Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/73cb65ee-b62f-3063-b52a-1424e18f3776.roa
File:                     73cb65ee-b62f-3063-b52a-1424e18f3776.roa (raw, json)
Hash identifier:          gCDs4aPuElBLciQntF+zPcDE69AiEXIsFh0Sr7CYX+Q=
Subject key identifier:   5A:2C:4F:A3:58:9E:3E:F7:69:7D:CE:1A:B3:FE:BB:C8:E3:64:C2:BB
Certificate issuer:       /CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1646FEEE969
Authority key identifier: DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/73cb65ee-b62f-3063-b52a-1424e18f3776.roa
Signing time:             Fri 06 Jul 2018 14:11:25 +0000
ROA not before:           Fri 06 Jul 2018 04:00:00 +0000
ROA not after:            Mon 01 Aug 2022 04:00:00 +0000
asID:                     11039
IP address blocks:        2620:106:c009::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:6f:ee:e9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4920092f-307e-44b3-b55a-cc5a8c6224dc
        Validity
            Not Before: Jul  6 04:00:00 2018 GMT
            Not After : Aug  1 04:00:00 2022 GMT
        Subject: CN=c989152c-e1f6-4b23-aaa0-401888e784b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:72:c1:c0:82:3f:c7:38:0f:cd:b1:6b:4b:
                    69:34:04:ab:b7:e7:7b:8d:95:f5:26:5e:13:e1:8f:
                    f1:80:23:b5:69:5c:7e:90:03:54:fb:ef:37:16:a5:
                    a6:02:8e:fb:79:4a:85:14:f5:95:30:4f:62:11:1c:
                    28:62:ec:d1:05:fb:7c:0d:14:44:73:a7:7d:ce:8a:
                    80:07:f9:df:e1:35:ce:5b:b8:0e:e7:25:e4:b9:33:
                    c3:e9:ee:93:1f:15:e0:29:ff:95:26:77:40:b4:3e:
                    52:7b:2d:90:e9:2d:6e:2f:3b:b3:3e:b8:f6:f8:bc:
                    3a:35:4a:b3:e5:8e:d0:45:6d:48:60:b5:35:61:3d:
                    c3:7b:e3:24:a8:62:5d:28:f5:ac:6e:87:2d:17:d0:
                    b0:e8:6a:f1:88:3e:74:d6:52:b5:92:0e:cd:2d:12:
                    75:29:7d:c1:f0:5e:d7:7d:0c:57:11:34:ae:07:2f:
                    18:2e:f7:cd:78:1c:bc:0f:54:f9:22:ff:4a:92:17:
                    13:53:00:76:60:d0:d9:81:d2:02:7c:84:1e:c2:f0:
                    70:2e:45:a0:56:26:64:59:9a:81:95:c7:70:ab:03:
                    60:21:41:6a:4c:41:c2:d7:33:3d:20:94:ba:15:47:
                    20:48:ae:67:33:6f:fd:12:f4:f2:c8:9b:5f:6a:d9:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2C:4F:A3:58:9E:3E:F7:69:7D:CE:1A:B3:FE:BB:C8:E3:64:C2:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/73cb65ee-b62f-3063-b52a-1424e18f3776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc/4920092f-307e-44b3-b55a-cc5a8c6224dc.crl

            X509v3 Authority Key Identifier:
                keyid:DA:E1:0A:D3:80:D5:CB:93:08:68:20:0B:23:8C:28:D3:C8:96:0C:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4920092f-307e-44b3-b55a-cc5a8c6224dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:106:c009::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c2:3f:14:60:51:60:75:14:5a:f2:dc:61:4f:32:ea:93:90:
         2e:d7:30:e4:f8:28:b3:af:1f:ff:17:2c:3a:cb:03:06:df:16:
         56:8f:f2:d6:e3:65:45:e3:7b:fd:8a:43:54:67:69:d0:74:90:
         57:12:f1:88:ec:42:73:a9:93:74:54:e0:09:0f:b0:12:16:3c:
         17:26:27:0b:aa:7e:b0:d5:67:ed:a9:6f:6e:11:9d:2c:36:ce:
         b8:e4:64:9a:f5:0d:01:de:0f:4a:75:25:34:04:be:90:8b:c0:
         84:cf:c7:e7:24:db:64:ea:78:18:fa:b1:c1:22:29:f3:fe:d7:
         b9:57:78:a8:79:d9:be:4e:28:32:17:c2:f6:3c:0a:33:5c:45:
         44:27:c4:5e:70:1a:6e:3a:b9:27:f3:47:3b:f0:7b:29:0e:32:
         e7:af:4f:68:76:66:80:23:69:58:54:ea:a8:6e:73:40:10:b5:
         b3:29:a7:64:14:ad:54:73:22:56:7a:87:8e:a8:ae:98:11:78:
         6e:7e:61:5c:0d:b1:f7:47:4e:c7:62:5e:da:58:40:53:13:68:
         52:18:d8:e1:29:19:de:09:da:1b:a4:36:b9:74:5a:17:ce:dd:
         cc:e4:be:26:32:77:ad:24:71:84:5d:51:59:a2:10:54:6f:c5:
         d0:4e:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----