Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/cf0e0f3c-90ac-352c-8c43-44793de8acea.roa
File:                     cf0e0f3c-90ac-352c-8c43-44793de8acea.roa (raw, json)
Hash identifier:          JmYRmD7lMtseAzCcCmJwAHgfz6xPdeeWzBv2MiHKSCc=
Subject key identifier:   1B:86:51:9C:7C:5B:EB:48:DF:81:9B:25:5A:D4:9F:2A:D0:80:68:EF
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328576D51CC73C042CFC1724794DD6C
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/cf0e0f3c-90ac-352c-8c43-44793de8acea.roa
Signing time:             Sun 24 May 2020 16:47:17 +0000
ROA not before:           Wed 04 Apr 2018 04:00:00 +0000
ROA not after:            Sat 27 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2604:bc40:6000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:47:94:dd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Apr  4 04:00:00 2018 GMT
            Not After : Aug 27 04:00:00 2022 GMT
        Subject: CN=1f7ba47b-69da-4288-b62d-e4976fd7862e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:51:8f:dd:2f:7f:13:4c:37:c7:fe:f4:43:
                    67:d4:9c:1a:5b:e6:4c:10:da:0a:76:43:87:97:f3:
                    fc:2e:1b:87:a6:b7:10:20:4d:8f:45:e6:f6:da:fa:
                    7a:0e:a1:9d:a1:e8:f4:08:a0:45:a5:eb:0d:ef:e5:
                    38:88:9b:ea:3e:a5:09:2f:e5:86:97:ef:98:14:23:
                    55:e0:a7:38:1d:bd:5e:1a:33:1f:dd:50:4f:23:7c:
                    41:ee:75:f3:f6:d7:0a:1c:20:05:a4:22:53:ac:6e:
                    ab:62:73:dd:5d:b3:75:1d:17:57:78:5c:b0:52:a7:
                    87:20:86:d5:b3:46:9d:35:93:35:f6:61:cf:28:1f:
                    41:68:ba:c6:57:7e:79:0d:cf:29:c0:f5:b5:67:be:
                    16:06:f8:76:eb:57:06:c3:06:b0:8a:26:4f:7a:64:
                    ea:bb:34:35:04:45:ca:78:f9:b7:4e:e1:72:b7:52:
                    c4:3f:58:02:69:c9:38:be:a6:5a:20:c8:03:cf:f4:
                    72:67:f0:39:3c:9f:5f:28:b1:25:c1:1f:79:e7:a2:
                    09:06:fa:ac:02:68:d1:db:6d:c9:9e:46:ed:b5:52:
                    7c:18:d9:58:41:06:b6:d2:55:88:96:0d:84:4c:9e:
                    6b:ad:b7:06:f7:8d:72:9d:24:d3:ed:7c:1d:08:15:
                    53:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:86:51:9C:7C:5B:EB:48:DF:81:9B:25:5A:D4:9F:2A:D0:80:68:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/cf0e0f3c-90ac-352c-8c43-44793de8acea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:bc40:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0f:0d:b6:15:63:e2:f6:fb:54:02:c5:fa:80:49:e8:77:ea:
         dc:a6:3d:dc:6d:5f:52:63:13:87:c4:b9:ca:18:9c:23:31:78:
         fa:ad:e3:be:ee:13:9e:59:63:97:b4:fa:1a:0b:81:fa:69:d6:
         e6:6d:c7:ef:62:c7:41:a8:5d:ce:91:13:9b:e8:d0:cf:38:b9:
         08:2b:4a:59:88:92:5c:a1:fb:e2:d9:32:88:df:25:d0:53:5e:
         93:40:2e:57:b5:a5:6c:0a:aa:42:5e:78:9b:3f:06:dc:3c:3f:
         e8:79:4e:ad:0b:5f:cd:bb:4c:76:df:55:5c:d2:f0:3d:9b:ee:
         34:7d:c1:8c:fb:96:9c:39:ff:53:21:5b:07:ab:28:18:ed:f2:
         55:7c:ff:80:6f:f3:9e:a7:a3:9a:71:67:72:37:7b:e7:f7:d0:
         a9:a6:0f:a0:3f:c8:dc:0e:db:4b:bc:30:df:20:f4:71:62:22:
         cc:b4:73:81:13:37:ec:05:ff:f1:64:d6:1d:b5:be:e6:39:8c:
         09:88:e2:29:69:f8:74:2c:ac:c6:f5:35:74:50:ba:24:47:e0:
         0d:40:56:41:2f:da:e9:cc:46:8f:99:15:91:99:73:b5:32:77:
         75:c8:d3:d8:04:d0:20:36:1b:2c:9c:75:15:32:3a:e2:41:67:
         50:6e:4d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----