Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/89b90737-387f-3f69-9c60-c823d3406f8c.roa
File:                     89b90737-387f-3f69-9c60-c823d3406f8c.roa (raw, json)
Hash identifier:          JlP8350tqHfL/ojMoHtDO4QGcPGFI/7OfohYoeDyu3E=
Subject key identifier:   23:6F:80:C1:12:D6:50:2C:71:D6:CC:95:C5:3D:38:58:78:4E:A8:DF
Certificate issuer:       /CN=e8a5a257-a121-41de-b0be-6ab191fc4486
Certificate serial:       010D0C9F4328576D51CC73C042CFC17198F7B07E
Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/89b90737-387f-3f69-9c60-c823d3406f8c.roa
Signing time:             Mon 20 Apr 2020 19:01:41 +0000
ROA not before:           Mon 20 Apr 2020 04:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     32709
IP address blocks:        63.134.128.0/18 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:98:f7:b0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486
        Validity
            Not Before: Apr 20 04:00:00 2020 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=99742427-deef-4494-81f9-ef30d5ba138e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:3d:62:32:c1:2b:6c:b0:5d:3f:9d:7f:f1:
                    7a:49:31:7c:ec:6f:94:7d:92:10:e3:6c:ab:26:43:
                    65:f9:e2:87:84:0a:bf:86:2f:99:00:55:ea:e1:4c:
                    49:ce:86:42:c2:ce:af:33:a6:7a:4a:a1:4d:0f:dc:
                    2f:b8:1b:f5:4d:0b:84:5b:14:42:6c:c2:99:5b:5c:
                    6e:b6:78:90:25:93:ea:5b:cb:a4:ca:ce:db:4e:0e:
                    96:96:cb:e3:4a:ee:92:43:72:40:fd:78:be:b0:4b:
                    ca:78:e3:84:32:08:c4:bc:a5:9f:93:90:13:8c:e5:
                    dd:44:25:50:88:3e:de:92:1c:b0:ac:94:f0:fe:9c:
                    99:86:3f:1c:9e:78:d1:c9:9d:fb:4e:80:f7:ad:5a:
                    e9:fe:67:64:2e:24:e7:3f:a8:dc:5b:16:34:cf:c8:
                    bc:fe:39:85:69:9b:a7:62:ac:8e:37:cb:f9:ee:b2:
                    5a:9f:a3:12:3b:36:51:eb:11:12:60:ed:62:92:4b:
                    fd:64:6c:be:c7:d6:68:64:be:fa:0f:42:bb:97:c7:
                    79:c6:92:3b:23:f3:cb:b0:a4:3b:f2:d2:db:f7:ec:
                    94:19:02:53:17:9b:88:da:7a:02:48:72:d7:75:d7:
                    fd:e1:fb:49:f3:20:15:91:c4:b4:55:51:38:f2:0c:
                    05:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6F:80:C1:12:D6:50:2C:71:D6:CC:95:C5:3D:38:58:78:4E:A8:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/89b90737-387f-3f69-9c60-c823d3406f8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl

            X509v3 Authority Key Identifier:
                keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.134.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8e:50:e2:7a:f2:ae:39:df:e9:8b:5c:5c:4c:ca:d5:e3:aa:
         61:35:8d:51:cd:15:e3:34:9a:66:df:d6:5f:05:52:82:d6:ba:
         f3:5c:2e:55:0d:32:4d:e2:3c:cc:b8:85:06:b6:9f:0a:18:ef:
         25:6b:dd:f4:42:e4:e7:63:5a:e4:d5:51:22:e1:35:f8:63:23:
         ab:33:a9:ab:2b:65:f9:58:3a:54:42:59:b3:40:11:7c:83:b0:
         ea:56:ed:e5:9d:06:b4:e5:9b:04:6c:d5:ce:98:fd:53:c4:41:
         43:be:94:6d:74:d7:7e:d2:5b:31:03:8d:3f:4f:c7:a9:fd:03:
         94:ed:76:b5:9b:37:09:21:f8:a0:56:a2:bd:15:aa:3c:d0:d4:
         a9:b7:15:2a:ce:c6:9d:a8:3d:f5:1a:57:f0:80:f0:0d:d8:87:
         ae:f1:4e:08:d3:a5:bb:cd:df:01:54:5e:92:22:27:9e:fd:f5:
         88:84:aa:62:cd:82:56:c7:51:52:30:42:8d:27:a4:84:03:e4:
         d7:77:aa:dd:ab:60:0e:c7:e8:05:95:38:ff:51:32:9c:26:f9:
         1e:db:5a:f8:45:e8:6f:2d:07:c9:92:7d:c6:3c:91:8d:6b:31:
         b9:57:ab:f5:e0:67:fb:ec:cd:48:8c:2e:5b:e2:92:8d:a7:23:
         bd:f5:09:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----