:4c:81:f2:d5:f6:dd:b7:45:07:c1:c6:8f:83:b6:
                    8f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:70:75:CA:28:42:FA:42:D6:B7:DE:AC:4C:79:B6:C1:4F:62:B2:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8d13e08e-01c5-3ad1-a259-51dd0985afb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.205.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ba:f1:14:ae:02:ab:63:65:67:e0:8a:21:8c:4a:8a:b3:9e:
         1b:8a:78:ad:9b:a3:b8:82:f4:49:4f:30:58:20:d1:b9:0b:cf:
         9c:33:09:c9:8a:52:b3:dd:81:fe:b5:40:fa:ca:7a:59:74:d0:
         b5:8f:93:c9:a7:3b:a8:33:44:55:76:41:fe:c3:3f:10:ad:ad:
         90:d7:5c:66:9f:86:2a:5c:ce:d1:34:ab:7f:37:b9:5b:be:3b:
         3a:c0:c7:a3:cc:8e:31:ff:d3:a3:32:78:2a:da:8a:d3:56:e9:
         3e:19:38:a4:11:cb:50:07:75:9a:90:b8:eb:64:96:c2:b8:5d:
         d4:8c:ae:1c:2c:81:b7:ec:03:05:71:d8:97:de:e4:ff:35:45:
         0d:59:fe:6a:8d:66:e2:85:f3:e4:41:0d:25:bc:c0:d9:f2:b8:
         58:99:57:69:26:a6:7d:4b:c3:47:27:84:fc:f0:84:e9:34:b6:
         ce:e7:30:84:62:9b:f3:47:17:62:b9:2c:bd:03:53:8f:67:cf:
         3a:45:86:91:80:9a:fb:07:2c:41:03:1f:73:3a:05:ee:f5:65:
         ae:e1:56:05:29:71:a8:12:0a:9d:fa:4f:c5:77:1e:ef:bf:7d:
         0b:b1:93:ae:af:1d:29:9f:2e:5e:ec:ee:aa:74:45:33:00:89:
         d4:60:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----