Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73653ef5-f1e6-32ce-a7f9-1fde5b1b2694.roa
File:                     73653ef5-f1e6-32ce-a7f9-1fde5b1b2694.roa (raw, json)
Hash identifier:          KVOabLpuMj1Wxp8Hw7ANiGwmQ6wmZO6nw4pnJcQFp3U=
Subject key identifier:   39:68:A8:AD:FF:46:6C:9B:95:2E:01:46:7C:FE:1F:36:AF:F9:AD:4F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285839B8DACA23AF07D0C99AFFE2C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73653ef5-f1e6-32ce-a7f9-1fde5b1b2694.roa
Signing time:             Mon 26 Apr 2021 04:00:00 +0000
ROA not before:           Mon 26 Apr 2021 04:00:00 +0000
ROA not after:            Sat 29 Jul 2023 04:00:00 +0000
asID:                     15169
IP address blocks:        2607:f8b0:4006::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:b8:da:ca:23:af:07:d0:c9:9a:ff:e2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 26 04:00:00 2021 GMT
            Not After : Jul 29 04:00:00 2023 GMT
        Subject: CN=6a9b0df3-3e75-4168-a255-5e77dae89223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a8:11:b6:9c:fc:5e:52:e2:56:13:36:c6:dc:
                    e8:8e:17:68:57:e0:7c:c4:00:68:e6:1e:56:02:33:
                    45:0b:63:64:5c:3b:da:03:ce:b9:cc:b1:7e:3b:b3:
                    87:50:a8:75:d4:da:ca:f2:05:55:7d:9f:bc:ec:87:
                    1a:c2:1d:f6:e3:4a:41:7b:51:5c:64:b8:e2:1d:ef:
                    b7:eb:82:24:9f:ae:ec:df:3d:0d:0a:34:a7:69:53:
                    d9:b4:ce:a0:24:d2:d3:9e:34:17:cb:9e:7d:28:b4:
                    28:0d:bc:ef:50:99:b8:5a:14:6d:5f:88:19:6a:b3:
                    0e:b3:3f:9b:62:99:6e:28:06:ab:68:b6:92:75:f5:
                    72:e2:d8:4d:c3:83:4a:e7:9f:53:6e:03:2b:fa:d3:
                    b1:a9:42:da:ae:f0:1f:b9:cf:aa:b4:ac:6c:1d:ce:
                    71:f3:ef:7d:ec:a2:ba:6e:f9:03:19:bc:35:8b:76:
                    e6:7c:29:95:66:23:bb:bc:f1:7d:9e:0a:e6:09:40:
                    30:8d:a6:17:4b:d5:34:0e:ef:18:d1:08:1f:d3:2d:
                    fa:4e:94:25:b2:25:8d:37:3f:3d:14:60:de:0a:1c:
                    86:82:40:4d:5a:f8:5a:97:95:ca:8a:a9:d9:1f:07:
                    50:a3:53:88:b1:fd:61:24:6d:a5:4a:61:19:50:10:
                    a2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:68:A8:AD:FF:46:6C:9B:95:2E:01:46:7C:FE:1F:36:AF:F9:AD:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/73653ef5-f1e6-32ce-a7f9-1fde5b1b2694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:4006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ff:e8:b7:54:76:8e:23:b9:ea:74:e2:28:e9:7d:bf:39:98:
         15:26:81:2a:17:2e:07:ad:86:65:69:59:97:7d:48:71:f8:c5:
         d7:7f:b6:1d:da:88:06:04:36:60:5d:f7:f7:0c:79:04:cf:f0:
         f7:02:89:9d:f7:78:8a:12:35:65:6e:4e:0b:f7:04:12:c5:4c:
         9c:5a:f3:68:2a:a1:cf:a9:16:55:77:6a:61:bc:fa:2b:04:eb:
         1b:73:c2:c0:7f:a4:fe:c6:38:00:4d:8f:3e:80:74:87:fb:89:
         03:71:84:b6:f4:e6:43:2c:b2:09:a7:d9:7e:26:45:3a:96:af:
         33:74:99:a5:27:24:19:e9:96:97:2d:d7:ae:36:56:84:a3:9d:
         50:61:c9:1a:01:76:57:64:12:bd:3f:90:4d:d8:04:9f:5d:04:
         a9:20:52:f7:40:6c:1a:54:4e:3d:7a:3e:99:84:6a:47:b5:c6:
         06:b9:0c:13:a1:d2:40:2b:c3:bc:86:54:e5:00:31:7d:51:5e:
         01:72:d9:36:33:9b:64:ac:79:3c:f1:ae:ba:80:e9:7c:d7:5b:
         52:30:aa:19:63:8d:85:3f:18:07:d9:19:dd:c0:b0:9b:16:ef:
         5b:aa:3f:e2:16:90:0f:1f:d8:b1:ec:e6:c1:1a:69:a2:8f:c0:
         77:6a:ea:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----