Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c549c7f7-8524-3f5b-9bf4-02bc530b70c1.roa
File:                     c549c7f7-8524-3f5b-9bf4-02bc530b70c1.roa (raw, json)
Hash identifier:          DRA4AXLEp8EmGfsU0biFhv69ILWtPQdOdX2A+5ZJ/EY=
Subject key identifier:   BE:68:26:FF:90:01:99:48:83:0A:39:73:E8:4D:79:E1:0C:75:9E:0A
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328576D51CC73C042CFC1740CA7309B
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c549c7f7-8524-3f5b-9bf4-02bc530b70c1.roa
Signing time:             Mon 13 Jan 2020 05:00:00 +0000
ROA not before:           Mon 13 Jan 2020 05:00:00 +0000
ROA not after:            Wed 23 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        94.140.18.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:0c:a7:30:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jan 13 05:00:00 2020 GMT
            Not After : Nov 23 05:00:00 2022 GMT
        Subject: CN=ad8e24d7-f519-4f32-ae69-290eeccac170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:d0:ae:48:b8:4d:83:98:22:79:10:e5:32:
                    e6:38:e2:93:5f:7f:6e:e4:1d:71:fa:37:db:65:35:
                    f8:87:b8:35:05:1b:08:74:d5:7b:7e:02:13:ed:8d:
                    7b:1b:25:32:91:77:3c:cc:1e:a2:00:ac:e1:38:04:
                    26:f8:5b:d1:a4:64:57:01:19:8d:bb:e4:00:ef:66:
                    5b:05:68:6c:f1:9f:42:b1:3a:87:94:f2:ec:8d:fb:
                    2e:e6:3b:38:cb:bc:a8:19:b9:82:09:70:aa:e8:5a:
                    87:c3:cc:3f:ee:0c:86:0c:d2:c3:61:89:d5:40:1b:
                    db:fb:2b:a2:d5:0f:39:82:40:84:08:2e:09:c7:b2:
                    99:f7:95:30:db:b6:68:67:56:7c:00:b1:92:04:47:
                    ea:0f:0f:9b:ce:c8:b6:f5:e1:82:df:1f:e8:4d:0a:
                    15:88:24:c0:f6:9f:ca:71:c6:00:04:80:e1:73:29:
                    63:c5:79:db:51:2e:9d:68:2d:93:55:19:19:32:3e:
                    e2:79:33:fe:de:a9:4e:3c:73:b4:8c:95:a5:2e:a0:
                    f9:dc:98:e1:e3:a3:07:b7:c4:46:92:1c:2f:19:09:
                    fc:13:65:9b:be:54:e2:95:bc:72:a6:2b:35:f4:d7:
                    5c:26:1d:2c:1a:07:a9:a6:1b:63:3c:db:ab:c8:02:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:68:26:FF:90:01:99:48:83:0A:39:73:E8:4D:79:E1:0C:75:9E:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c549c7f7-8524-3f5b-9bf4-02bc530b70c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.140.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dc:df:7d:70:bf:52:80:82:07:20:27:14:1c:a2:72:b0:d9:
         a1:bb:3c:5c:ef:d5:97:cb:91:f8:f0:0d:d4:b2:0f:85:45:1c:
         35:da:01:ba:fe:5c:4d:8c:65:6e:f2:e8:58:50:c4:8d:df:72:
         1b:5c:66:6d:62:2d:51:9c:9e:03:cd:a4:5b:94:ba:0b:9f:ef:
         d9:73:d0:da:92:b9:90:b7:a9:ae:b8:96:59:17:86:d7:7c:fc:
         1a:36:6f:06:7c:eb:69:53:9a:02:3b:fc:24:7d:2e:13:8d:37:
         2b:2f:50:2c:57:8c:f9:5d:92:63:21:91:82:3f:ca:49:39:4e:
         f2:f4:ef:5e:ff:20:69:46:4e:85:86:bd:57:19:cf:82:20:36:
         52:f0:96:5e:30:c0:d2:9d:df:dd:cb:36:16:e1:bb:fc:c6:2e:
         8a:48:e3:66:a4:17:12:24:d2:76:ed:e1:ab:9e:a7:e4:6b:70:
         c6:05:a0:0c:27:65:0d:0d:69:72:06:c6:81:29:93:e4:72:95:
         07:46:ef:29:1a:d5:d6:96:49:de:3b:39:93:f3:7f:57:01:4e:
         85:76:f4:6e:e3:63:f3:5e:38:70:72:f3:80:69:a1:9e:b1:4e:
         5f:cb:64:cc:e3:31:58:5a:c3:56:c7:f5:9e:f0:4d:51:45:94:
         85:e8:da:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----