Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/514b9202-0153-380c-aa28-072d50e746d2.roa
File:                     514b9202-0153-380c-aa28-072d50e746d2.roa (raw, json)
Hash identifier:          BnRcesGy79lkH/L5/iGaNq0vuUTWxbSHcQvWxyt1HOk=
Subject key identifier:   30:AD:3D:E1:38:23:7A:5A:68:49:25:2E:A7:07:D1:CF:93:1D:B8:BA
Certificate issuer:       /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1646FEE2AE6
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/514b9202-0153-380c-aa28-072d50e746d2.roa
Signing time:             Fri 06 Jul 2018 14:10:36 +0000
ROA not before:           Fri 06 Jul 2018 04:00:00 +0000
ROA not after:            Mon 01 Aug 2022 04:00:00 +0000
asID:                     11039
IP address blocks:        2620:106:c005::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:6f:ee:2a:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
        Validity
            Not Before: Jul  6 04:00:00 2018 GMT
            Not After : Aug  1 04:00:00 2022 GMT
        Subject: CN=993af545-7db0-40c4-9710-8cb7194d4be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cf:77:32:d2:99:d1:58:c8:7f:e3:0d:99:4b:
                    f3:b0:62:de:e0:b3:99:75:74:da:3c:47:4b:88:a7:
                    72:aa:f0:59:18:b4:72:68:e6:7e:d5:44:f5:39:33:
                    0f:ea:a1:06:16:a6:e9:0a:49:2c:0b:53:37:76:09:
                    7d:cd:7a:b0:d2:69:96:2f:5b:eb:af:d2:5f:bc:ed:
                    19:b4:15:ee:77:b0:01:61:18:c8:98:08:4c:c9:33:
                    8d:4c:bb:6c:c3:b9:19:f1:93:8a:c3:e1:45:c0:7d:
                    b1:ad:b3:76:95:e7:93:ad:f2:f9:e4:1b:55:9f:d3:
                    dc:0f:2b:a4:2c:17:17:b5:c5:18:7c:33:4c:aa:a6:
                    8e:e9:94:0a:02:98:4b:33:60:87:09:c4:1b:fb:20:
                    f9:8d:7d:00:e5:ed:60:33:b0:00:68:a9:b1:d6:1d:
                    d0:41:b0:9f:1e:05:08:46:c4:af:4d:45:d9:6d:c5:
                    7a:cd:9d:93:9a:24:2c:d2:6e:6d:d6:95:6c:9a:ac:
                    a9:2b:eb:0f:ff:b3:69:2e:f4:f2:73:1a:29:4d:9a:
                    6c:93:2f:3a:b3:42:40:80:a7:67:c3:30:6d:f8:41:
                    1c:b9:52:3f:61:64:ab:5e:f3:bc:50:58:52:e8:36:
                    ac:ca:50:a7:56:9f:e7:a0:31:bc:2f:33:2d:f4:52:
                    7c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AD:3D:E1:38:23:7A:5A:68:49:25:2E:A7:07:D1:CF:93:1D:B8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/514b9202-0153-380c-aa28-072d50e746d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:106:c005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:fc:cc:3c:7c:96:e0:c0:72:c8:04:62:0c:8b:74:ad:8e:16:
         57:ae:32:98:f8:73:4e:3b:e4:ed:e1:07:b3:9b:4a:fa:12:db:
         a5:81:ad:99:6c:10:30:9e:4f:c1:2f:de:87:9a:51:79:7a:a9:
         b6:1c:18:a6:99:3a:61:61:c7:12:32:bc:aa:e8:96:c3:32:7c:
         d3:5d:c1:13:85:20:61:98:37:ed:ed:27:57:e5:db:22:2a:ad:
         ea:7f:e9:94:fa:24:78:1d:2f:c8:34:06:5a:7b:9f:c7:e1:89:
         a2:e9:79:b5:b1:5b:7b:73:e3:ac:ce:8e:21:05:d6:f0:57:44:
         34:b6:d7:0f:57:f8:11:91:4e:c3:40:4c:e2:9f:6a:7b:f6:9a:
         c6:24:93:a8:96:96:f2:a5:9f:78:18:fc:45:21:d9:a7:2b:bf:
         2c:5a:31:27:37:d4:28:64:3e:80:59:44:a3:1d:f7:84:f5:a1:
         bf:00:15:6e:9e:01:94:f3:13:09:6e:3b:34:08:02:25:13:4c:
         e7:13:71:71:05:34:de:ca:6b:38:30:6d:67:27:19:79:8d:9d:
         cc:cd:8f:aa:bb:9d:ec:40:5d:8f:47:d8:ac:c7:87:e5:f9:21:
         56:f3:65:dc:f2:b2:65:2a:ba:47:e5:b7:17:93:7b:b5:95:61:
         ff:7a:0c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----