Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/93d59294-9c26-3c40-97f5-d900289e124e.roa
File:                     93d59294-9c26-3c40-97f5-d900289e124e.roa (raw, json)
Hash identifier:          AIJo+oIXzZC6Yq++fYoLtaUr+teH514q+7k15FHgMN4=
Subject key identifier:   41:0B:9A:16:D5:85:DD:A9:4E:AB:D1:63:78:C6:1F:7D:66:E5:1D:6C
Certificate issuer:       /CN=71ff2374-a419-4dc0-be35-7dea3236aad7
Certificate serial:       010D0C9F4328576D51CC73C042CFC160B217A185
Authority key identifier: F5:47:66:77:B3:8A:9D:36:C6:5F:A3:59:3B:33:44:AE:9C:AD:07:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/93d59294-9c26-3c40-97f5-d900289e124e.roa
Signing time:             Mon 01 Jan 2018 14:19:41 +0000
ROA not before:           Mon 01 Jan 2018 05:00:00 +0000
ROA not after:            Tue 22 Feb 2022 05:00:00 +0000
asID:                     7018
IP address blocks:        2001:1890::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:60:b2:17:a1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ff2374-a419-4dc0-be35-7dea3236aad7
        Validity
            Not Before: Jan  1 05:00:00 2018 GMT
            Not After : Feb 22 05:00:00 2022 GMT
        Subject: CN=6fd65c1f-3955-4953-a4b7-12b85c914020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:dc:cd:1e:cc:93:a1:cc:3a:c2:26:10:46:
                    99:96:b3:f0:48:bc:b0:fb:a2:c8:6a:09:8f:57:dc:
                    a5:5f:d3:98:e0:e2:e4:bf:24:84:fe:f3:68:fe:16:
                    72:66:c2:a8:a6:c5:c4:b3:97:27:0e:65:a9:60:7d:
                    7c:d9:15:0f:98:44:85:70:9e:f6:46:ba:90:58:76:
                    de:17:5e:4c:db:ba:4f:a5:22:91:55:dd:89:20:3d:
                    70:e1:9c:a8:9c:5a:bb:08:c4:80:56:c4:7a:c5:37:
                    ce:bb:3c:d6:ad:db:a0:9a:8a:15:50:e5:8a:6b:16:
                    8b:37:11:92:e4:e4:85:86:54:63:ad:38:00:1e:3e:
                    2f:59:e5:09:f4:5e:f8:ed:98:62:71:69:e3:3e:6e:
                    0f:47:f0:b7:94:ae:0c:eb:c9:60:47:8a:3d:ee:51:
                    05:9e:26:0e:47:b3:9d:70:96:16:0e:e1:69:b2:7f:
                    db:86:ef:82:0b:92:bc:5c:74:14:45:bd:37:3c:5a:
                    51:f9:e3:77:e7:37:7f:ac:fa:db:a6:43:b1:a9:a2:
                    2c:71:fc:0b:ba:6c:34:99:20:c0:49:8a:98:17:7e:
                    29:e5:b1:27:7e:02:d1:a9:3f:8d:59:e6:c5:94:36:
                    8b:42:8f:48:dd:79:1d:ab:aa:0a:9c:14:2a:57:d9:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0B:9A:16:D5:85:DD:A9:4E:AB:D1:63:78:C6:1F:7D:66:E5:1D:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/93d59294-9c26-3c40-97f5-d900289e124e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7/71ff2374-a419-4dc0-be35-7dea3236aad7.crl

            X509v3 Authority Key Identifier:
                keyid:F5:47:66:77:B3:8A:9D:36:C6:5F:A3:59:3B:33:44:AE:9C:AD:07:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/71ff2374-a419-4dc0-be35-7dea3236aad7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1890::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:6e:84:60:39:b3:8b:70:b2:c1:85:49:17:bb:e6:ab:d0:ec:
         fc:27:32:f7:eb:8e:11:cf:99:92:58:b6:10:c2:e8:98:69:3f:
         9e:86:2b:39:c6:57:eb:ed:2b:4d:36:b8:8e:bd:7d:d8:5f:90:
         04:95:7d:4d:e8:5b:fc:e2:6f:a1:47:5b:21:08:29:d5:8d:a3:
         a9:60:c3:8b:e5:a6:2d:80:98:e9:a5:46:e0:a1:4d:6e:d4:e3:
         bb:b7:47:82:dc:de:78:28:a0:e6:08:2e:47:5a:27:76:35:90:
         9c:ee:e8:c9:79:d8:cf:97:c8:fe:ce:b8:62:eb:df:19:b1:c6:
         55:10:55:84:60:4c:f9:01:b9:b1:b4:c8:44:e5:d1:2e:ec:38:
         6b:ba:41:e8:82:7a:80:75:e4:20:ca:37:0f:1c:ec:ad:7b:56:
         14:19:11:64:e5:12:f8:bf:db:dc:87:9b:53:77:0d:69:a9:d5:
         0a:ff:c9:fa:2a:68:1a:9e:ea:78:7a:3f:e4:d8:fe:10:c1:13:
         99:f7:b8:2b:52:2a:0c:69:d0:d7:0f:dd:ec:52:4e:a0:92:f3:
         9b:b3:a2:a1:f0:4e:1a:09:28:2e:6b:ae:c5:7f:f8:ba:5a:ae:
         77:89:92:7a:81:5b:13:a4:fe:4d:0c:4b:58:4c:de:61:84:bf:
         c9:3c:fb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----