Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9f49cefb-d4dd-39c2-bfae-3684087012a2.roa
File:                     9f49cefb-d4dd-39c2-bfae-3684087012a2.roa (raw, json)
Hash identifier:          45A4xBsGzLcg1Xxtd394+UmJoB+d3oE0d8RgKTI/C8E=
Subject key identifier:   6D:23:12:46:49:1E:65:22:DD:D1:87:43:1A:2A:F4:E1:3F:26:BB:7E
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285839B8E5FC0B2B0353D294787100
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9f49cefb-d4dd-39c2-bfae-3684087012a2.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        2620:11a:a03b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:e5:fc:0b:2b:03:53:d2:94:78:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=d8deff90-89e9-4d59-bcfe-491d33fb5fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:fe:89:ee:2d:d9:f3:0c:f7:24:d7:c3:c5:
                    f8:7f:b9:2a:7e:7d:64:02:a7:3d:e3:17:dd:5a:af:
                    af:3a:d9:10:e3:e3:39:90:3e:66:ed:33:c3:92:19:
                    62:8b:9b:f6:a2:83:98:45:a3:bf:6b:5e:d3:e9:67:
                    f5:74:95:86:a5:3a:4c:34:aa:19:68:8d:76:06:2a:
                    8a:06:d2:b0:48:b3:99:a0:13:6e:2f:c5:f1:3b:88:
                    c1:67:1d:a7:5f:cb:34:bf:d6:2f:dc:1c:da:9a:4b:
                    bb:f9:48:d2:c7:be:a3:7f:30:8f:45:33:d5:5b:b9:
                    8a:4d:95:93:f8:00:60:67:4c:4b:7a:59:09:35:b3:
                    95:24:7b:88:1d:b9:95:ca:4b:81:01:91:bd:93:67:
                    0f:c1:c3:42:a8:b3:56:39:b8:81:bc:ee:76:9b:84:
                    9a:da:60:f6:7b:f0:34:23:3b:71:84:e0:62:2a:8a:
                    e7:9f:4b:f6:28:02:af:73:c4:b1:4c:26:34:39:99:
                    b0:d5:ab:f7:95:bc:dd:5c:43:06:e2:4c:10:04:61:
                    7f:cc:3f:cf:1e:3c:ad:a3:57:72:65:f2:df:43:f4:
                    aa:98:f1:c4:fa:d1:7e:38:dc:03:a7:d8:b7:a8:d1:
                    82:18:99:8d:cd:3a:61:41:6e:54:4b:36:79:01:0b:
                    35:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:23:12:46:49:1E:65:22:DD:D1:87:43:1A:2A:F4:E1:3F:26:BB:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/9f49cefb-d4dd-39c2-bfae-3684087012a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:a03b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:76:9a:71:2e:70:ab:de:49:a0:40:0a:f7:74:b0:9d:79:8c:
         be:25:6d:b8:d9:71:f6:91:9b:fe:2f:53:64:39:3a:c5:bf:4d:
         70:73:6b:37:cb:7e:ad:84:27:c3:bc:d0:33:58:3a:13:8f:13:
         c9:fa:8c:7b:df:4b:6d:97:7f:cc:6b:fc:37:90:0c:8d:28:9a:
         01:04:1a:c4:89:60:be:b1:65:95:0f:65:8a:e9:8b:c0:c0:b0:
         be:7b:53:f2:ed:14:30:88:a8:c5:d3:30:7c:ae:e8:0b:cc:62:
         72:ff:50:48:c7:57:ec:0f:f3:a2:9b:43:54:d9:d5:60:f5:11:
         ea:64:a8:1f:12:57:d2:5c:a9:80:33:9d:17:54:ab:11:57:f2:
         09:04:35:60:2a:23:db:a9:ef:4a:61:3e:bc:fd:85:7f:6f:53:
         8e:9b:ad:ba:8b:65:9f:4b:74:d0:6f:4d:a0:7c:79:66:1a:dc:
         d5:f7:83:04:91:e8:34:2a:c6:fb:b8:d0:db:a9:2d:58:68:ec:
         dd:b5:25:3b:8a:78:a4:2d:a9:56:4e:9d:f1:25:77:99:0a:bd:
         d6:ba:e6:19:b3:f5:d3:d2:e0:9b:b8:72:72:1b:08:63:56:98:
         2a:7a:d1:27:d6:8a:d6:f9:0d:8c:81:b7:c6:a7:88:44:8f:8c:
         80:9e:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----