Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/42e826dc-f7b6-3e2c-be4b-95a806558514.roa
File:                     42e826dc-f7b6-3e2c-be4b-95a806558514.roa (raw, json)
Hash identifier:          Svs7Wu0NK8IEFju89KcDlQs6m3do2vvS5OfzPd3sF9E=
Subject key identifier:   E9:40:AF:3E:E0:99:62:88:CF:26:77:0E:0C:F3:AE:5B:A6:83:7E:E0
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328576D51CC73C042CFC173B527355E
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/42e826dc-f7b6-3e2c-be4b-95a806558514.roa
Signing time:             Mon 03 Aug 2020 16:28:32 +0000
ROA not before:           Mon 13 Jan 2020 05:00:00 +0000
ROA not after:            Sun 06 Nov 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        198.154.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:b5:27:35:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jan 13 05:00:00 2020 GMT
            Not After : Nov  6 04:00:00 2022 GMT
        Subject: CN=32dfa93e-ed71-4b29-beea-a7f08ee01756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:bd:36:ec:5b:b9:de:94:34:6e:47:fe:04:
                    fa:a9:ef:90:f3:15:0f:67:32:3c:d2:ca:a4:01:a5:
                    40:ed:e0:f6:c2:40:72:70:ac:5b:f7:7a:6d:a8:4a:
                    a9:3f:91:5c:62:0f:39:c7:b4:81:53:44:77:86:f0:
                    cd:a4:df:58:1a:33:98:cb:ad:f1:b3:4a:83:37:74:
                    22:d0:f0:2a:27:4a:b2:12:e3:1d:5c:04:91:1c:4a:
                    58:fa:ed:18:2a:f7:98:f2:20:f6:91:a3:dd:e8:45:
                    ce:e7:10:91:62:83:47:f5:a6:d6:a6:3e:71:00:af:
                    1a:37:0d:6f:69:66:64:ce:5d:c6:35:74:85:98:82:
                    2c:8a:07:a2:8f:1a:55:3e:d9:c8:c6:c9:8f:36:98:
                    9a:b8:7c:45:f5:26:01:01:ee:f6:66:8c:66:69:9f:
                    3e:ce:41:e2:59:fb:33:fc:77:ac:f0:8d:8c:44:03:
                    56:c0:f3:67:8a:b0:4d:f2:2f:10:76:00:72:24:f5:
                    87:ee:88:d8:d4:9d:87:af:0c:63:e1:91:36:50:d0:
                    9c:9f:be:7b:af:1c:5d:ff:a7:28:0d:de:9b:c8:90:
                    39:b9:29:c4:f3:ff:e1:58:6c:3b:6e:74:32:bf:3e:
                    ef:91:af:ac:61:d8:63:92:72:7b:bb:58:63:3c:58:
                    64:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:40:AF:3E:E0:99:62:88:CF:26:77:0E:0C:F3:AE:5B:A6:83:7E:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/42e826dc-f7b6-3e2c-be4b-95a806558514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:85:de:ec:0d:dc:0b:5b:8e:64:dc:a2:30:7b:cd:7f:77:1e:
         74:18:3d:90:ed:3a:8e:a6:bc:df:7f:e3:c1:b3:d3:ca:f2:93:
         07:8f:70:f3:b1:bd:eb:61:b2:06:e3:a1:72:ac:7a:c2:00:6d:
         1a:27:cc:2b:df:b5:2e:e4:86:47:66:75:d4:11:f6:87:f3:10:
         4f:c3:0e:54:60:49:2d:0e:36:69:b3:6e:58:99:08:d9:a5:01:
         00:14:af:3f:fd:c8:8c:d4:a0:af:9b:9e:93:d6:66:0d:1f:47:
         c9:33:92:d0:dd:ab:bb:fe:3d:b8:13:32:d6:05:06:9c:7d:e6:
         51:00:44:85:16:8a:d3:9c:3b:4c:72:fb:c1:c6:57:07:76:4b:
         8e:70:3c:1f:04:26:1f:d3:da:53:cb:86:a4:e3:32:d1:33:18:
         ed:0d:64:ed:9a:ef:0b:a7:0e:d4:e5:a4:ba:bb:5a:ae:10:4f:
         fc:e6:45:68:71:65:0d:54:58:67:ec:d9:b0:bf:25:6a:c6:fa:
         89:0a:9e:0c:e2:ce:51:dd:63:5a:6b:3f:83:8c:46:88:61:51:
         d4:35:58:8a:b5:1e:d1:48:ca:ef:c6:ec:ae:06:d2:1b:f6:00:
         43:59:07:24:fb:41:19:43:97:dd:e8:2f:37:09:fd:b0:da:69:
         47:f3:39:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----