Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/3a5ee2db-78f0-32a0-8158-8484e3af5b1b.roa
File:                     3a5ee2db-78f0-32a0-8158-8484e3af5b1b.roa (raw, json)
Hash identifier:          3z/7fOMgtA3SlvJ9OiGqF5dcrEossSXPVEaiVhb42r4=
Subject key identifier:   A1:78:9E:E2:D7:5D:B8:20:EF:B4:CD:B0:46:36:0C:47:96:E3:DF:24
Certificate issuer:       /CN=33097e36-cef3-418b-a895-cacb797d1eeb
Certificate serial:       010D0C9F4328576D51CC73C042CFC173499E69C6
Authority key identifier: F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/3a5ee2db-78f0-32a0-8158-8484e3af5b1b.roa
Signing time:             Mon 13 Jul 2020 19:19:45 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Sun 16 Oct 2022 04:00:00 +0000
asID:                     10958
IP address blocks:        2606:7a80::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:49:9e:69:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33097e36-cef3-418b-a895-cacb797d1eeb
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Oct 16 04:00:00 2022 GMT
        Subject: CN=608e1247-ff6d-49e5-ac09-cacfcc774803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:90:3b:22:06:df:14:de:df:d5:57:6f:a4:
                    45:5f:64:4c:6b:cd:6b:66:ef:bd:1f:d0:fa:af:ae:
                    91:3b:26:e8:3d:cc:44:47:7e:e0:cd:3b:20:ce:a9:
                    c3:ca:43:19:a3:a1:c5:99:80:f2:41:5d:58:ea:f1:
                    e2:34:3a:3f:ed:33:f0:1e:e3:a8:26:4c:02:32:06:
                    80:29:62:56:d9:ae:06:c6:5f:aa:a9:f0:e1:46:cd:
                    72:5c:72:dd:0a:09:62:b2:4b:d7:39:55:f6:83:af:
                    e4:71:84:a2:62:35:19:a7:87:a9:ea:31:f9:ce:7f:
                    e3:28:bc:5a:a0:da:d7:47:ba:ac:eb:59:bd:a8:f5:
                    70:33:79:61:d0:1c:f9:81:75:ea:e1:be:2a:f9:b8:
                    df:80:b8:b2:fc:7f:66:b9:f3:e6:bd:88:bf:5b:99:
                    e0:35:a2:19:75:0f:44:dd:e9:5f:de:69:2e:83:ee:
                    91:87:3c:de:e2:2e:a3:82:e0:2c:c3:68:f1:16:fe:
                    17:0a:2a:52:52:1c:35:07:6e:7d:7a:75:f2:5f:fc:
                    fd:6a:88:08:51:aa:67:1e:95:b4:d9:f0:53:c9:27:
                    57:44:d3:90:de:4c:c1:c5:de:0c:4c:62:7a:64:85:
                    5d:06:45:12:d2:b6:86:65:9c:c5:63:6a:a8:3c:e0:
                    df:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:78:9E:E2:D7:5D:B8:20:EF:B4:CD:B0:46:36:0C:47:96:E3:DF:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/3a5ee2db-78f0-32a0-8158-8484e3af5b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb/33097e36-cef3-418b-a895-cacb797d1eeb.crl

            X509v3 Authority Key Identifier:
                keyid:F3:D2:56:2B:76:FF:3B:36:71:0B:45:B0:C7:99:53:16:86:A7:8F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/33097e36-cef3-418b-a895-cacb797d1eeb.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:bf:45:d7:b0:37:f4:02:00:b7:5c:89:8b:09:02:c0:b3:f4:
         2c:2b:d0:3c:59:64:6a:75:7c:ad:d9:b7:10:fd:d8:06:73:aa:
         f8:0f:62:0a:86:1e:f8:33:f7:cb:aa:6a:b9:86:95:90:cb:b8:
         af:00:31:d6:37:26:ec:d1:fa:ae:2f:4f:d5:a0:f3:c9:6d:6f:
         80:3f:dd:9f:4b:cf:46:a6:20:7a:55:5f:4c:3e:16:bb:6c:ae:
         5b:0d:03:52:1e:e8:cf:12:fc:01:34:f9:e7:56:b2:f7:4d:e1:
         5b:d5:d9:86:0a:46:2c:a1:c3:a0:0e:70:4d:5a:55:92:c5:e7:
         bf:27:da:cc:6b:2d:77:7a:08:76:ca:81:fb:0a:e9:b0:e3:6c:
         8d:b7:da:2d:ed:d6:95:f5:9b:4f:14:8a:24:32:85:8d:62:37:
         0e:aa:28:38:81:dc:6a:07:fc:e2:5e:14:79:4c:9c:b5:cf:cc:
         2c:eb:d7:93:3b:28:71:64:44:02:ae:9e:dc:cb:86:43:a9:f8:
         80:f2:f8:3a:f0:02:c6:4f:af:bf:53:06:0c:06:3a:55:4d:bd:
         55:cf:6e:f6:4a:a9:91:50:b1:90:01:d7:48:39:28:21:07:5c:
         c7:94:6e:6b:68:c0:66:ab:e9:7c:d8:46:83:02:c0:10:34:d1:
         44:58:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----