Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/444ce90a-8ec7-3d65-9c17-2b6b17f42d4a.roa
File:                     444ce90a-8ec7-3d65-9c17-2b6b17f42d4a.roa (raw, json)
Hash identifier:          lMg+oQImSwHKMk7Nc3v+m9Hd31OxikqX4HXrEOWlFds=
Subject key identifier:   36:FA:3C:F2:40:DE:23:9F:B9:A6:59:55:BE:F5:CE:FD:25:EE:2D:C1
Certificate issuer:       /CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
Certificate serial:       010D0C9F4328576D51CC73C042CFC1736D3E9155
Authority key identifier: 92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/444ce90a-8ec7-3d65-9c17-2b6b17f42d4a.roa
Signing time:             Mon 20 Jul 2020 17:21:23 +0000
ROA not before:           Mon 20 Jul 2020 04:00:00 +0000
ROA not after:            Sun 23 Oct 2022 04:00:00 +0000
asID:                     26677
IP address blocks:        2607:fd78::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:6d:3e:91:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8
        Validity
            Not Before: Jul 20 04:00:00 2020 GMT
            Not After : Oct 23 04:00:00 2022 GMT
        Subject: CN=0a56fd3a-1bc8-4692-b142-023c67d2d1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:f1:31:5a:30:05:8c:d4:a4:af:f2:8c:f2:
                    20:f4:ae:aa:35:85:a2:14:cf:c3:2e:89:f5:63:0b:
                    f1:35:da:7d:3a:37:55:f7:f2:31:cf:26:b9:49:3c:
                    de:a9:17:78:1c:cc:80:bf:ba:0a:21:6d:8f:05:94:
                    8d:a1:1c:8c:32:57:56:e8:f5:06:73:c9:8a:26:0f:
                    98:d5:f0:d9:cb:eb:97:2b:4f:34:f5:28:32:9d:23:
                    cb:11:72:23:9d:0d:91:2b:fe:48:38:5b:5d:d4:a1:
                    49:f8:07:92:f7:4e:eb:d8:84:de:8b:2c:90:22:ca:
                    86:c3:a8:76:a5:58:b8:70:18:7d:d6:95:1f:e0:f1:
                    af:54:04:ee:c9:8d:22:f2:b4:34:36:77:0a:67:17:
                    6b:65:01:15:89:0c:6f:06:46:bf:55:40:4d:23:26:
                    05:3f:b9:3c:20:a2:91:d1:1b:f9:dc:1f:48:b9:a7:
                    ce:84:d2:d1:22:62:ef:db:5b:87:dc:13:a5:0c:dd:
                    7a:3a:bf:bf:83:5a:43:5a:c8:06:f9:b1:6e:6d:22:
                    25:df:f5:e1:2c:7c:4a:c3:95:d2:f1:80:4a:71:7e:
                    7c:ac:ee:78:19:80:18:56:43:e0:d8:32:31:c3:bc:
                    73:f7:17:50:6a:85:60:0f:cb:d6:aa:62:2c:86:f4:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FA:3C:F2:40:DE:23:9F:B9:A6:59:55:BE:F5:CE:FD:25:EE:2D:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/444ce90a-8ec7-3d65-9c17-2b6b17f42d4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.crl

            X509v3 Authority Key Identifier:
                keyid:92:9F:B9:15:00:7A:DA:95:56:D3:15:81:73:8D:42:02:1C:CA:3A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ad6d9c2-d380-4f1f-8f6c-ebc2e503c4a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fd78::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:37:aa:1c:e0:57:56:2a:a1:be:fb:60:63:ea:d0:41:48:9e:
         83:5e:38:6b:5a:46:a8:de:ad:da:f6:36:64:ae:36:36:ae:e1:
         30:85:6a:9d:8e:db:48:95:23:e7:20:85:db:43:5c:d6:a8:1d:
         69:ae:f9:32:5d:e7:13:71:98:38:11:81:6d:3f:bb:64:d0:fc:
         b8:b0:0c:5f:1e:21:87:0d:00:6f:2d:38:07:a9:17:08:55:4b:
         c5:99:8b:36:aa:57:8b:00:90:27:fd:b0:7e:6a:e1:e3:9d:8a:
         40:7b:d6:39:a1:7a:de:73:3a:9a:fe:76:b9:7a:7e:5d:bc:30:
         bf:cb:1d:34:a6:15:34:06:32:1d:bb:c3:ce:72:8e:11:f2:72:
         09:3f:2a:23:43:8f:6d:92:7e:f9:ae:d1:cc:5e:2d:43:0d:cc:
         ff:3b:64:d6:e6:bc:d8:42:2d:68:b7:c2:ba:e8:6d:75:9c:e0:
         04:4d:74:9e:d0:d3:95:cc:14:9a:cc:8c:17:47:f8:a0:e4:d8:
         42:9a:6e:e0:55:58:73:80:4c:79:31:6b:e9:f9:0e:98:ce:c3:
         19:aa:cc:36:04:ee:87:42:6a:ac:ba:13:47:df:23:ec:ea:b7:
         3b:99:03:33:25:7b:7f:2c:f6:4d:0d:64:fa:28:6f:dc:c9:75:
         fa:4c:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----