Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/296ba55e-221d-3a53-a4c4-c19d7fa26941.roa
File:                     296ba55e-221d-3a53-a4c4-c19d7fa26941.roa (raw, json)
Hash identifier:          op8eVcE5YsP1UuYu2rGQYysIIJkvIRRh2E5T9yLzYV4=
Subject key identifier:   8F:A7:DE:46:E2:88:80:CD:0C:42:12:24:D5:3C:3B:6F:8B:ED:14:F6
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F43285837BF8403A66B0C1087D9CD8100
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/296ba55e-221d-3a53-a4c4-c19d7fa26941.roa
Signing time:             Mon 26 Oct 2020 04:00:00 +0000
ROA not before:           Mon 26 Oct 2020 04:00:00 +0000
ROA not after:            Mon 30 Jan 2023 05:00:00 +0000
asID:                     16552
IP address blocks:        2600:1806:515::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:bf:84:03:a6:6b:0c:10:87:d9:cd:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: Oct 26 04:00:00 2020 GMT
            Not After : Jan 30 05:00:00 2023 GMT
        Subject: CN=79ba0f72-cd26-4e45-90f1-70c6b1e992eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:a2:9c:64:3c:4a:22:67:29:b5:11:87:4d:
                    87:63:fc:6d:f9:32:7e:f7:17:93:bc:31:4a:12:7b:
                    ee:7b:4d:7e:f3:a7:1f:45:17:ab:ee:be:9a:99:aa:
                    44:6f:c7:b3:80:b4:9c:87:12:74:44:0d:fd:5e:81:
                    10:95:d7:5e:2d:a3:f6:6e:51:5a:6d:4b:86:fa:24:
                    10:ec:78:e2:bf:ee:8b:97:ab:1f:eb:9b:e9:87:ce:
                    b7:42:d0:d3:d8:83:e0:22:df:89:63:92:04:ab:12:
                    3e:76:a5:35:80:31:93:46:28:5d:26:45:1d:bb:32:
                    3b:53:db:34:aa:bf:96:22:ff:c3:ea:b0:9c:e8:e5:
                    24:e0:a4:7a:02:76:01:27:e3:01:30:a1:75:69:41:
                    2a:22:07:c4:6a:60:02:9d:26:ab:24:4b:30:94:7b:
                    43:fc:7b:bb:b2:4e:b8:1c:08:4f:8b:cd:22:f7:01:
                    51:3a:f8:aa:77:d3:08:40:d9:55:1b:0a:5a:61:24:
                    99:a7:e1:ff:22:a2:7b:23:84:48:ca:5c:c6:59:da:
                    71:0e:9e:ad:89:d6:9d:22:b4:ba:3a:d5:ee:db:19:
                    2b:b7:42:ec:43:98:0a:6a:d0:00:e4:4f:35:47:6a:
                    be:f2:24:2c:d8:9e:db:ae:40:f6:b5:21:e5:fa:5f:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A7:DE:46:E2:88:80:CD:0C:42:12:24:D5:3C:3B:6F:8B:ED:14:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/296ba55e-221d-3a53-a4c4-c19d7fa26941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1806:515::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:cd:81:1d:f3:45:21:65:df:85:08:de:c8:13:43:60:8b:ab:
         53:32:3e:d4:f2:11:4c:5d:50:96:16:5e:33:db:4a:06:4a:05:
         9e:93:de:52:9d:ff:83:03:65:39:3c:2e:27:79:de:92:bd:4b:
         d0:f8:2c:8e:74:cb:82:80:79:05:73:68:49:05:0d:d4:62:6d:
         61:de:8f:b8:82:a6:33:19:c8:e1:eb:4c:58:0e:5c:f8:3b:80:
         05:1b:a6:ab:df:63:89:8a:38:96:2a:a1:58:47:01:76:c2:f7:
         21:5c:2b:71:91:80:1e:cc:ed:8c:ca:c6:74:3f:9a:dd:71:e0:
         32:96:da:e6:86:8b:14:ac:7e:9a:aa:4c:09:70:68:b7:6b:59:
         0b:48:f4:db:64:69:d0:df:61:dd:e8:61:e8:90:7a:b4:a7:7b:
         03:cf:6f:7b:bb:8a:3c:3b:3d:7f:fb:0c:6d:bd:f3:6f:f5:c9:
         b4:18:d4:b5:ab:86:b9:2b:df:34:dc:63:57:b4:3c:79:62:55:
         54:3c:60:49:4b:05:23:d6:77:67:0a:56:87:a5:2e:60:2e:e8:
         35:00:f4:af:b7:53:a6:a0:07:99:00:b2:1c:06:5f:7b:f1:75:
         90:24:a6:ed:31:90:ba:bc:de:fd:4e:fb:34:c1:38:60:bc:38:
         ae:35:9b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----