Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/f557fe27-1a9d-3eb7-b2f8-3d097f21618c.roa
File:                     f557fe27-1a9d-3eb7-b2f8-3d097f21618c.roa (raw, json)
Hash identifier:          R2usaGjrHgrf+jarzB53mWht2JN/rF343amAjCaqQWk=
Subject key identifier:   EA:54:FD:A0:1C:32:F5:DF:6E:F9:D8:3E:77:9B:06:D2:93:38:6F:8E
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328576D51CC73C042CFC172BAA6FBDE
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/f557fe27-1a9d-3eb7-b2f8-3d097f21618c.roa
Signing time:             Tue 16 Jun 2020 01:03:25 +0000
ROA not before:           Thu 12 Mar 2020 04:00:00 +0000
ROA not after:            Sun 18 Sep 2022 04:00:00 +0000
asID:                     29802
IP address blocks:        2602:ffd1:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:ba:a6:fb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Mar 12 04:00:00 2020 GMT
            Not After : Sep 18 04:00:00 2022 GMT
        Subject: CN=784e55a0-6c90-4ec6-aa73-41dfb90a8245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:97:00:f0:dd:bd:49:93:a9:17:02:36:84:
                    a0:80:58:ea:95:ca:4f:e0:95:e6:95:75:1d:2c:76:
                    94:86:ac:2e:4f:94:43:34:e9:44:49:e8:43:71:dd:
                    2f:04:3c:4d:56:24:83:86:66:15:03:e0:2c:5c:3b:
                    78:ad:09:d9:05:75:2c:4e:03:ca:6c:3c:c8:e5:ce:
                    8d:2e:d5:23:df:e8:6b:09:c8:7c:b6:1f:cb:a3:a9:
                    f8:50:bd:ff:8e:c7:18:62:fc:89:d1:9d:76:7e:51:
                    7a:39:af:d3:7e:68:97:da:f0:c6:52:2a:98:1e:b5:
                    83:3c:76:f2:44:67:3d:c8:66:25:9d:59:f1:5c:62:
                    89:66:fd:66:27:13:9c:30:0a:c8:0f:8e:1e:5e:d0:
                    e7:44:c6:ff:db:a9:8d:02:09:a3:95:35:e2:ac:75:
                    62:5b:ca:43:cf:99:60:e1:ec:da:42:7c:ac:af:01:
                    e6:6d:a9:ec:0f:0c:3f:c4:ea:17:cf:e2:ab:cd:66:
                    23:0e:f6:6f:f5:29:32:70:c2:62:00:3b:b5:65:d0:
                    3b:d4:8e:ed:b3:6e:7b:f6:ed:b5:df:1a:76:9c:13:
                    c9:24:88:38:81:f7:e6:5d:13:f8:ee:b6:bb:60:af:
                    cf:53:bc:dc:d9:5c:87:6b:3c:71:4d:28:d1:c1:6e:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:54:FD:A0:1C:32:F5:DF:6E:F9:D8:3E:77:9B:06:D2:93:38:6F:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/f557fe27-1a9d-3eb7-b2f8-3d097f21618c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ffd1:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c5:cb:71:62:ac:8e:cf:4d:18:04:c3:0e:3c:95:22:cd:20:
         0b:ac:a0:d9:a3:e2:32:3a:1f:ff:a5:c9:fc:e3:a2:5d:00:55:
         e6:83:79:48:7a:53:fb:04:0c:6f:d7:ce:b7:d7:e6:d8:6d:82:
         e4:aa:38:e3:0e:54:62:d5:7a:60:9b:a0:4e:72:df:8d:b1:33:
         7c:88:0e:b5:57:1e:c1:d6:05:6c:b7:5a:58:9f:f9:75:e5:6a:
         5f:fb:5b:e0:b8:35:41:81:54:91:56:c0:15:df:ff:f1:16:6b:
         d2:31:0b:29:fc:99:4d:c2:16:e4:08:d2:06:f8:33:8b:b7:dc:
         7c:c9:a3:7b:ca:80:f6:3b:12:13:3f:ba:a6:0c:88:48:c3:e6:
         ed:8b:25:7d:3c:ed:2f:8a:37:16:7c:cb:10:d7:04:b9:f9:32:
         4d:47:9f:57:72:02:a8:16:60:ac:23:fd:53:c1:03:0b:43:3d:
         1f:fa:33:22:0b:b0:74:a8:34:83:b9:11:87:a9:20:b2:4c:3d:
         50:35:fd:4d:a4:36:ff:c8:7f:94:44:e2:51:a8:8d:bd:a1:09:
         d0:d4:f7:0a:a3:d7:a1:1e:c0:2e:0f:02:95:29:2b:9c:b4:a9:
         3c:75:6c:b9:9b:ec:d9:a3:38:fa:86:f9:1c:e1:0c:98:38:c2:
         30:ca:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----