Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/2c638a3a-9962-3472-ae16-23bf08c2ea53.roa
File:                     2c638a3a-9962-3472-ae16-23bf08c2ea53.roa (raw, json)
Hash identifier:          QNjqJQNonVtEdVG2+o6UJWJIed+43XMlsuArBV/nDio=
Subject key identifier:   29:7A:5A:3C:F7:E8:37:E8:11:9C:45:D6:65:08:3C:54:6D:15:4E:D0
Certificate issuer:       /CN=12fa7453-6b85-412b-b280-7c71eec6c46b
Certificate serial:       010D0C9F4328576D51CC73C042CFC17348C81784
Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/2c638a3a-9962-3472-ae16-23bf08c2ea53.roa
Signing time:             Mon 13 Jul 2020 15:25:39 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     394356
IP address blocks:        2602:fe62::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:48:c8:17:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=97c44bb5-da12-4ac0-b2fa-6ef2ed0e104e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:37:82:73:17:de:0a:e8:ee:5a:ae:66:25:db:
                    15:8e:a2:41:cc:41:2a:3b:cf:cb:9f:f8:2d:5c:89:
                    ce:53:c0:c0:f5:b4:8d:8c:b7:4f:1e:b3:cb:ed:54:
                    ee:62:af:ae:33:91:b5:60:25:07:b1:a2:46:93:50:
                    67:bd:2a:21:87:3e:cf:b5:a0:8b:0a:f0:87:55:40:
                    f8:7a:c6:76:15:25:8d:56:8a:5d:02:4f:28:ba:89:
                    f4:f2:46:a6:4e:08:da:ce:d1:b4:21:f5:da:ac:e4:
                    f2:c6:9f:62:19:dd:9e:a3:29:bd:85:e0:55:51:98:
                    01:b5:7c:f4:65:a4:ab:a3:71:c2:de:3b:95:51:0b:
                    9a:3d:5b:1f:eb:8d:6b:48:ca:3f:bd:56:04:ac:7f:
                    07:8c:22:2b:fb:1a:9e:c8:d7:c9:82:15:be:48:c7:
                    9d:aa:4a:b7:a2:fb:10:10:52:01:07:b5:51:1a:9c:
                    28:eb:e6:bd:3b:a8:82:c8:d4:c5:ff:92:6d:bc:c2:
                    05:be:67:d8:8c:53:aa:70:2c:d9:a8:08:7a:a1:10:
                    04:79:50:f6:8b:db:ad:e1:68:35:c8:bf:53:c8:8a:
                    a5:5c:da:99:83:49:84:c3:a7:ec:bc:02:b9:19:21:
                    e4:69:f7:44:a2:98:26:8d:41:f0:c1:56:9b:28:bb:
                    a6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7A:5A:3C:F7:E8:37:E8:11:9C:45:D6:65:08:3C:54:6D:15:4E:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/2c638a3a-9962-3472-ae16-23bf08c2ea53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl

            X509v3 Authority Key Identifier:
                keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe62::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:18:14:49:9e:15:47:32:fb:ae:fc:f3:f3:a6:41:b3:e9:
         17:6c:0d:54:b0:9d:5d:af:be:80:61:e9:aa:70:8a:64:f8:ab:
         55:69:f6:5a:63:2d:fd:88:07:e5:b7:5c:77:24:d0:cf:77:eb:
         3b:b4:da:3c:eb:5b:a5:80:9b:77:ff:30:62:5e:b7:f3:26:d2:
         7d:1a:8e:4c:fa:b7:a9:81:8c:4d:42:d3:b8:43:a7:91:df:db:
         da:ba:6d:6b:6f:44:ba:0a:f5:ee:ee:b2:15:b4:b7:d2:10:10:
         04:72:f8:19:2a:a4:79:a7:93:d9:3c:af:ec:c7:a5:5f:71:cb:
         0f:f1:58:31:a6:50:3a:64:db:62:72:8f:ed:c9:3e:ac:59:2f:
         d2:2a:fb:f0:3b:e4:43:5c:53:40:9f:0e:ec:89:89:85:71:04:
         00:1e:e7:fd:23:d9:ba:82:87:eb:10:2a:a3:51:bd:0b:03:3b:
         62:a1:05:c4:78:61:a0:ad:f0:3c:e2:b6:e1:b7:6e:5f:d8:62:
         74:10:27:20:49:43:6b:c2:6c:76:be:0f:99:86:02:ad:e7:7b:
         a1:28:d6:7c:c0:9c:75:ea:ac:6f:ac:a4:34:22:8d:bd:30:18:
         99:d0:9e:e0:06:ab:10:97:bc:e9:14:2b:aa:60:00:41:75:c9:
         ba:35:52:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----