Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/b10f7e9a-ac43-39ff-826f-099a72ae4c56.roa
File:                     b10f7e9a-ac43-39ff-826f-099a72ae4c56.roa (raw, json)
Hash identifier:          I7Nq5uiUNYtgYFdaSe3svoL4Eor9U5SeP0GCK+LQsYk=
Subject key identifier:   0F:24:75:B5:B2:41:74:C1:D5:3C:A6:A3:02:EE:74:EF:BE:EA:CA:3C
Certificate issuer:       /CN=53f3af06-68ea-4591-9526-0c1fce331651
Certificate serial:       010D0C9F4328576D51CC73C042CFC172152256C2
Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/b10f7e9a-ac43-39ff-826f-099a72ae4c56.roa
Signing time:             Thu 14 May 2020 21:41:11 +0000
ROA not before:           Thu 14 May 2020 04:00:00 +0000
ROA not after:            Wed 17 Aug 2022 04:00:00 +0000
asID:                     395611
IP address blocks:        2602:fd53::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:15:22:56:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651
        Validity
            Not Before: May 14 04:00:00 2020 GMT
            Not After : Aug 17 04:00:00 2022 GMT
        Subject: CN=8f90e070-30e2-4f66-b97f-c954f90fa060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9d:96:8f:0e:df:70:60:07:f3:9b:d5:f2:63:
                    cf:18:35:5d:0c:db:98:f8:a2:7e:af:ee:62:d6:7a:
                    15:49:a2:d9:6d:30:f2:2e:60:6c:cf:95:70:20:0d:
                    f7:46:b4:c5:12:fb:56:7f:95:ca:4c:49:01:7a:36:
                    26:d8:f2:fb:30:4b:01:18:3f:2c:b5:9a:ce:72:67:
                    7e:73:0f:e1:3e:05:cc:78:0c:e7:55:8f:82:14:70:
                    d4:4f:2d:00:d6:b3:6c:39:6b:93:52:5d:fd:89:c7:
                    1f:87:32:fb:58:de:01:01:98:69:c2:db:49:6a:66:
                    a4:f2:f4:a1:3f:73:e5:8b:ed:3c:ac:38:00:af:57:
                    dd:c4:7f:65:be:7b:2b:8e:9f:21:be:c2:b8:9b:7a:
                    28:61:64:f9:87:e3:53:28:6e:7a:0c:40:e6:d7:ed:
                    d7:b2:80:1c:58:ac:da:83:9e:d5:b7:05:bf:d9:8a:
                    36:b7:d9:90:fe:e6:3a:6b:66:52:5a:eb:3b:26:2a:
                    a3:91:aa:c5:c9:50:59:ee:27:6f:70:bc:f6:e5:4a:
                    6e:ea:9b:6a:0e:87:f1:3e:2e:6a:4f:40:26:4c:3f:
                    53:76:ef:e3:70:18:13:dd:74:25:87:98:72:c0:04:
                    ba:84:e0:24:b1:e8:81:07:c3:e3:e9:f1:05:ed:7f:
                    22:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:24:75:B5:B2:41:74:C1:D5:3C:A6:A3:02:EE:74:EF:BE:EA:CA:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/b10f7e9a-ac43-39ff-826f-099a72ae4c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl

            X509v3 Authority Key Identifier:
                keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd53::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:9c:19:8b:dc:1c:fd:14:90:b5:48:50:dc:53:6d:80:93:
         d7:4d:8e:e0:8d:c7:dc:62:8f:50:21:04:62:3e:80:a6:76:75:
         ea:c0:99:74:b3:f8:f9:12:90:a0:5f:ac:40:17:20:d7:bf:62:
         d5:63:d9:62:d1:92:ec:10:8d:ca:15:70:3b:b9:5c:03:f7:b1:
         84:85:58:f4:ac:9c:e1:66:95:49:6d:45:2d:c5:a1:d4:19:6d:
         2f:3f:9d:6a:89:33:6d:b3:a2:82:97:94:63:74:45:94:2d:fd:
         04:f9:73:b5:43:5e:11:52:38:f5:35:ab:18:f0:30:2a:74:78:
         9c:90:80:fc:79:cd:b1:e9:2b:3d:9d:94:0e:fc:7b:f7:d6:87:
         13:fa:41:ff:ac:f1:a0:d2:f6:5d:5e:b5:cd:f3:aa:ff:11:8a:
         79:b8:9f:04:04:bf:fe:64:fe:e6:f9:b4:de:c0:df:27:44:f0:
         f8:1e:46:b5:14:d3:45:56:3f:73:cb:af:88:53:be:55:16:8d:
         8d:00:30:f2:6e:a5:27:96:39:bc:83:9b:9b:99:1e:85:c9:3d:
         ed:1f:31:7a:19:41:4e:37:aa:af:de:26:69:34:61:d3:bd:58:
         c3:29:2a:89:47:79:66:c6:36:dd:54:98:bf:83:b5:fe:ef:f8:
         6a:52:cc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----