Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7e5a07d9-57fa-3281-b82b-bf1d9bad6c1f.roa
File:                     7e5a07d9-57fa-3281-b82b-bf1d9bad6c1f.roa (raw, json)
Hash identifier:          LjwMIDCW3lwFUyKQaXhaTSDRdGJgFJtxgPsfb/ezGlY=
Subject key identifier:   A1:01:DE:4D:8C:7B:EC:FA:CF:7A:01:FA:6C:C4:A5:72:C8:55:A0:84
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328576D51CC73C042CFC173729AEFC7
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7e5a07d9-57fa-3281-b82b-bf1d9bad6c1f.roa
Signing time:             Tue 21 Jul 2020 18:20:23 +0000
ROA not before:           Mon 13 Jan 2020 05:00:00 +0000
ROA not after:            Mon 24 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        208.70.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:72:9a:ef:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jan 13 05:00:00 2020 GMT
            Not After : Oct 24 04:00:00 2022 GMT
        Subject: CN=d22eea09-e34f-4db8-9a2c-b0e36236f33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:e9:1f:d6:37:c5:9c:e7:78:b0:aa:31:ba:
                    55:35:8a:41:52:74:aa:60:8e:22:e7:95:f3:13:2f:
                    3f:26:2e:73:3d:df:28:34:98:4b:16:92:f9:4d:39:
                    94:37:2b:95:4e:ac:80:53:60:46:2e:de:c3:da:0d:
                    f3:28:e0:87:89:09:11:56:14:75:1d:da:90:40:50:
                    51:a9:59:07:ba:0c:10:c8:0d:0d:e3:ba:0d:21:0d:
                    b2:1f:91:3b:ff:58:06:e6:3a:b6:a9:01:4f:a0:a3:
                    5c:da:b4:95:79:bb:b7:b1:44:62:eb:ff:10:fa:40:
                    6a:71:cd:27:0f:46:6e:4e:b9:fe:c1:2e:57:ac:76:
                    45:6e:01:8c:da:18:0b:8c:24:3e:6d:ba:73:13:43:
                    c3:7e:a2:17:2a:6b:41:cb:4f:b5:b9:0f:13:b6:ef:
                    39:26:c2:6a:91:a1:87:92:ff:7b:2e:15:17:dc:73:
                    95:a6:2b:1f:fd:76:ac:48:f6:50:42:bc:84:ee:dd:
                    aa:a1:c2:cb:a7:cb:ef:fc:cc:67:f7:8a:fd:49:71:
                    ae:b2:1b:73:00:7f:88:17:fd:2b:a7:91:1b:d6:39:
                    46:0d:47:e4:61:51:b5:df:3a:00:19:e8:53:b5:2d:
                    fd:ec:e6:3d:0b:f8:2c:7e:41:ea:88:a7:53:f7:8f:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:01:DE:4D:8C:7B:EC:FA:CF:7A:01:FA:6C:C4:A5:72:C8:55:A0:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/7e5a07d9-57fa-3281-b82b-bf1d9bad6c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:07:5d:6a:9e:52:54:83:2e:57:a0:d7:a8:a4:c9:44:72:
         bc:c4:2f:bb:58:69:11:94:98:77:f4:a3:d5:07:76:96:e7:af:
         39:1a:ae:fd:25:cd:6d:52:b7:d1:92:03:0c:c2:91:92:e8:d8:
         80:48:00:15:f2:31:bc:22:45:13:60:69:6f:08:64:6c:28:49:
         8d:83:8c:89:b4:4b:4d:a6:b8:3e:a0:c8:c4:1f:e4:ca:33:e0:
         08:92:52:c4:fb:8a:22:0f:25:51:58:87:5c:45:a4:94:73:14:
         2e:9c:13:41:17:2a:e0:53:bb:61:bc:8d:a1:55:5f:af:a2:a0:
         0f:e6:e3:79:69:c8:b4:b5:10:22:a1:12:cb:c6:29:87:64:3d:
         30:dd:4f:2f:d7:13:6b:9f:f5:94:92:4c:4a:80:ec:03:11:df:
         50:2b:98:b8:17:fe:59:f5:6b:00:64:b9:13:30:af:25:98:ed:
         be:71:ec:5a:22:43:da:25:ca:17:5e:a2:b1:4d:d2:93:8d:fe:
         eb:75:3c:9c:39:37:0e:3a:92:3b:b1:1c:48:4b:70:c9:1f:9b:
         44:6d:e5:f0:ef:4e:56:8b:e8:a8:ea:a1:27:5d:21:ae:d0:ea:
         1c:4c:14:a8:77:38:45:37:88:eb:91:65:00:58:d9:41:53:d6:
         f2:a2:2e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----